last executing test programs: 2m15.746108887s ago: executing program 3 (id=76714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000140)) 2m15.701563929s ago: executing program 3 (id=76716): r0 = syz_open_procfs(0x0, &(0x7f0000001340)='coredump_filter\x00') write$binfmt_script(r0, 0x0, 0x0) 2m15.701492509s ago: executing program 3 (id=76717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 2m15.701429509s ago: executing program 3 (id=76718): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 2m15.644150021s ago: executing program 3 (id=76720): r0 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 2m15.631504632s ago: executing program 3 (id=76724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000340597f67a41c0213932b820891975f89afe9fe4a47a0adac9c7cf8d6e048b5139a301d8c15e3677ccb623ba6e9f090f2cfc8a8683b312b1063603831e3f6793ae1826fa74b23ab1d43e2c3a0b93a381a602679b066524e5726d272f4c7588d40a91c8dd1d57e1f64ba579793269c2eab3614ba0024fbe1021fb4a115fdf82c8b1eff54d8afc64804e0bdde"], 0x40}}, 0x0) 2m15.565546685s ago: executing program 32 (id=76724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000008000340597f67a41c0213932b820891975f89afe9fe4a47a0adac9c7cf8d6e048b5139a301d8c15e3677ccb623ba6e9f090f2cfc8a8683b312b1063603831e3f6793ae1826fa74b23ab1d43e2c3a0b93a381a602679b066524e5726d272f4c7588d40a91c8dd1d57e1f64ba579793269c2eab3614ba0024fbe1021fb4a115fdf82c8b1eff54d8afc64804e0bdde"], 0x40}}, 0x0) 2m3.187821802s ago: executing program 1 (id=76977): r0 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) setreuid(0x0, 0xee00) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 2m3.186950032s ago: executing program 1 (id=76978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000035000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="66b9800000c00f326635000800000f300f5cb73b64baf80c66b8cf88008966efbafc0cec36260f0118dae90f20e06635000200000f22e00f01b90c003e660f6720f30f2051f30f09", 0x48}], 0x1, 0x28, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m3.115754015s ago: executing program 1 (id=76979): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x9, r2}) 2m3.100363206s ago: executing program 1 (id=76980): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x7ffffffe, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 2m3.040098998s ago: executing program 1 (id=76981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), 0x4) 2m3.039945998s ago: executing program 1 (id=76982): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 1m48.010312188s ago: executing program 33 (id=76982): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 4.882851552s ago: executing program 2 (id=79628): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) 3.639730275s ago: executing program 2 (id=79642): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) timer_create(0x0, 0x0, 0x0) 3.615996276s ago: executing program 2 (id=79643): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2.899132366s ago: executing program 2 (id=79653): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.433379539s ago: executing program 2 (id=79654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.433149979s ago: executing program 2 (id=79655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) memfd_create(&(0x7f0000002240)='key_or_keyring:', 0x2) socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 819.390045ms ago: executing program 4 (id=79719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RMKNOD(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=']) 753.969038ms ago: executing program 4 (id=79726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 733.714448ms ago: executing program 4 (id=79727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x200048c4) 704.2232ms ago: executing program 4 (id=79730): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000002c0)={0xfffffff7, 0x4, 0xa1a0, 0x9, 0x1a, "907a552d4199b85eadc5bf1903e7b4d7d84e61"}) 678.731781ms ago: executing program 4 (id=79732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffff3) 266.206488ms ago: executing program 0 (id=79751): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) 214.607231ms ago: executing program 0 (id=79752): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) 213.921121ms ago: executing program 0 (id=79753): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 143.744824ms ago: executing program 5 (id=79756): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RMKNOD(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x488d5) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=']) 138.624204ms ago: executing program 0 (id=79757): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 121.531435ms ago: executing program 0 (id=79758): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}], [], 0x6b}}) 116.542965ms ago: executing program 5 (id=79759): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000200)=0x80, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0xb, 0x0, 0x0) 77.098056ms ago: executing program 4 (id=79760): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r6, 0x4018aee1, &(0x7f00000001c0)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000140)=0x3}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x16b042, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffff3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) 76.815436ms ago: executing program 5 (id=79761): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x18, r3, 0x8d61ddcfedb48df, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 76.016306ms ago: executing program 0 (id=79762): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x13) waitid(0x1, r4, 0x0, 0x8, 0x0) 20.100729ms ago: executing program 5 (id=79763): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 15.629079ms ago: executing program 5 (id=79764): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 0s ago: executing program 5 (id=79765): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) kernel console output (not intermixed with test programs): or pid=30476 comm="syz.1.76785" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3110.177421][ T10] hid-generic 0003:07C0:1125.002D: hidraw0: USB HID v0.04 Device [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 3110.262031][ T631] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3110.302046][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 3110.377255][ T10] usb 3-1: USB disconnect, device number 97 [ 3110.412010][ T631] usb 2-1: Using ep0 maxpacket: 16 [ 3110.418382][ T631] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3110.428383][ T631] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 3110.438568][ T631] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3110.451581][ T631] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3110.459853][ T631] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3110.468977][ T631] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3110.472030][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 3110.477151][ T631] usb 2-1: Product: syz [ 3110.485542][ T31] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 3110.486398][ T631] usb 2-1: Manufacturer: syz [ 3110.495872][ T31] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 3110.500137][ T631] usb 2-1: SerialNumber: syz [ 3110.513398][ T31] usb 5-1: Product: syz [ 3110.517781][ T31] usb 5-1: Manufacturer: syz [ 3110.522443][ T31] usb 5-1: SerialNumber: syz [ 3110.527945][ T31] usb 5-1: config 0 descriptor?? [ 3110.534097][ T31] usb 5-1: selecting invalid altsetting 1 [ 3110.541890][ T31] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 3110.559389][T25602] udevd[25602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3110.704214][ T631] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 3110.742994][ T31] usb 5-1: USB disconnect, device number 3 [ 3110.906064][ T36] audit: type=1400 audit(1763567695.210:505): avc: denied { read write } for pid=30487 comm="syz.1.76789" name="lp0" dev="devtmpfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 3110.930474][ T36] audit: type=1400 audit(1763567695.210:506): avc: denied { open } for pid=30487 comm="syz.1.76789" path="/dev/usb/lp0" dev="devtmpfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 3110.954783][ T36] audit: type=1400 audit(1763567695.210:507): avc: denied { ioctl } for pid=30487 comm="syz.1.76789" path="/dev/usb/lp0" dev="devtmpfs" ino=3776 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 3111.102015][ T631] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 3111.250840][T30520] bpf: Bad value for 'gid' [ 3111.257406][ T631] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3111.274315][ T631] usb 1-1: can't read configurations, error -71 [ 3111.632012][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3111.782028][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 3111.788419][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 3111.796876][ T10] usb 3-1: config 0 has no interface number 0 [ 3111.804657][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3111.813908][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3111.822036][ T10] usb 3-1: Product: syz [ 3111.826415][ T10] usb 3-1: Manufacturer: syz [ 3111.831116][ T10] usb 3-1: SerialNumber: syz [ 3111.837026][ T10] usb 3-1: config 0 descriptor?? [ 3112.353432][T30572] kvm: Disabled LAPIC found during irq injection [ 3112.405189][T30575] netlink: 104 bytes leftover after parsing attributes in process `syz.0.76829'. [ 3112.532021][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 3112.658818][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 3112.658836][ T36] audit: type=1400 audit(1763567696.960:512): avc: denied { setopt } for pid=30596 comm="syz.0.76839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3112.684703][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 3112.691008][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3112.701988][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3112.708736][ T10] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 3112.717933][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3112.729790][ T10] usb 5-1: config 0 descriptor?? [ 3112.831618][ T36] audit: type=1400 audit(1763567697.130:513): avc: denied { write } for pid=631 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=1198647 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3112.900977][T30604] input: syz0 as /devices/virtual/input/input277 [ 3113.045842][ T339] usb 2-1: USB disconnect, device number 102 [ 3113.054730][ T339] usblp0: removed [ 3113.065338][T30622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.76851'. [ 3113.129851][T30630] veth0_vlan: entered allmulticast mode [ 3113.140407][T30630] veth0_vlan: left promiscuous mode [ 3113.141541][ T10] ortek 0003:05A4:8003.002E: unknown global tag 0xd [ 3113.146120][T30630] veth0_vlan: entered promiscuous mode [ 3113.161398][ T10] ortek 0003:05A4:8003.002E: item 0 2 1 13 parsing failed [ 3113.170286][ T10] ortek 0003:05A4:8003.002E: probe with driver ortek failed with error -22 [ 3113.195508][ T36] audit: type=1400 audit(1763567697.500:514): avc: denied { ioctl } for pid=30633 comm="syz.1.76857" path="pid:[4026532301]" dev="nsfs" ino=4026532301 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3113.262035][ T631] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 3113.367718][ T339] usb 5-1: USB disconnect, device number 4 [ 3113.412056][ T631] usb 1-1: Using ep0 maxpacket: 8 [ 3113.419818][ T631] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 3113.429159][ T631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3113.437854][ T631] usb 1-1: Product: syz [ 3113.442104][ T631] usb 1-1: Manufacturer: syz [ 3113.446796][ T631] usb 1-1: SerialNumber: syz [ 3113.452644][ T631] usb 1-1: config 0 descriptor?? [ 3113.622016][ T31] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3113.772029][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 3113.778662][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3113.790183][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3113.803135][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 3113.812491][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3113.821438][ T31] usb 2-1: config 0 descriptor?? [ 3114.142024][ T631] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 3114.230194][ T31] playstation 0003:054C:0DF2.002F: item fetching failed at offset 3/5 [ 3114.238788][ T31] playstation 0003:054C:0DF2.002F: Parse failed [ 3114.245522][ T31] playstation 0003:054C:0DF2.002F: probe with driver playstation failed with error -22 [ 3114.293380][ T631] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3114.300119][ T631] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 3114.309258][ T631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.318368][ T631] usb 5-1: config 0 descriptor?? [ 3114.405720][T27974] usb 3-1: USB disconnect, device number 98 [ 3114.430699][ T31] usb 2-1: USB disconnect, device number 103 [ 3114.727446][ T631] betop 0003:8380:1850.0030: unknown main item tag 0x0 [ 3114.735174][ T631] betop 0003:8380:1850.0030: hidraw0: USB HID v0.01 Device [HID 8380:1850] on usb-dummy_hcd.4-1/input0 [ 3114.746385][T27974] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 3114.746501][ T631] betop 0003:8380:1850.0030: no inputs found [ 3114.903291][T27974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3114.913746][T27974] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 3114.923039][T27974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.931999][T27974] usb 3-1: config 0 descriptor?? [ 3114.936375][ T31] usb 5-1: USB disconnect, device number 5 [ 3115.148766][ T31] usb 3-1: USB disconnect, device number 99 [ 3115.192114][ T339] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3115.342124][ T339] usb 2-1: Using ep0 maxpacket: 32 [ 3115.348508][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3115.359464][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3115.369475][ T339] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 3115.378729][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3115.387383][ T339] usb 2-1: config 0 descriptor?? [ 3115.794614][T30701] tmpfs: Unsupported parameter 'mpol' [ 3115.804253][ T339] elo 0003:04E7:0009.0031: unknown main item tag 0x0 [ 3115.811108][ T339] elo 0003:04E7:0009.0031: unknown main item tag 0x0 [ 3115.833993][T13979] bridge_slave_1: left allmulticast mode [ 3115.839705][T13979] bridge_slave_1: left promiscuous mode [ 3115.845844][ T339] elo 0003:04E7:0009.0031: unknown main item tag 0x0 [ 3115.853107][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3115.862055][ T339] elo 0003:04E7:0009.0031: unknown main item tag 0x0 [ 3115.870277][T13979] bridge_slave_0: left allmulticast mode [ 3115.876433][ T339] elo 0003:04E7:0009.0031: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 3115.880689][T13979] bridge_slave_0: left promiscuous mode [ 3115.893636][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.018991][ T339] usb 2-1: USB disconnect, device number 104 [ 3116.026340][T13979] veth1_macvtap: left promiscuous mode [ 3116.032578][T13979] veth0_vlan: left promiscuous mode [ 3116.045936][T30667] usb 1-1: USB disconnect, device number 99 [ 3116.099262][T30705] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.106756][T30705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.114041][T30705] bridge_slave_0: entered allmulticast mode [ 3116.120453][T30705] bridge_slave_0: entered promiscuous mode [ 3116.127198][T30705] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.136640][T30705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3116.143904][T30705] bridge_slave_1: entered allmulticast mode [ 3116.150931][T30705] bridge_slave_1: entered promiscuous mode [ 3116.241595][T30705] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.248735][T30705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3116.256105][T30705] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.263193][T30705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3116.287212][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.294862][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3116.304674][ T2143] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.311865][ T2143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3116.322710][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.329840][T20033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3116.357753][T30705] veth0_vlan: entered promiscuous mode [ 3116.368839][T30705] veth1_macvtap: entered promiscuous mode [ 3116.402027][T30667] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 3116.425908][T30742] syz.2.76900(30742): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 3116.472006][T27974] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 3116.536217][ T36] audit: type=1400 audit(1763567700.840:515): avc: denied { map } for pid=30748 comm="syz.2.76903" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 3116.559452][T30667] usb 1-1: Using ep0 maxpacket: 16 [ 3116.565613][T30667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3116.583900][T30667] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 3116.602232][T30667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.615174][T30667] usb 1-1: config 0 descriptor?? [ 3116.643730][T27974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3116.658813][T27974] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 3116.668265][T27974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3116.688252][T27974] usb 5-1: config 0 descriptor?? [ 3116.693795][ T36] audit: type=1400 audit(1763567700.990:516): avc: denied { execute } for pid=30764 comm="syz.2.76911" path="/8/blkio.bfq.group_wait_time" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3116.721097][ T36] audit: type=1400 audit(1763567701.010:517): avc: denied { remount } for pid=30762 comm="syz.1.76910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3116.902533][T30788] tmpfs: Unknown parameter 'usrquota' [ 3117.026339][T30667] nintendo 0003:057E:200E.0032: unknown main item tag 0x0 [ 3117.033723][T30667] nintendo 0003:057E:200E.0032: unknown main item tag 0x0 [ 3117.040907][T30667] nintendo 0003:057E:200E.0032: unknown main item tag 0x0 [ 3117.048150][T30667] nintendo 0003:057E:200E.0032: unknown main item tag 0x0 [ 3117.055653][T30667] nintendo 0003:057E:200E.0032: unknown main item tag 0x0 [ 3117.063790][T30667] nintendo 0003:057E:200E.0032: hidraw0: USB HID v80.05 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 3117.132212][T30667] nintendo 0003:057E:200E.0032: Failed charging grip handshake [ 3117.140357][T30667] nintendo 0003:057E:200E.0032: Failed to initialize controller; ret=-110 [ 3117.151433][T30667] nintendo 0003:057E:200E.0032: probe - fail = -110 [ 3117.158484][T30667] nintendo 0003:057E:200E.0032: probe with driver nintendo failed with error -110 [ 3117.160297][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.177227][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.184292][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.191032][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.197818][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.204655][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.211370][T27974] nti 0003:0757:0A00.0033: unknown main item tag 0x0 [ 3117.218910][T27974] nti 0003:0757:0A00.0033: hidraw0: USB HID v0.03 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 3117.234595][ T10] usb 1-1: USB disconnect, device number 100 [ 3117.270221][T30803] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3117.352496][T30808] netlink: 'syz.2.76929': attribute type 46 has an invalid length. [ 3117.360631][T30808] netlink: 44 bytes leftover after parsing attributes in process `syz.2.76929'. [ 3117.374390][T30667] usb 5-1: USB disconnect, device number 6 [ 3117.767675][ T36] audit: type=1400 audit(1763567958.069:518): avc: denied { create } for pid=30822 comm="syz.0.76936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3117.902027][ T10] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3117.932177][ T36] audit: type=1400 audit(1763567958.239:519): avc: denied { mounton } for pid=30832 comm="syz.4.76941" path="/63/file3" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 3117.955934][T30833] tmpfs: Unsupported parameter 'mpol' [ 3118.046041][ T36] audit: type=1400 audit(1763567958.349:520): avc: denied { create } for pid=30843 comm="syz.0.76946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3118.094347][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3118.105474][ T10] usb 2-1: config 9 has an invalid interface number: 145 but max is 0 [ 3118.115559][ T10] usb 2-1: config 9 has no interface number 0 [ 3118.121797][ T10] usb 2-1: config 9 interface 145 has no altsetting 0 [ 3118.130179][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=66.17 [ 3118.139606][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.147982][ T10] usb 2-1: Product: syz [ 3118.152378][ T10] usb 2-1: Manufacturer: syz [ 3118.157216][ T10] usb 2-1: SerialNumber: syz [ 3118.241981][T32028] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 3118.273990][ T36] audit: type=1400 audit(1763567958.579:521): avc: denied { execute_no_trans } for pid=30851 comm="syz.2.76950" path="/27/file1" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3118.341135][ T36] audit: type=1326 audit(1763567958.639:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30857 comm="syz.2.76953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9adf8f749 code=0x0 [ 3118.364686][T30667] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 3118.370886][ T10] usb 2-1: USB disconnect, device number 105 [ 3118.411948][T32028] usb 5-1: Using ep0 maxpacket: 32 [ 3118.418564][T32028] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 3118.427107][T32028] usb 5-1: config 0 has no interface number 0 [ 3118.434048][T32028] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3118.446054][T32028] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3118.455199][T32028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.463529][T32028] usb 5-1: Product: syz [ 3118.467721][T32028] usb 5-1: Manufacturer: syz [ 3118.472403][T32028] usb 5-1: SerialNumber: syz [ 3118.477808][T32028] usb 5-1: config 0 descriptor?? [ 3118.483257][T30837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3118.523220][T30667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3118.533450][T30667] usb 1-1: config 0 has no interfaces? [ 3118.539102][T30667] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3118.548233][T30667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3118.557527][T30667] usb 1-1: config 0 descriptor?? [ 3118.693122][T30837] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3118.850312][T27974] usb 1-1: USB disconnect, device number 101 [ 3119.456695][ T36] audit: type=1400 audit(1763567959.759:523): avc: denied { mount } for pid=30878 comm="syz.0.76961" name="/" dev="ramfs" ino=1200363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 3119.992656][T30912] batadv_slave_0: entered promiscuous mode [ 3119.999204][T30911] batadv_slave_0: left promiscuous mode [ 3120.711703][T32028] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3120.721969][T32028] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 3120.733549][T32028] asix 5-1:0.188: probe with driver asix failed with error -71 [ 3120.742391][T32028] usb 5-1: USB disconnect, device number 7 [ 3120.871641][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 3120.941667][T30667] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3121.021587][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 3121.028198][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 3121.036698][ T10] usb 1-1: config 0 has no interface number 0 [ 3121.042865][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3121.054349][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3121.063536][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.071692][ T10] usb 1-1: Product: syz [ 3121.075940][ T10] usb 1-1: Manufacturer: syz [ 3121.080533][ T10] usb 1-1: SerialNumber: syz [ 3121.085948][ T10] usb 1-1: config 0 descriptor?? [ 3121.091269][T30938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3121.101571][T30667] usb 3-1: Using ep0 maxpacket: 16 [ 3121.107989][T30667] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 3121.116644][T30667] usb 3-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 3121.126985][T30667] usb 3-1: config 254 has no interface number 0 [ 3121.133404][T30667] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3121.143469][T30667] usb 3-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3121.157410][T30667] usb 3-1: config 254 interface 235 has no altsetting 0 [ 3121.166040][T30667] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 3121.175165][T30667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.183323][T30667] usb 3-1: Product: syz [ 3121.187520][T30667] usb 3-1: Manufacturer: syz [ 3121.192194][T30667] usb 3-1: SerialNumber: syz [ 3121.267456][ T36] audit: type=1400 audit(1763567961.569:524): avc: denied { setopt } for pid=30947 comm="syz.4.76992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3121.300963][T30938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3121.366745][ T36] audit: type=1400 audit(1763567961.669:525): avc: denied { mounton } for pid=30957 comm="syz.4.76997" path="/73/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 3121.366991][T30958] 9pnet_fd: p9_fd_create_unix (30958): problem connecting socket: ./file0: -30 [ 3121.401695][T30667] usb 3-1: USB disconnect, device number 100 [ 3121.441518][ T36] audit: type=1400 audit(1763567961.739:526): avc: denied { getopt } for pid=30961 comm="syz.4.76999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3121.711572][ T339] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 3121.862746][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 3121.874093][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3121.883925][ T339] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 3121.893023][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3121.901957][ T339] usb 5-1: config 0 descriptor?? [ 3122.161496][T30667] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 3122.310515][ T339] cherry 0003:046A:0023.0034: item fetching failed at offset 5/7 [ 3122.318641][ T339] cherry 0003:046A:0023.0034: probe with driver cherry failed with error -22 [ 3122.329494][T30667] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 3122.338356][T30667] usb 3-1: config 1 has no interface number 0 [ 3122.344640][T30667] usb 3-1: config 1 interface 105 has no altsetting 0 [ 3122.353154][T30667] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 3122.362292][T30667] usb 3-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 3122.370883][T30667] usb 3-1: Product: syz [ 3122.375196][T30667] usb 3-1: Manufacturer: syz [ 3122.379819][T30667] usb 3-1: SerialNumber: syz [ 3122.511691][T12974] usb 5-1: USB disconnect, device number 8 [ 3122.714176][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3122.724714][ T10] asix 1-1:0.188: probe with driver asix failed with error -71 [ 3122.733441][ T10] usb 1-1: USB disconnect, device number 102 [ 3122.989778][T30667] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 3123.000730][T30667] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 3123.009744][T30667] usb 3-1: USB disconnect, device number 101 [ 3123.235533][ T36] audit: type=1400 audit(1763567963.540:527): avc: denied { read } for pid=30981 comm="syz.0.77009" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3123.236901][T30982] deleting an unspecified loop device is not supported. [ 3123.259936][ T36] audit: type=1400 audit(1763567963.540:528): avc: denied { open } for pid=30981 comm="syz.0.77009" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3123.292182][ T36] audit: type=1400 audit(1763567963.540:529): avc: denied { ioctl } for pid=30981 comm="syz.0.77009" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3123.535190][T31012] random: crng reseeded on system resumption [ 3123.574207][ T36] audit: type=1400 audit(1763567963.880:530): avc: denied { ioctl } for pid=31011 comm="syz.4.77024" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3123.599431][T30667] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 3123.666831][ T36] audit: type=1400 audit(1763567963.970:531): avc: denied { create } for pid=31021 comm="syz.4.77029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3123.741325][T12974] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3123.761274][T30667] usb 1-1: Using ep0 maxpacket: 8 [ 3123.767512][T30667] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3123.777323][T30667] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3123.788430][T30667] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 3123.797809][T30667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.806051][T30667] usb 1-1: Product: syz [ 3123.810234][T30667] usb 1-1: Manufacturer: syz [ 3123.814993][T30667] usb 1-1: SerialNumber: syz [ 3123.820670][T30667] usb 1-1: config 0 descriptor?? [ 3123.891221][T12974] usb 3-1: Using ep0 maxpacket: 32 [ 3123.901584][T12974] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 3123.909767][T12974] usb 3-1: config 0 has no interface number 0 [ 3123.917401][T12974] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3123.926647][T12974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.934679][T12974] usb 3-1: Product: syz [ 3123.938887][T12974] usb 3-1: Manufacturer: syz [ 3123.943544][T12974] usb 3-1: SerialNumber: syz [ 3123.948948][T12974] usb 3-1: config 0 descriptor?? [ 3123.954888][T12974] smsc95xx v2.0.0 [ 3124.141272][ T10] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 3124.292517][ T10] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 3124.301029][ T10] usb 5-1: config 150 has no interface number 0 [ 3124.307660][ T10] usb 5-1: config 150 interface 204 has no altsetting 0 [ 3124.314805][ T10] usb 5-1: config 150 interface 1 has no altsetting 0 [ 3124.323301][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 3124.332438][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3124.340471][ T10] usb 5-1: Product: syz [ 3124.344694][ T10] usb 5-1: Manufacturer: syz [ 3124.349581][ T10] usb 5-1: SerialNumber: syz [ 3124.356194][T12974] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3124.367264][T12974] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3124.562097][ T10] usb 5-1: USB disconnect, device number 9 [ 3125.086637][ T36] audit: type=1400 audit(1763567965.390:532): avc: denied { bind } for pid=31037 comm="syz.4.77036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3125.351045][T30667] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3125.379289][T12974] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 3125.390233][T12974] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 3125.399585][T12974] usb 3-1: USB disconnect, device number 102 [ 3125.501023][T30667] usb 5-1: Using ep0 maxpacket: 16 [ 3125.507458][T30667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 3125.518560][T30667] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 3125.531253][T30667] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3125.540338][T30667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.548379][T30667] usb 5-1: Product: syz [ 3125.552632][T30667] usb 5-1: Manufacturer: syz [ 3125.557497][T30667] usb 5-1: SerialNumber: syz [ 3125.563263][T30667] usb 5-1: config 0 descriptor?? [ 3125.770571][T30667] usb 5-1: USB disconnect, device number 10 [ 3126.130961][ T10] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3126.283012][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3126.297972][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3126.307289][ T10] usb 3-1: config 1 has no interface number 0 [ 3126.313757][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3126.324985][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 3126.335500][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3126.344967][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3126.353188][ T10] usb 3-1: Product: syz [ 3126.357485][ T10] usb 3-1: Manufacturer: syz [ 3126.362152][ T10] usb 3-1: SerialNumber: syz [ 3126.365481][T30667] usb 1-1: USB disconnect, device number 103 [ 3126.530544][T20033] Bluetooth: hci0: Frame reassembly failed (-84) [ 3126.537390][T31063] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 3126.550925][T12974] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3126.702216][T12974] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3126.711036][T12974] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3126.721415][T12974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3126.730425][T12974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 3126.741488][T12974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 3126.754985][T12974] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3126.764203][T12974] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3126.772610][T12974] usb 5-1: Product: syz [ 3126.777358][T12974] usb 5-1: Manufacturer: syz [ 3126.784176][T12974] cdc_wdm 5-1:1.0: skipping garbage [ 3126.789520][T12974] cdc_wdm 5-1:1.0: skipping garbage [ 3126.795780][T12974] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 3126.801772][T12974] cdc_wdm 5-1:1.0: Unknown control protocol [ 3126.986307][T12974] usb 5-1: USB disconnect, device number 11 [ 3127.179590][ T10] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 3127.197589][ T10] cdc_ncm 3-1:1.1: bind() failure [ 3127.203830][ T10] usb 3-1: USB disconnect, device number 103 [ 3127.794719][ T36] audit: type=1400 audit(1763567968.100:533): avc: denied { read write } for pid=31072 comm="syz.2.77052" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3127.818751][ T36] audit: type=1400 audit(1763567968.100:534): avc: denied { open } for pid=31072 comm="syz.2.77052" path="/47/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 3127.913936][T31086] tmpfs: Unknown parameter 'quota' [ 3128.110581][ T631] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3128.160519][T12974] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3128.260434][ T631] usb 3-1: Using ep0 maxpacket: 16 [ 3128.266787][ T631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3128.277889][ T631] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 3128.286984][ T631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3128.295866][ T631] usb 3-1: config 0 descriptor?? [ 3128.321615][T12974] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 3128.333395][T12974] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 3128.342522][T12974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3128.350826][T12974] usb 5-1: Product: syz [ 3128.355017][T12974] usb 5-1: Manufacturer: syz [ 3128.359650][T12974] usb 5-1: SerialNumber: syz [ 3128.567695][T12974] usb 5-1: USB disconnect, device number 12 [ 3128.590291][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 3128.590291][T31065] Bluetooth: hci0: command 0x1003 tx timeout [ 3128.631096][T31092] netlink: 300 bytes leftover after parsing attributes in process `syz.0.77061'. [ 3128.703974][ T631] greenasia 0003:0E8F:0012.0035: collection stack underflow [ 3128.711434][ T631] greenasia 0003:0E8F:0012.0035: item 0 4 0 12 parsing failed [ 3128.719130][ T631] greenasia 0003:0E8F:0012.0035: parse failed [ 3128.725277][ T631] greenasia 0003:0E8F:0012.0035: probe with driver greenasia failed with error -22 [ 3128.904463][ T631] usb 3-1: USB disconnect, device number 104 [ 3128.920331][T30667] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 3129.071393][T30667] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 3129.079711][T30667] usb 1-1: config 0 has no interface number 0 [ 3129.087664][T30667] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 3129.096991][T30667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3129.105326][T30667] usb 1-1: Product: syz [ 3129.109582][T30667] usb 1-1: Manufacturer: syz [ 3129.114472][T30667] usb 1-1: SerialNumber: syz [ 3129.120186][T30667] usb 1-1: config 0 descriptor?? [ 3129.156484][T31102] tmpfs: Unsupported parameter 'mpol' [ 3129.459906][T12974] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3129.534131][T30667] usb 1-1: USB disconnect, device number 104 [ 3129.548070][T25602] udevd[25602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3129.619889][T12974] usb 5-1: Using ep0 maxpacket: 8 [ 3129.626256][T12974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3129.636521][T12974] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 3129.645753][T12974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3129.654626][T12974] usb 5-1: config 0 descriptor?? [ 3129.849725][T13273] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 3130.000733][T13273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3130.011802][T13273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3130.021702][T13273] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 3130.030799][T13273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.039924][T13273] usb 3-1: config 0 descriptor?? [ 3130.064655][T12974] wacom 0003:056A:00B8.0036: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 3130.075001][T12974] wacom 0003:056A:00B8.0036: hidraw0: USB HID v5.59 Device [HID 056a:00b8] on usb-dummy_hcd.4-1/input0 [ 3130.091903][T12974] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B8.0036/input/input280 [ 3130.271664][T32028] usb 5-1: USB disconnect, device number 13 [ 3130.313441][ T36] audit: type=1400 audit(1763567970.621:535): avc: denied { mounton } for pid=31136 comm="syz.0.77082" path="/362/file0" dev="tmpfs" ino=2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3130.450924][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.457877][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.464733][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.471586][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.478408][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.485267][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.492123][T13273] isku 0003:1E7D:319C.0037: unknown main item tag 0x0 [ 3130.499687][T13273] isku 0003:1E7D:319C.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 3130.650615][T13273] isku 0003:1E7D:319C.0037: couldn't init struct isku_device [ 3130.658112][T13273] isku 0003:1E7D:319C.0037: couldn't install keyboard [ 3130.665757][T13273] isku 0003:1E7D:319C.0037: probe with driver isku failed with error -71 [ 3130.675643][T13273] usb 3-1: USB disconnect, device number 105 [ 3131.119331][T32028] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3131.269247][T32028] usb 5-1: Using ep0 maxpacket: 16 [ 3131.275707][T32028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3131.286925][T32028] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3131.296097][T32028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.305061][T32028] usb 5-1: config 0 descriptor?? [ 3131.409296][T12974] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3131.559121][T12974] usb 3-1: Using ep0 maxpacket: 16 [ 3131.565466][T12974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3131.575669][T12974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3131.586739][T12974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3131.596530][T12974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3131.606471][T12974] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3131.620320][T12974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3131.629455][T12974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3131.637479][T12974] usb 3-1: Manufacturer: syz [ 3131.642907][T12974] usb 3-1: config 0 descriptor?? [ 3131.715416][T32028] lua 0003:1E7D:2C2E.0038: hidraw0: USB HID v20.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.4-1/input0 [ 3131.917956][ T631] usb 5-1: USB disconnect, device number 14 [ 3132.447598][T31165] 8021q: VLANs not supported on ip6tnl0 [ 3132.447611][ T36] audit: type=1400 audit(1763567972.742:536): avc: denied { ioctl } for pid=31164 comm="syz.4.77094" path="socket:[1201783]" dev="sockfs" ino=1201783 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3132.511101][T31171] mmap: syz.4.77097 (31171) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 3132.888612][T12974] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3133.038531][T12974] usb 5-1: Using ep0 maxpacket: 32 [ 3133.045132][T12974] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 3133.053400][T12974] usb 5-1: config 0 has no interface number 0 [ 3133.059544][T12974] usb 5-1: config 0 interface 239 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 3133.069577][T12974] usb 5-1: config 0 interface 239 has no altsetting 0 [ 3133.077979][T12974] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=ab.3c [ 3133.087208][T12974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.095373][T12974] usb 5-1: Product: syz [ 3133.099859][T12974] usb 5-1: Manufacturer: syz [ 3133.104487][T12974] usb 5-1: SerialNumber: syz [ 3133.109825][T12974] usb 5-1: config 0 descriptor?? [ 3133.115367][T31187] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3133.325163][T32028] usb 5-1: USB disconnect, device number 15 [ 3133.728254][T12974] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 3133.879412][T12974] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3133.887663][T12974] usb 1-1: config 0 has no interface number 0 [ 3133.895379][T12974] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3133.904517][T12974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3133.912563][T12974] usb 1-1: Product: syz [ 3133.916745][T12974] usb 1-1: Manufacturer: syz [ 3133.921377][T12974] usb 1-1: SerialNumber: syz [ 3133.926721][T12974] usb 1-1: config 0 descriptor?? [ 3134.088133][T32028] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3134.134195][T12974] usb 1-1: USB disconnect, device number 105 [ 3134.185558][ T631] usb 3-1: USB disconnect, device number 106 [ 3134.232174][T31202] kernel profiling enabled (shift: 63) [ 3134.237664][T31202] profiling shift: 63 too large [ 3134.238194][T32028] usb 5-1: Using ep0 maxpacket: 16 [ 3134.248893][T32028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3134.260397][T32028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3134.270451][T32028] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3134.297250][T32028] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3134.306483][T32028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3134.315361][T32028] usb 5-1: config 0 descriptor?? [ 3134.505642][T31215] netlink: 188 bytes leftover after parsing attributes in process `syz.2.77118'. [ 3134.537492][ T36] audit: type=1400 audit(1763567974.833:537): avc: denied { sqpoll } for pid=31216 comm="syz.2.77119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3134.566664][T31221] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 3134.566694][T31221] rust_binder: Read failure Err(EFAULT) in pid:146 [ 3134.577371][ T36] audit: type=1400 audit(1763567974.873:538): avc: denied { transfer } for pid=31220 comm="syz.2.77120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3134.577418][T31221] rust_binder: Error while translating object. [ 3134.604228][T31221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 3134.610660][T31221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 3134.739579][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.771839][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.779204][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.786850][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.794224][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.801615][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.808970][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.816317][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.824102][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.831620][T32028] microsoft 0003:045E:07DA.0039: unknown main item tag 0x0 [ 3134.847875][T32028] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0039/input/input283 [ 3134.869989][T32028] microsoft 0003:045E:07DA.0039: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 3134.942263][T32028] usb 5-1: USB disconnect, device number 16 [ 3134.948405][ T631] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3135.111427][T31243] random: crng reseeded on system resumption [ 3135.128942][ T631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3135.147458][ T36] audit: type=1400 audit(1763567975.443:539): avc: denied { read } for pid=31242 comm="syz.0.77130" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3135.147737][ T631] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3135.207678][ T631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3135.237974][ T631] usb 3-1: config 0 descriptor?? [ 3135.352397][T31250] netlink: 'syz.0.77134': attribute type 1 has an invalid length. [ 3135.360411][T31250] netlink: 'syz.0.77134': attribute type 2 has an invalid length. [ 3135.369771][T31250] netlink: 'syz.0.77134': attribute type 4 has an invalid length. [ 3135.379127][T31250] netlink: 'syz.0.77134': attribute type 2 has an invalid length. [ 3135.388144][T20033] bridge_slave_1: left allmulticast mode [ 3135.395575][T20033] bridge_slave_1: left promiscuous mode [ 3135.407679][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3135.422417][T20033] bridge_slave_0: left allmulticast mode [ 3135.428451][T20033] bridge_slave_0: left promiscuous mode [ 3135.438369][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3135.461150][T31255] random: crng reseeded on system resumption [ 3135.589949][ T36] audit: type=1400 audit(1763567975.893:540): avc: denied { read } for pid=31260 comm="syz.4.77139" path="socket:[1202574]" dev="sockfs" ino=1202574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 3135.616060][T20033] veth1_macvtap: left promiscuous mode [ 3135.621907][T20033] veth0_vlan: left promiscuous mode [ 3135.711665][T31251] bridge0: port 1(bridge_slave_0) entered blocking state [ 3135.720497][T31251] bridge0: port 1(bridge_slave_0) entered disabled state [ 3135.727915][T31251] bridge_slave_0: entered allmulticast mode [ 3135.734416][T31251] bridge_slave_0: entered promiscuous mode [ 3135.741179][T31251] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.748344][T31251] bridge0: port 2(bridge_slave_1) entered disabled state [ 3135.755935][T31251] bridge_slave_1: entered allmulticast mode [ 3135.762414][T31251] bridge_slave_1: entered promiscuous mode [ 3135.852630][T31251] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.859835][T31251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3135.867140][T31251] bridge0: port 1(bridge_slave_0) entered blocking state [ 3135.874242][T31251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3135.904953][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3135.913091][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3135.929228][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3135.936410][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3135.944336][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 3135.951694][T13979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3135.990329][T31251] veth0_vlan: entered promiscuous mode [ 3136.005285][T31251] veth1_macvtap: entered promiscuous mode [ 3136.067364][ T631] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 3136.228662][ T631] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 3136.239649][ T631] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3136.249810][ T631] usb 5-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 3136.263438][ T631] usb 5-1: config 1 interface 0 has no altsetting 0 [ 3136.271383][ T631] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3136.280835][T13817] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 3136.288821][ T631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3136.296994][ T631] usb 5-1: SerialNumber: syz [ 3136.304540][ T631] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 3136.312790][ T631] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 3136.390368][ T36] audit: type=1400 audit(1763567976.694:541): avc: denied { write } for pid=31308 comm="syz.5.77155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3136.438380][T13817] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 3136.450542][T13817] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 3136.459937][T13817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3136.467991][T13817] usb 1-1: Product: syz [ 3136.472203][T13817] usb 1-1: Manufacturer: syz [ 3136.476907][T13817] usb 1-1: SerialNumber: syz [ 3136.506458][T13273] usb 5-1: USB disconnect, device number 17 [ 3136.677163][ T631] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 3136.687563][T13817] usb 1-1: USB disconnect, device number 106 [ 3136.828731][ T631] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3136.839526][ T631] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3136.852869][ T631] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3136.862149][ T631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.872603][ T631] usb 6-1: config 0 descriptor?? [ 3136.878647][ T631] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3137.167871][ T10] usb 6-1: USB disconnect, device number 2 [ 3137.208458][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77159'. [ 3137.256992][ T631] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 3137.418317][ T631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3137.429472][ T631] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2031, setting to 64 [ 3137.440807][ T631] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 3137.450306][ T631] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3137.464059][ T631] usb 5-1: config 0 descriptor?? [ 3137.469659][T31317] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3137.746897][T30667] usb 3-1: USB disconnect, device number 107 [ 3137.884838][ T631] hid-generic 0003:17EF:60FE.003A: unknown main item tag 0x0 [ 3137.893272][ T631] hid-generic 0003:17EF:60FE.003A: item fetching failed at offset 6/7 [ 3137.902309][ T631] hid-generic 0003:17EF:60FE.003A: probe with driver hid-generic failed with error -22 [ 3138.085781][T12974] usb 5-1: USB disconnect, device number 18 [ 3138.236666][T30667] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3138.387837][T30667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3138.399523][T30667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3138.410128][T30667] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3138.419329][T30667] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 3138.428264][T30667] usb 3-1: Manufacturer: syz [ 3138.433603][T30667] usb 3-1: config 0 descriptor?? [ 3138.556498][ T631] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 3138.615861][T31376] tmpfs: Unknown parameter 'usrquota' [ 3138.707766][ T631] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3138.718320][ T631] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3138.727464][ T631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3138.735522][ T631] usb 1-1: Product: syz [ 3138.739749][ T631] usb 1-1: Manufacturer: syz [ 3138.744380][ T631] usb 1-1: SerialNumber: syz [ 3138.886340][T13817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3138.955093][ T631] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 3138.965074][ T631] usb 1-1: USB disconnect, device number 107 [ 3138.978233][T25602] udevd[25602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3139.037690][T13817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3139.048864][T13817] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 3139.061911][T13817] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3139.072007][T13817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.080201][T13817] usb 6-1: Product: syz [ 3139.084562][T13817] usb 6-1: Manufacturer: syz [ 3139.089457][T13817] usb 6-1: SerialNumber: syz [ 3139.451202][T30667] uclogic 0003:256C:006D.003B: v1 frame probing failed: -71 [ 3139.458858][T30667] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 3139.466692][T30667] uclogic 0003:256C:006D.003B: probe with driver uclogic failed with error -71 [ 3139.477280][T30667] usb 3-1: USB disconnect, device number 108 [ 3140.098371][T13817] cdc_ncm 6-1:1.0: bind() failure [ 3140.107310][T13817] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 3140.115628][T13817] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 3140.125154][T13817] usb 6-1: USB disconnect, device number 3 [ 3140.345974][T30667] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3140.390303][ T36] audit: type=1326 audit(1763567980.695:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31400 comm="syz.4.77194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de5b8f749 code=0x7fc00000 [ 3140.495744][T30667] usb 3-1: Using ep0 maxpacket: 16 [ 3140.502191][T30667] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 3140.515682][T30667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.524538][T30667] usb 3-1: config 0 descriptor?? [ 3140.530708][T30667] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 3140.665695][T13817] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 3140.731362][T30667] usb 3-1: Detected FT232B [ 3140.815640][T13817] usb 5-1: Using ep0 maxpacket: 8 [ 3140.823579][T13817] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 3140.837656][T13817] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 3140.848891][T13817] usb 5-1: config 127 has no interface number 1 [ 3140.858067][T13817] usb 5-1: config 127 interface 171 has no altsetting 0 [ 3140.866071][T31456] tipc: Enabling of bearer rejected, media not registered [ 3140.870685][T13817] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 3140.883306][T13817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3140.893480][T13817] usb 5-1: Product: syz [ 3140.897731][T13817] usb 5-1: Manufacturer: syz [ 3140.902668][T13817] usb 5-1: SerialNumber: syz [ 3140.934855][T30667] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3140.942174][T30667] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3140.949969][T30667] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3140.959140][T30667] usb 3-1: USB disconnect, device number 109 [ 3140.966304][T30667] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3140.975966][T30667] ftdi_sio 3-1:0.0: device disconnected [ 3141.114360][T13817] usb 5-1: USB disconnect, device number 19 [ 3141.135541][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3141.286657][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 3141.295846][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3141.304569][ T31] usb 6-1: config 0 descriptor?? [ 3141.925175][T13817] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3142.075172][T13817] usb 5-1: Using ep0 maxpacket: 32 [ 3142.085899][T13817] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 3142.095119][T13817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3142.104151][T13817] usb 5-1: config 0 descriptor?? [ 3142.123823][T31481] netlink: 32 bytes leftover after parsing attributes in process `syz.0.77230'. [ 3142.156906][T31485] rust_binder: Write failure EFAULT in pid:864 [ 3142.914796][T13817] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3143.074708][T13817] usb 3-1: Using ep0 maxpacket: 16 [ 3143.081261][T13817] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3143.091404][T13817] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 3143.101300][T13817] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3143.115059][T13817] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3143.123304][T13817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3143.132420][T13817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3143.140464][T13817] usb 3-1: Product: syz [ 3143.144685][T13817] usb 3-1: Manufacturer: syz [ 3143.149566][T13817] usb 3-1: SerialNumber: syz [ 3143.358048][T13817] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 3143.559571][ T631] usb 3-1: USB disconnect, device number 110 [ 3143.562010][T31546] usblp0:failed reading printer status (-19) [ 3143.573199][T31545] usblp0: removed [ 3143.911870][ T631] usb 6-1: USB disconnect, device number 4 [ 3144.288223][T31591] input: syz1 as /devices/virtual/input/input284 [ 3144.434203][T30667] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3144.448516][T31601] ªªªªªª: renamed from lo (while UP) [ 3144.584184][T30667] usb 6-1: Using ep0 maxpacket: 8 [ 3144.592004][T30667] usb 6-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 3144.601250][T30667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3144.609312][T30667] usb 6-1: Product: syz [ 3144.613508][T30667] usb 6-1: Manufacturer: syz [ 3144.618157][T30667] usb 6-1: SerialNumber: syz [ 3144.623409][T30667] usb 6-1: config 0 descriptor?? [ 3144.698140][T13817] usb 5-1: USB disconnect, device number 20 [ 3144.714218][ T31] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3144.875401][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3144.885724][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3144.897254][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3144.904697][T31613] cgroup2: Unknown parameter 'obj_user' [ 3144.910471][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 3144.925213][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3144.934315][ T31] usb 3-1: config 0 descriptor?? [ 3144.961770][T31619] tmpfs: Unsupported parameter 'mpol' [ 3145.145788][ T31] usb 3-1: USB disconnect, device number 111 [ 3145.312507][ T36] audit: type=1400 audit(1763567985.617:543): avc: denied { append } for pid=31646 comm="syz.4.77309" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3145.613839][T13817] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3145.765241][T13817] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 3145.773597][T13817] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 3145.782779][T13817] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3145.793068][T13817] usb 5-1: config 220 has no interface number 2 [ 3145.799392][T13817] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3145.812544][T13817] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3145.819352][T13817] usb 5-1: config 220 interface 76 has no altsetting 0 [ 3145.826260][T13817] usb 5-1: config 220 interface 1 has no altsetting 0 [ 3145.834522][T13817] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3145.843727][T13817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3145.852771][T13817] usb 5-1: Product: syz [ 3145.856982][T13817] usb 5-1: Manufacturer: syz [ 3145.861619][T13817] usb 5-1: SerialNumber: syz [ 3145.893662][ T631] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3146.044894][ T631] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 3146.053163][ T631] usb 3-1: config 0 has no interface number 0 [ 3146.059355][ T631] usb 3-1: config 0 interface 115 has no altsetting 0 [ 3146.067605][ T631] usb 3-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice=a0.13 [ 3146.076825][ T631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3146.085126][ T631] usb 3-1: Product: syz [ 3146.089370][ T631] usb 3-1: Manufacturer: syz [ 3146.094513][ T631] usb 3-1: SerialNumber: syz [ 3146.099619][T13817] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 3146.106993][ T631] usb 3-1: config 0 descriptor?? [ 3146.112268][T13817] usb 5-1: No valid video chain found. [ 3146.117955][T13817] usb 5-1: selecting invalid altsetting 0 [ 3146.127477][T13817] usb 5-1: USB disconnect, device number 21 [ 3146.327934][ T631] usb 3-1: USB disconnect, device number 112 [ 3146.863281][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3146.878547][T31680] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3146.884678][T31680] syzkaller1: Linktype set failed because interface is up [ 3147.013209][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 3147.019647][ T31] usb 5-1: config 2 has an invalid interface number: 15 but max is 0 [ 3147.027813][ T31] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 3147.036911][ T31] usb 5-1: config 2 has no interface number 1 [ 3147.043020][ T31] usb 5-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3147.056194][ T31] usb 5-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 3147.069292][ T31] usb 5-1: config 2 interface 0 has no altsetting 0 [ 3147.077395][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 3147.086520][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3147.094599][ T31] usb 5-1: Product: syz [ 3147.098886][ T31] usb 5-1: Manufacturer: syz [ 3147.103522][ T31] usb 5-1: SerialNumber: syz [ 3147.200025][ T31] usb 6-1: USB disconnect, device number 5 [ 3147.262515][ T36] audit: type=1400 audit(1763567987.568:544): avc: denied { bind } for pid=31695 comm="syz.5.77331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3147.312064][ T631] usb 5-1: USB disconnect, device number 22 [ 3147.732954][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3147.884138][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3147.894173][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 3147.904323][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3147.921116][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 3147.931237][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 3147.940732][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3147.956131][ T31] usb 6-1: config 0 descriptor?? [ 3148.069191][ T36] audit: type=1400 audit(1763567988.378:545): avc: denied { view } for pid=31755 comm="syz.2.77358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3148.251222][ T36] audit: type=1400 audit(1763567988.558:546): avc: denied { create } for pid=31782 comm="syz.2.77371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 3148.502792][T13817] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3148.652593][T13817] usb 3-1: Using ep0 maxpacket: 16 [ 3148.659109][T13817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 3148.670104][T13817] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 3148.679246][T13817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.687348][T13817] usb 3-1: Product: syz [ 3148.691604][T13817] usb 3-1: Manufacturer: syz [ 3148.696317][T13817] usb 3-1: SerialNumber: syz [ 3148.701818][T13817] usb 3-1: config 0 descriptor?? [ 3148.708590][T13817] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 3148.716653][T13817] usb 3-1: Detected FT232R [ 3148.911871][T13817] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3148.976666][ T36] audit: type=1400 audit(1763567989.288:547): avc: denied { map } for pid=31811 comm="syz.4.77384" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3149.121733][T13817] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3149.133024][ T36] audit: type=1400 audit(1763567989.439:548): avc: denied { getopt } for pid=31825 comm="syz.0.77391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3149.337829][T12974] usb 3-1: USB disconnect, device number 113 [ 3149.358897][T12974] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3149.375446][T12974] ftdi_sio 3-1:0.0: device disconnected [ 3150.202023][ T631] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3150.291977][T13817] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3150.351946][ T631] usb 3-1: Using ep0 maxpacket: 32 [ 3150.358369][ T631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3150.369666][ T631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3150.380072][ T631] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 3150.389388][ T631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.398613][ T631] usb 3-1: config 0 descriptor?? [ 3150.463094][T13817] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 3150.471577][T13817] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 3150.482122][T13817] usb 5-1: config 220 has no interface number 2 [ 3150.488451][T13817] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 3150.501862][T13817] usb 5-1: config 220 interface 0 has no altsetting 0 [ 3150.508865][T13817] usb 5-1: config 220 interface 76 has no altsetting 0 [ 3150.510687][T12974] usb 6-1: USB disconnect, device number 6 [ 3150.515914][T13817] usb 5-1: config 220 interface 1 has no altsetting 0 [ 3150.530984][T13817] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 3150.540801][T13817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3150.549061][T13817] usb 5-1: Product: syz [ 3150.553951][T13817] usb 5-1: Manufacturer: syz [ 3150.558648][T13817] usb 5-1: SerialNumber: syz [ 3150.783804][T13817] usb 5-1: selecting invalid altsetting 0 [ 3150.789927][T13817] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 3150.796487][T13817] usb 5-1: No valid video chain found. [ 3150.811877][T13817] usb 5-1: USB disconnect, device number 23 [ 3150.822398][ T631] hid-generic 0003:1B1C:1C1F.003C: item fetching failed at offset 0/2 [ 3150.846355][ T631] hid-generic 0003:1B1C:1C1F.003C: probe with driver hid-generic failed with error -22 [ 3151.022895][T13817] usb 3-1: USB disconnect, device number 114 [ 3151.362349][T31911] netlink: 44 bytes leftover after parsing attributes in process `syz.4.77430'. [ 3151.371588][T31911] netlink: 43 bytes leftover after parsing attributes in process `syz.4.77430'. [ 3151.380769][T31911] netlink: 'syz.4.77430': attribute type 5 has an invalid length. [ 3151.388722][T31911] netlink: 43 bytes leftover after parsing attributes in process `syz.4.77430'. [ 3151.498414][ T36] audit: type=1400 audit(1763567991.809:549): avc: denied { create } for pid=31920 comm="syz.4.77435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3151.518838][ T36] audit: type=1400 audit(1763567991.809:550): avc: denied { write } for pid=31920 comm="syz.4.77435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3151.539600][ T36] audit: type=1400 audit(1763567991.809:551): avc: denied { nlmsg_write } for pid=31920 comm="syz.4.77435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3151.645539][T31934] overlayfs: missing 'workdir' [ 3151.671808][T31938] netlink: 393 bytes leftover after parsing attributes in process `syz.5.77443'. [ 3151.801421][T12974] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3151.831450][ T36] audit: type=1400 audit(1763567992.140:552): avc: denied { ioctl } for pid=31958 comm="syz.5.77453" path="socket:[1206785]" dev="sockfs" ino=1206785 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3151.952619][T12974] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 3151.961875][T12974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3151.970485][T12974] usb 5-1: config 0 descriptor?? [ 3152.101326][ T631] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3152.177690][T12974] usb 5-1: USB disconnect, device number 24 [ 3152.251230][ T631] usb 6-1: Using ep0 maxpacket: 16 [ 3152.257532][ T631] usb 6-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 3152.269658][ T631] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3152.278809][ T631] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 3152.288325][ T631] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.296700][ T631] usb 6-1: Product: syz [ 3152.301711][ T631] usb 6-1: Manufacturer: syz [ 3152.306767][ T631] usb 6-1: SerialNumber: syz [ 3152.523061][ T631] usb 6-1: USB disconnect, device number 7 [ 3152.943030][T12974] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3152.962876][T32006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77474'. [ 3153.001046][ T631] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3153.110953][T12974] usb 5-1: Using ep0 maxpacket: 32 [ 3153.120977][T12974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3153.134159][T12974] usb 5-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 3153.143371][T12974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3153.150907][ T631] usb 3-1: Using ep0 maxpacket: 8 [ 3153.151397][T12974] usb 5-1: Product: syz [ 3153.157582][ T631] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3153.160607][T12974] usb 5-1: Manufacturer: syz [ 3153.160628][T12974] usb 5-1: SerialNumber: syz [ 3153.172268][ T631] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3153.177200][T12974] usb 5-1: config 0 descriptor?? [ 3153.190904][ T631] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 3153.195219][T12974] hub 5-1:0.0: bad descriptor, ignoring hub [ 3153.198768][ T631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3153.207747][T12974] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3153.215097][ T631] usb 3-1: config 0 descriptor?? [ 3153.370874][T13817] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3153.500936][T31865] usb 5-1: USB disconnect, device number 25 [ 3153.520753][T13817] usb 6-1: Using ep0 maxpacket: 8 [ 3153.527051][T13817] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 3153.535349][T13817] usb 6-1: config 0 has no interface number 0 [ 3153.543012][T13817] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3153.552185][T13817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3153.560243][T13817] usb 6-1: Product: syz [ 3153.564462][T13817] usb 6-1: Manufacturer: syz [ 3153.569126][T13817] usb 6-1: SerialNumber: syz [ 3153.574525][T13817] usb 6-1: config 0 descriptor?? [ 3153.639363][ T631] uclogic 0003:5543:0003.003D: item fetching failed at offset 0/3 [ 3153.647611][ T631] uclogic 0003:5543:0003.003D: parse failed [ 3153.653672][ T631] uclogic 0003:5543:0003.003D: probe with driver uclogic failed with error -22 [ 3153.783061][T13817] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 3153.789494][T13817] usb 6-1: No valid video chain found. [ 3153.795887][T13817] usb 6-1: USB disconnect, device number 8 [ 3153.853383][T12974] usb 3-1: USB disconnect, device number 115 [ 3153.914177][T32020] wg2: entered promiscuous mode [ 3153.919137][T32020] wg2: entered allmulticast mode [ 3154.230543][T13817] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3154.369086][T32031] syz.2.77486 uses obsolete (PF_INET,SOCK_PACKET) [ 3154.380659][T13817] usb 5-1: Using ep0 maxpacket: 16 [ 3154.392837][T13817] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 3154.410437][T13817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.425622][T13817] usb 5-1: Product: syz [ 3154.440026][T13817] usb 5-1: Manufacturer: syz [ 3154.450143][T13817] usb 5-1: SerialNumber: syz [ 3154.459553][T13817] usb 5-1: config 0 descriptor?? [ 3154.475988][T13817] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 3154.485720][T13817] usb 5-1: Detected FT2232H [ 3154.675288][T13817] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3154.688139][T13817] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3154.696519][T13817] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3154.706459][T13817] usb 5-1: USB disconnect, device number 26 [ 3154.713756][T13817] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3154.723586][T13817] ftdi_sio 5-1:0.0: device disconnected [ 3155.034607][ T36] audit: type=1400 audit(1763567995.351:553): avc: denied { setopt } for pid=32085 comm="syz.2.77512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3155.470068][T12974] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3155.550038][T31865] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 3155.619955][T12974] usb 3-1: Using ep0 maxpacket: 16 [ 3155.630773][T12974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3155.641807][T12974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3155.651812][T12974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3155.665017][T12974] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3155.674365][T12974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.683708][T12974] usb 3-1: config 0 descriptor?? [ 3155.701215][T31865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 3155.713023][T31865] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 3155.723995][T31865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 3155.736101][T31865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 3155.748093][T31865] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 3155.757591][T31865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3155.765914][T31865] usb 5-1: Product: syz [ 3155.770490][T31865] usb 5-1: Manufacturer: syz [ 3155.775273][T31865] usb 5-1: SerialNumber: syz [ 3155.785453][T31865] usb 5-1: config 0 descriptor?? [ 3155.791252][T32124] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3156.008249][ T31] usb 5-1: USB disconnect, device number 27 [ 3156.097672][T12974] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 3156.107930][T12974] microsoft 0003:045E:07DA.003E: ignoring exceeding usage max [ 3156.123835][T12974] microsoft 0003:045E:07DA.003E: No inputs registered, leaving [ 3156.140052][T12974] microsoft 0003:045E:07DA.003E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 3156.164068][T12974] microsoft 0003:045E:07DA.003E: no inputs found [ 3156.179773][T12974] microsoft 0003:045E:07DA.003E: could not initialize ff, continuing anyway [ 3156.311150][ T31] usb 3-1: USB disconnect, device number 116 [ 3156.513687][T32163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=32163 comm=syz.5.77548 [ 3156.527621][T32163] netlink: 32 bytes leftover after parsing attributes in process `syz.5.77548'. [ 3156.560501][T32168] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 3156.567998][T32168] rust_binder: Write failure EINVAL in pid:211 [ 3156.605830][ T36] audit: type=1400 audit(1763567996.921:554): avc: denied { watch } for pid=32172 comm="syz.4.77553" path="/247/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 3156.638536][T32176] netlink: 'syz.5.77554': attribute type 1 has an invalid length. [ 3156.781445][T32188] netlink: 'syz.4.77560': attribute type 4 has an invalid length. [ 3156.989509][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3157.039464][T13817] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 3157.084361][ T36] audit: type=1326 audit(1763567997.402:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.2.77569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.108181][ T36] audit: type=1326 audit(1763567997.402:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.2.77569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.132215][ T36] audit: type=1326 audit(1763567997.402:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.2.77569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.156633][ T36] audit: type=1326 audit(1763567997.402:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.179774][ T36] audit: type=1326 audit(1763567997.402:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.202487][ T36] audit: type=1326 audit(1763567997.402:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9adf8f749 code=0x7ffc0000 [ 3157.225486][ T31] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3157.229384][T13817] usb 5-1: Using ep0 maxpacket: 8 [ 3157.236546][ T31] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3157.243258][T13817] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 3157.254504][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3157.254547][ T31] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 3157.263172][T13817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3157.269321][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3157.270616][ T31] usb 6-1: config 0 descriptor?? [ 3157.282638][T13817] usb 5-1: config 0 has no interface number 0 [ 3157.309237][T13817] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 3157.318462][T13817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.326679][T13817] usb 5-1: Product: syz [ 3157.330910][T13817] usb 5-1: Manufacturer: syz [ 3157.335541][T13817] usb 5-1: SerialNumber: syz [ 3157.341112][T13817] usb 5-1: config 0 descriptor?? [ 3157.548081][T13817] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 3157.554609][T13817] usb 5-1: No valid video chain found. [ 3157.693076][ T31] a4tech 0003:09DA:000A.003F: unknown main item tag 0x2 [ 3157.701151][ T31] a4tech 0003:09DA:000A.003F: hidraw0: USB HID v0.06 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0 [ 3157.752176][ T31] usb 5-1: USB disconnect, device number 28 [ 3157.893612][T30667] usb 6-1: USB disconnect, device number 9 [ 3158.518879][T31865] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 3158.668873][T31865] usb 5-1: Using ep0 maxpacket: 16 [ 3158.675410][T31865] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 3158.683491][T31865] usb 5-1: config 0 has no interface number 0 [ 3158.689652][T31865] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 3158.701176][T31865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 3158.712440][T31865] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3158.723797][T31865] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 3158.733067][T31865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3158.741269][T31865] usb 5-1: Product: syz [ 3158.745460][T31865] usb 5-1: Manufacturer: syz [ 3158.750096][T31865] usb 5-1: SerialNumber: syz [ 3158.755436][T31865] usb 5-1: config 0 descriptor?? [ 3158.764045][T31865] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -12 [ 3158.780118][T25602] udevd[25602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3158.969361][T31865] usb 5-1: USB disconnect, device number 29 [ 3159.217385][ T36] audit: type=1400 audit(1763567999.522:561): avc: denied { execmem } for pid=32229 comm="syz.5.77579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3159.530303][ T36] audit: type=1400 audit(1763567999.842:562): avc: denied { bind } for pid=32236 comm="syz.4.77583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3160.292295][ T36] audit: type=1326 audit(1763568000.603:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32256 comm="syz.4.77591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de5b8f749 code=0x7ffc0000 [ 3160.458443][T32265] netlink: 'syz.4.77595': attribute type 4 has an invalid length. [ 3160.466462][T32265] netlink: 'syz.4.77595': attribute type 5 has an invalid length. [ 3160.474605][T32265] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.77595'. [ 3160.539291][T32271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77598'. [ 3160.611386][T32281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77603'. [ 3160.904691][T32316] netlink: 60 bytes leftover after parsing attributes in process `syz.4.77620'. [ 3160.942638][T32322] netlink: 188 bytes leftover after parsing attributes in process `syz.5.77623'. [ 3160.995288][T32326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=32326 comm=syz.2.77625 [ 3162.618179][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 3162.618200][ T36] audit: type=1400 audit(1763568002.934:597): avc: denied { nlmsg_read } for pid=32442 comm="syz.0.77679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3162.632139][T32443] netlink: 104 bytes leftover after parsing attributes in process `syz.0.77679'. [ 3162.743329][T32457] incfs: Backing dir is not set, filesystem can't be mounted. [ 3162.759612][T32457] incfs: mount failed -2 [ 3162.766064][ T36] audit: type=1326 audit(1763568003.074:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32460 comm="syz.5.77688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43a18f749 code=0x7ffc0000 [ 3162.811608][T32465] netlink: 188 bytes leftover after parsing attributes in process `syz.5.77690'. [ 3162.821057][ T36] audit: type=1326 audit(1763568003.104:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32460 comm="syz.5.77688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43a18f749 code=0x7ffc0000 [ 3162.868144][ T36] audit: type=1326 audit(1763568003.104:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32460 comm="syz.5.77688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc43a18f749 code=0x7ffc0000 [ 3162.897903][ T36] audit: type=1326 audit(1763568003.104:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32460 comm="syz.5.77688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43a18f749 code=0x7ffc0000 [ 3162.921831][ T36] audit: type=1326 audit(1763568003.104:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32460 comm="syz.5.77688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43a18f749 code=0x7ffc0000 [ 3163.079563][T32493] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 3163.079559][ T36] audit: type=1400 audit(1763568003.394:603): avc: denied { relabelfrom } for pid=32492 comm="syz.5.77702" name="TCPv6" dev="sockfs" ino=1210538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 3163.117264][ T36] audit: type=1400 audit(1763568003.424:604): avc: denied { relabelto } for pid=32492 comm="syz.5.77702" name="TCPv6" dev="sockfs" ino=1210538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:man_t:s0" [ 3163.590156][T32540] netlink: 60 bytes leftover after parsing attributes in process `syz.0.77726'. [ 3163.670056][T32552] 9pnet_fd: Insufficient options for proto=fd [ 3163.990309][T32579] No source specified [ 3164.170150][T32594] fuseblk: Unknown parameter 'r' [ 3164.393536][ T36] audit: type=1400 audit(1763568004.704:605): avc: denied { search } for pid=32607 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3164.428757][ T36] audit: type=1400 audit(1763568004.704:606): avc: denied { getattr } for pid=32607 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3165.556190][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3165.716131][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 3165.724114][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3165.736598][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.754889][ T31] usb 6-1: Product: syz [ 3165.774461][ T31] usb 6-1: Manufacturer: syz [ 3165.786082][ T31] usb 6-1: SerialNumber: syz [ 3166.015445][ T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3166.177402][T32735] fuse: Unknown parameter 'g' [ 3166.385882][ T31] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 3166.545820][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 3166.568581][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3166.580832][ T31] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 3166.588835][ T31] usb 5-1: can't read configurations, error -71 [ 3166.983964][ T325] fuseblk: Unknown parameter 'r' [ 3167.252650][ T354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77852'. [ 3167.442094][ T376] rust_binder: 624: no such ref 0 [ 3167.488855][ T380] netlink: 'syz.2.77866': attribute type 4 has an invalid length. [ 3167.499341][ T380] netlink: 'syz.2.77866': attribute type 5 has an invalid length. [ 3167.508784][ T380] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.77866'. [ 3167.898082][ T412] netlink: 68 bytes leftover after parsing attributes in process `syz.0.77881'. [ 3168.076733][ T422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.77882'. [ 3168.275988][ T451] fuseblk: Unknown parameter 'r' [ 3168.383848][ T466] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3168.391927][ T466] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3168.400732][ T466] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3168.408930][ T466] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3168.435219][ T471] binder: Unknown parameter 'm' [ 3168.606197][ T492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77918'. [ 3168.809522][ T528] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3168.817959][ T528] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3168.826776][ T528] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3168.834911][ T528] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3168.921562][ T536] overlay: ./file0 is not a directory [ 3169.112614][ T552] netlink: 'syz.2.77948': attribute type 4 has an invalid length. [ 3169.120858][ T552] netlink: 'syz.2.77948': attribute type 5 has an invalid length. [ 3169.129152][ T552] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.77948'. [ 3169.328005][ T566] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3169.344795][ T566] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3169.353518][ T566] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3169.381845][ T566] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3170.226931][ T588] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3170.244489][ T588] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3170.263239][ T588] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3170.271545][ T588] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3170.954309][ T600] netlink: 68 bytes leftover after parsing attributes in process `syz.2.77970'. [ 3171.579642][ T614] netlink: 60 bytes leftover after parsing attributes in process `syz.4.77979'. [ 3171.793094][ T620] raw_sendmsg: syz.4.77982 forgot to set AF_INET. Fix it! [ 3171.986532][ T633] netlink: 60 bytes leftover after parsing attributes in process `syz.4.77988'. [ 3172.875519][ T667] overlayfs: failed to clone upperpath [ 3173.146091][ T31] usb 6-1: USB disconnect, device number 10 [ 3173.164164][ T31] usblp0: removed [ 3173.173442][ T690] batadv_slave_1: entered promiscuous mode [ 3173.185373][ T689] batadv_slave_1: left promiscuous mode [ 3173.466147][ T704] netlink: 68 bytes leftover after parsing attributes in process `syz.5.78022'. [ 3174.180417][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 3174.180438][ T36] audit: type=1400 audit(1763568014.498:629): avc: denied { sys_module } for pid=749 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 3174.293847][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 3174.301041][ T749] bridge0: port 1(bridge_slave_0) entered disabled state [ 3174.311343][ T749] bridge_slave_0: entered allmulticast mode [ 3174.323999][ T749] bridge_slave_0: entered promiscuous mode [ 3174.335715][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 3174.348552][ T749] bridge0: port 2(bridge_slave_1) entered disabled state [ 3174.356923][ T749] bridge_slave_1: entered allmulticast mode [ 3174.363735][ T749] bridge_slave_1: entered promiscuous mode [ 3174.458925][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 3174.466096][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3174.473470][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 3174.480666][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3174.523395][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3174.531111][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3174.534751][ T784] overlayfs: missing 'lowerdir' [ 3174.543206][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 3174.555074][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 3174.562184][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3174.590883][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 3174.598096][T20033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3174.631291][ T790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78060'. [ 3174.651814][ T749] veth0_vlan: entered promiscuous mode [ 3174.679571][ T749] veth1_macvtap: entered promiscuous mode [ 3174.692748][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 3174.709092][ T31] usb 5-1: config 0 has no interfaces? [ 3174.714755][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3174.744115][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.762942][ T31] usb 5-1: config 0 descriptor?? [ 3174.869266][ T807] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78068'. [ 3174.975448][ T31] usb 5-1: USB disconnect, device number 32 [ 3175.194829][ T816] fuseblk: Unknown parameter 'r' [ 3175.426723][ T829] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3175.435329][ T829] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3175.444098][ T829] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3175.458294][ T829] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3175.474814][ T834] fuseblk: Bad value for 'fd' [ 3175.574779][ T848] netlink: 68 bytes leftover after parsing attributes in process `syz.5.78087'. [ 3175.622500][ T854] fuseblk: Unknown parameter 'r' [ 3175.854170][ T876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78100'. [ 3176.589580][ T904] netlink: 68 bytes leftover after parsing attributes in process `syz.4.78114'. [ 3176.937447][ T2142] bridge_slave_1: left allmulticast mode [ 3176.950030][ T2142] bridge_slave_1: left promiscuous mode [ 3176.961915][ T2142] bridge0: port 2(bridge_slave_1) entered disabled state [ 3176.990218][ T2142] bridge_slave_0: left allmulticast mode [ 3176.997747][ T2142] bridge_slave_0: left promiscuous mode [ 3177.011409][ T2142] bridge0: port 1(bridge_slave_0) entered disabled state [ 3177.011708][ T938] netlink: 68 bytes leftover after parsing attributes in process `syz.5.78130'. [ 3177.171065][ T2142] veth1_macvtap: left promiscuous mode [ 3177.177859][ T2142] veth0_vlan: left promiscuous mode [ 3177.292352][ T962] netlink: 188 bytes leftover after parsing attributes in process `syz.0.78143'. [ 3177.657263][ T36] audit: type=1400 audit(1763568017.979:630): avc: denied { map } for pid=991 comm="syz.4.78158" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3178.218315][ T1023] netlink: 188 bytes leftover after parsing attributes in process `syz.4.78172'. [ 3178.296631][ T1035] fuseblk: Unknown parameter 'r' [ 3179.021687][ T1062] netlink: 68 bytes leftover after parsing attributes in process `syz.4.78191'. [ 3181.136241][ T1116] netlink: 188 bytes leftover after parsing attributes in process `syz.2.78217'. [ 3181.271808][ T1124] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3181.289938][ T1124] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3181.320398][ T1124] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3181.328367][ T1124] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3181.552295][ T1136] netlink: 188 bytes leftover after parsing attributes in process `syz.5.78227'. [ 3182.138676][ T1152] netlink: 188 bytes leftover after parsing attributes in process `syz.5.78237'. [ 3182.461304][ T1178] netlink: 188 bytes leftover after parsing attributes in process `syz.2.78248'. [ 3182.479778][T13817] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 3182.679678][T13817] usb 5-1: Using ep0 maxpacket: 8 [ 3182.696112][T13817] usb 5-1: config 0 has no interfaces? [ 3182.703906][T13817] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3182.729651][T13817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3182.748300][T13817] usb 5-1: config 0 descriptor?? [ 3182.962094][ T31] usb 5-1: USB disconnect, device number 33 [ 3184.430155][ T1272] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3184.438287][ T1272] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3184.458647][ T1272] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3184.478739][ T1272] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3187.543581][ T1379] rust_binder: 906: no such ref 0 [ 3187.598195][ T1382] fuseblk: Unknown parameter 'r' [ 3187.974255][ T1390] netlink: 188 bytes leftover after parsing attributes in process `syz.5.78353'. [ 3188.606035][ T1408] fuseblk: Unknown parameter 'r' [ 3188.824696][ T1425] fuseblk: Bad value for 'fd' [ 3188.923695][ T1431] netlink: 188 bytes leftover after parsing attributes in process `syz.2.78372'. [ 3189.545959][ T1459] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3189.567208][ T1459] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3189.575753][ T1459] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3189.607492][ T1459] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3190.748856][ T1488] netlink: 60 bytes leftover after parsing attributes in process `syz.4.78394'. [ 3190.890543][ T1500] fuseblk: Unknown parameter 'r' [ 3191.809472][ T1529] fuseblk: Bad value for 'fd' [ 3192.560741][ T1540] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3192.568996][ T1540] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3192.577796][ T1540] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3192.586134][ T1540] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3193.805454][T12974] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 3193.975367][T12974] usb 5-1: Using ep0 maxpacket: 8 [ 3193.987641][T12974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3194.005369][T12974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.019303][T12974] usb 5-1: Product: syz [ 3194.023618][T12974] usb 5-1: Manufacturer: syz [ 3194.028504][T12974] usb 5-1: SerialNumber: syz [ 3194.237513][T12974] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3194.490066][ C1] usblp0: nonzero write bulk status received: -71 [ 3194.500305][T12974] usb 5-1: USB disconnect, device number 34 [ 3194.510249][T12974] usblp0: removed [ 3195.032726][ T1632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78470'. [ 3195.138477][ T1641] rust_binder: 1010: no such ref 0 [ 3195.384869][T12974] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3195.544817][T12974] usb 6-1: Using ep0 maxpacket: 8 [ 3195.552750][T12974] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3195.559806][ T1654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78480'. [ 3195.562265][T12974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.579500][T12974] usb 6-1: Product: syz [ 3195.584050][T12974] usb 6-1: Manufacturer: syz [ 3195.589006][T12974] usb 6-1: SerialNumber: syz [ 3195.594770][T13273] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 3195.754713][T13273] usb 5-1: Using ep0 maxpacket: 8 [ 3195.762294][T13273] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3195.771573][T13273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.779711][T13273] usb 5-1: Product: syz [ 3195.783930][T13273] usb 5-1: Manufacturer: syz [ 3195.788661][T13273] usb 5-1: SerialNumber: syz [ 3195.813822][T12974] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3195.996011][T13273] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3196.089090][ T1661] rust_binder: 1018: no such ref 0 [ 3196.196702][T13273] usb 5-1: USB disconnect, device number 35 [ 3196.204306][T13273] usblp1: removed [ 3196.407502][ T1674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78489'. [ 3196.494294][ T1686] rust_binder: 1040: no such ref 0 [ 3196.545007][ T1692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78498'. [ 3196.781205][ T1707] rust_binder: 993: no such ref 0 [ 3197.120901][ T1735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.78519'. [ 3197.640356][ T1755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78529'. [ 3198.133991][T13817] usb 6-1: USB disconnect, device number 11 [ 3198.168570][T13817] usblp0: removed [ 3198.269042][ T1774] netlink: 60 bytes leftover after parsing attributes in process `syz.5.78538'. [ 3198.472449][ T1779] overlayfs: failed to resolve './file0': -2 [ 3198.829248][ T1793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78547'. [ 3198.918440][ T1797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78549'. [ 3199.384053][ T1810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.78556'. [ 3200.443753][ T1846] fuseblk: Bad value for 'fd' [ 3201.428510][ T1893] rust_binder: 1049: no such ref 0 [ 3202.501987][ T1917] rust_binder: 673: no such ref 0 [ 3203.124965][ T1931] fuseblk: Unknown parameter 'r' [ 3203.232302][ T1935] netlink: 68 bytes leftover after parsing attributes in process `syz.2.78619'. [ 3203.377614][ T1939] rust_binder: 1061: no such ref 0 [ 3203.586490][ T1957] netlink: 68 bytes leftover after parsing attributes in process `syz.4.78628'. [ 3203.647536][ T1959] rust_binder: 1075: no such ref 0 [ 3204.976314][ T2037] rust_binder: 237: no such ref 0 [ 3205.552548][ T2095] netlink: 68 bytes leftover after parsing attributes in process `syz.5.78696'. [ 3207.085776][ T2188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.78740'. [ 3207.535315][ T2210] netlink: 60 bytes leftover after parsing attributes in process `syz.0.78752'. [ 3207.695991][ T2216] fuseblk: Bad value for 'fd' [ 3207.716980][ T2222] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3207.735358][ T2222] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3207.760464][ T2222] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3207.782057][ T2222] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3207.943698][ T2241] rust_binder: 755: no such ref 0 [ 3208.305664][ T2263] rust_binder: 763: no such ref 0 [ 3208.589836][T13817] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3208.759773][T13817] usb 3-1: Using ep0 maxpacket: 8 [ 3208.767496][T13817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3208.787260][T13817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3208.797345][T13817] usb 3-1: Product: syz [ 3208.807444][T13817] usb 3-1: Manufacturer: syz [ 3208.817539][T13817] usb 3-1: SerialNumber: syz [ 3209.031676][T13817] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 117 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3209.651922][ T2300] fuseblk: Bad value for 'fd' [ 3209.819351][T13817] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3210.009271][T13817] usb 6-1: Using ep0 maxpacket: 8 [ 3210.017786][T13817] usb 6-1: config 0 has no interfaces? [ 3210.024481][T13817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3210.043700][T13817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.065935][T13817] usb 6-1: config 0 descriptor?? [ 3210.278580][T12974] usb 6-1: USB disconnect, device number 12 [ 3211.005805][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state [ 3211.021088][ T2337] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.039245][ T2337] bridge_slave_0: entered allmulticast mode [ 3211.049378][ T2337] bridge_slave_0: entered promiscuous mode [ 3211.062785][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state [ 3211.078636][ T2337] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.093499][ T2337] bridge_slave_1: entered allmulticast mode [ 3211.107754][ T2337] bridge_slave_1: entered promiscuous mode [ 3211.115406][ T2348] fuseblk: Unknown parameter 'r' [ 3211.222831][ T2337] bridge0: port 2(bridge_slave_1) entered blocking state [ 3211.229968][ T2337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3211.237379][ T2337] bridge0: port 1(bridge_slave_0) entered blocking state [ 3211.244483][ T2337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3211.279495][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3211.293461][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3211.312604][ T2142] bridge0: port 1(bridge_slave_0) entered blocking state [ 3211.319793][ T2142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3211.341340][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 3211.348458][T20033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3211.358792][T31865] usb 3-1: USB disconnect, device number 117 [ 3211.379301][T31865] usblp0: removed [ 3211.454008][ T2337] veth0_vlan: entered promiscuous mode [ 3211.485920][ T2337] veth1_macvtap: entered promiscuous mode [ 3212.136800][ T36] audit: type=1400 audit(1763568052.462:631): avc: denied { connect } for pid=2432 comm="syz.4.78854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3212.593788][ T2465] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3212.601976][ T2465] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3212.610854][ T2465] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3212.619132][ T2465] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3212.998319][ T2486] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.006580][ T2486] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3213.015531][ T2486] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.024223][ T2486] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3213.035269][ T2487] fuseblk: Unknown parameter 'r' [ 3213.200796][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.218056][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3213.221713][ T2511] fuseblk: Unknown parameter 'r' [ 3213.238172][ T2508] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.264920][ T2508] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3213.661163][ T2557] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.669406][ T2557] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3213.677987][ T2557] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3213.691489][ T2557] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3213.735444][ T2565] 9pnet_fd: Insufficient options for proto=fd [ 3214.089911][ T2586] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3214.107725][ T2586] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3214.126740][ T2586] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3214.139836][ T2586] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3214.182295][ T2588] 9pnet_fd: Insufficient options for proto=fd [ 3214.847928][ T2615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78932'. [ 3215.089900][ T2639] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3215.107434][ T2639] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 3215.128565][ T2639] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 3215.143087][ T2639] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 3216.438920][ T2674] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78965'. [ 3217.658774][ T2705] netlink: 68 bytes leftover after parsing attributes in process `syz.0.78980'. [ 3217.686370][T13817] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3217.847926][T13817] usb 3-1: Using ep0 maxpacket: 8 [ 3217.862651][T13817] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3217.876318][T13817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3217.894614][T13817] usb 3-1: Product: syz [ 3217.904723][T13817] usb 3-1: Manufacturer: syz [ 3217.909589][T13817] usb 3-1: SerialNumber: syz [ 3218.129837][T13817] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3218.577725][ T2735] netlink: 68 bytes leftover after parsing attributes in process `syz.4.78995'. [ 3220.446384][T12974] usb 3-1: USB disconnect, device number 118 [ 3220.455631][T12974] usblp0: removed [ 3220.992169][ T2830] fuseblk: Bad value for 'fd' [ 3221.068288][ T2840] netlink: 68 bytes leftover after parsing attributes in process `syz.0.79048'. [ 3221.115055][T13817] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3221.126333][ T2846] overlayfs: overlapping lowerdir path [ 3221.240064][ T2861] tmpfs: Unknown parameter 'n' [ 3221.288962][T13817] usb 6-1: Using ep0 maxpacket: 8 [ 3221.301223][T13817] usb 6-1: config 0 has no interfaces? [ 3221.310324][T13817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3221.322012][T13817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3221.332084][T13817] usb 6-1: config 0 descriptor?? [ 3221.356074][ T2872] overlayfs: overlapping lowerdir path [ 3221.546604][T13817] usb 6-1: USB disconnect, device number 13 [ 3221.565448][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state [ 3221.572544][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state [ 3221.615003][ T2874] bridge_slave_0: entered allmulticast mode [ 3221.621507][ T2874] bridge_slave_0: entered promiscuous mode [ 3221.655761][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 3221.662873][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state [ 3221.694979][ T2874] bridge_slave_1: entered allmulticast mode [ 3221.701465][ T2874] bridge_slave_1: entered promiscuous mode [ 3221.787719][T13979] bridge_slave_1: left allmulticast mode [ 3221.793424][T13979] bridge_slave_1: left promiscuous mode [ 3221.805072][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 3221.825397][T13979] bridge_slave_0: left allmulticast mode [ 3221.831105][T13979] bridge_slave_0: left promiscuous mode [ 3221.845182][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 3221.984832][T13979] veth1_macvtap: left promiscuous mode [ 3221.990537][T13979] veth0_vlan: left promiscuous mode [ 3222.194168][ T2874] bridge0: port 2(bridge_slave_1) entered blocking state [ 3222.201303][ T2874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3222.208670][ T2874] bridge0: port 1(bridge_slave_0) entered blocking state [ 3222.215742][ T2874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3222.294620][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3222.313965][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3222.355665][T20033] bridge0: port 1(bridge_slave_0) entered blocking state [ 3222.362758][T20033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3222.392859][T20033] bridge0: port 2(bridge_slave_1) entered blocking state [ 3222.399999][T20033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3222.505310][ T2874] veth0_vlan: entered promiscuous mode [ 3222.555391][ T2874] veth1_macvtap: entered promiscuous mode [ 3223.296466][ T3003] 9pnet_fd: Insufficient options for proto=fd [ 3223.546345][ T3015] overlayfs: overlapping lowerdir path [ 3223.611770][ T3019] overlayfs: missing 'lowerdir' [ 3223.652972][ T3024] 9pnet_fd: Insufficient options for proto=fd [ 3223.926884][ T3047] 9pnet_fd: Insufficient options for proto=fd [ 3224.187204][ T3056] overlayfs: overlapping lowerdir path [ 3224.697105][ T3074] fuse: Bad value for 'fd' [ 3226.752698][ T3190] 9pnet_fd: Insufficient options for proto=fd [ 3226.872877][T13273] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3227.022825][T13273] usb 6-1: Using ep0 maxpacket: 8 [ 3227.033854][T13273] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 3227.042088][T13273] usb 6-1: config 0 has no interface number 0 [ 3227.059838][T13273] usb 6-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 3227.074709][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79213'. [ 3227.082821][T13273] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 3227.113160][T13273] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 3227.132774][T13273] usb 6-1: config 0 interface 200 has no altsetting 0 [ 3227.141403][T13273] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 3227.150743][T13273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3227.172852][T13273] usb 6-1: Product: syz [ 3227.177090][T13273] usb 6-1: Manufacturer: syz [ 3227.181720][T13273] usb 6-1: SerialNumber: syz [ 3227.203549][T13273] usb 6-1: config 0 descriptor?? [ 3227.209189][ T3180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3227.373539][ T3226] 9pnet_fd: Insufficient options for proto=fd [ 3227.423813][T13273] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input285 [ 3227.452520][ C1] usb 6-1: hanwang_irq - urb shutting down with status: -2 [ 3227.462927][ C0] usb 6-1: hanwang_irq - urb shutting down with status: -2 [ 3227.481588][T13273] usb 6-1: USB disconnect, device number 14 [ 3227.650921][ T3243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79233'. [ 3227.715612][T31865] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3227.764936][ T3253] overlayfs: missing 'lowerdir' [ 3227.882527][T31865] usb 3-1: Using ep0 maxpacket: 8 [ 3227.890602][T31865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3227.900217][T31865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3227.908940][T31865] usb 3-1: Product: syz [ 3227.913915][T31865] usb 3-1: Manufacturer: syz [ 3227.918843][T31865] usb 3-1: SerialNumber: syz [ 3228.028027][ T3277] overlayfs: missing 'lowerdir' [ 3228.094479][ T3284] 9pnet_fd: Insufficient options for proto=fd [ 3228.150680][ T3291] 9pnet_fd: Insufficient options for proto=fd [ 3228.213183][ T3297] overlayfs: missing 'lowerdir' [ 3228.480225][ T3319] overlayfs: missing 'lowerdir' [ 3228.672200][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3228.796924][ T3341] 9pnet_fd: Insufficient options for proto=fd [ 3228.825289][ T3343] No source specified [ 3228.832104][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 3228.843205][ T31] usb 6-1: config 0 has no interfaces? [ 3228.848765][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3228.872110][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3228.892360][ T31] usb 6-1: config 0 descriptor?? [ 3228.980595][ T3357] 9pnet_fd: Insufficient options for proto=fd [ 3229.005710][ T3359] No source specified [ 3229.101257][ T31] usb 6-1: USB disconnect, device number 15 [ 3229.111384][ T3371] overlayfs: overlapping lowerdir path [ 3229.137486][ T3375] netlink: 64 bytes leftover after parsing attributes in process `syz.0.79296'. [ 3229.148074][ T3377] 9pnet_fd: Insufficient options for proto=fd [ 3229.164933][ T3379] fuseblk: Bad value for 'fd' [ 3229.243677][ T3391] 9pnet_fd: Insufficient options for proto=fd [ 3229.266579][ T3393] overlayfs: overlapping lowerdir path [ 3229.352031][ T3399] 9pnet_fd: Insufficient options for proto=fd [ 3229.432109][ T3409] cgroup: Invalid name [ 3229.453253][ T3411] overlayfs: overlapping lowerdir path [ 3230.005182][ T3431] overlayfs: overlapping lowerdir path [ 3230.037942][ T3437] netlink: 900 bytes leftover after parsing attributes in process `syz.5.79326'. [ 3230.311595][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 3230.362271][ T36] audit: type=1400 audit(1763568070.689:632): avc: denied { read } for pid=3458 comm="syz.5.79337" path="socket:[1233107]" dev="sockfs" ino=1233107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3230.421637][T31865] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 119 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3230.450914][T31865] usb 3-1: USB disconnect, device number 119 [ 3230.467703][T31865] usblp0: removed [ 3230.531522][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 3230.543961][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3230.565138][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3230.591513][ T31] usb 5-1: Product: syz [ 3230.597424][ T31] usb 5-1: Manufacturer: syz [ 3230.602527][ T31] usb 5-1: SerialNumber: syz [ 3230.810114][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3231.313791][ T36] audit: type=1326 audit(1763568071.660:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3571 comm="syz.0.79393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feabc38f749 code=0x0 [ 3231.511096][T12974] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3231.545941][ T3595] overlayfs: missing 'workdir' [ 3231.661057][T12974] usb 6-1: Using ep0 maxpacket: 8 [ 3231.667324][T12974] usb 6-1: config 0 has no interfaces? [ 3231.681055][T12974] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3231.700547][T12974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3231.717349][T12974] usb 6-1: config 0 descriptor?? [ 3231.761568][ T3609] 9pnet_fd: Insufficient options for proto=fd [ 3231.786178][ T3611] overlayfs: missing 'workdir' [ 3231.932840][ T631] usb 6-1: USB disconnect, device number 16 [ 3232.295168][ T3622] 9pnet: Could not find request transport: fd0x0000000000000007 [ 3233.080264][T12974] usb 5-1: USB disconnect, device number 36 [ 3233.105954][T12974] usblp0: removed [ 3233.146855][ T3722] overlayfs: overlapping lowerdir path [ 3233.345970][ T3738] fuse: Bad value for 'fd' [ 3233.460349][T31865] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3233.620278][T31865] usb 6-1: Using ep0 maxpacket: 8 [ 3233.627886][T31865] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3233.647734][T31865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.660257][T31865] usb 6-1: Product: syz [ 3233.664491][T31865] usb 6-1: Manufacturer: syz [ 3233.679490][T31865] usb 6-1: SerialNumber: syz [ 3233.900973][T31865] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3234.017829][ T3780] overlayfs: overlapping lowerdir path [ 3234.106825][ T36] audit: type=1400 audit(1763568074.451:634): avc: denied { create } for pid=3783 comm="syz.4.79496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3234.275644][ T3792] 9pnet_fd: Insufficient options for proto=fd [ 3234.607926][ T3807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28789 sclass=netlink_route_socket pid=3807 comm=syz.0.79506 [ 3234.650522][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 3234.804261][ T3823] fuse: Invalid rootmode [ 3235.404360][ T3864] overlayfs: overlapping lowerdir path [ 3236.093512][ T3901] 9p: Unknown access argument a: -22 [ 3236.241367][T31865] usb 6-1: USB disconnect, device number 17 [ 3236.282120][T31865] usblp0: removed [ 3237.233994][ T3959] netlink: 'syz.0.79578': attribute type 4 has an invalid length. [ 3237.258930][ T3959] netlink: 'syz.0.79578': attribute type 5 has an invalid length. [ 3237.277083][ T3959] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.79578'. [ 3238.568425][ T31] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3238.728338][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 3238.752516][ T31] usb 3-1: config 0 has no interfaces? [ 3238.758176][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3238.777556][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3238.818719][ T31] usb 3-1: config 0 descriptor?? [ 3239.029583][T13273] usb 3-1: USB disconnect, device number 120 [ 3239.237921][T31219] bridge_slave_1: left allmulticast mode [ 3239.245545][T31219] bridge_slave_1: left promiscuous mode [ 3239.258209][T31219] bridge0: port 2(bridge_slave_1) entered disabled state [ 3239.273046][T31219] bridge_slave_0: left allmulticast mode [ 3239.281737][T31219] bridge_slave_0: left promiscuous mode [ 3239.294756][T31219] bridge0: port 1(bridge_slave_0) entered disabled state [ 3239.409143][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 3239.416707][ T4079] bridge0: port 1(bridge_slave_0) entered disabled state [ 3239.424209][ T4079] bridge_slave_0: entered allmulticast mode [ 3239.430980][ T4079] bridge_slave_0: entered promiscuous mode [ 3239.438194][T31219] veth1_macvtap: left promiscuous mode [ 3239.443772][T31219] veth0_vlan: left promiscuous mode [ 3239.505310][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 3239.514185][ T4079] bridge0: port 2(bridge_slave_1) entered disabled state [ 3239.526106][ T4079] bridge_slave_1: entered allmulticast mode [ 3239.532748][ T4079] bridge_slave_1: entered promiscuous mode [ 3239.544862][ T4092] overlayfs: overlapping lowerdir path [ 3239.668874][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 3239.676004][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3239.683388][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 3239.690576][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3239.723876][T20033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3239.731809][T20033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3239.750550][T31219] bridge0: port 1(bridge_slave_0) entered blocking state [ 3239.757674][T31219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3239.787493][T31219] bridge0: port 2(bridge_slave_1) entered blocking state [ 3239.794631][T31219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3239.859440][ T4079] veth0_vlan: entered promiscuous mode [ 3239.879744][ T4079] veth1_macvtap: entered promiscuous mode [ 3240.150287][T31219] bridge_slave_1: left allmulticast mode [ 3240.161531][T31219] bridge_slave_1: left promiscuous mode [ 3240.177506][T31219] bridge0: port 2(bridge_slave_1) entered disabled state [ 3240.208393][T31219] bridge_slave_0: left allmulticast mode [ 3240.214121][T31219] bridge_slave_0: left promiscuous mode [ 3240.227821][T31219] bridge0: port 1(bridge_slave_0) entered disabled state [ 3240.399735][T31219] tipc: Left network mode [ 3240.408830][T31219] veth1_macvtap: left promiscuous mode [ 3240.437763][T31219] veth0_vlan: left promiscuous mode [ 3240.867545][T31865] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3241.017535][T31865] usb 3-1: Using ep0 maxpacket: 8 [ 3241.024944][T31865] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3241.034120][T31865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3241.042413][T31865] usb 3-1: Product: syz [ 3241.046604][T31865] usb 3-1: Manufacturer: syz [ 3241.051327][T31865] usb 3-1: SerialNumber: syz [ 3241.259391][T31865] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3241.960895][ T4182] overlayfs: overlapping lowerdir path [ 3242.082109][ T4203] overlayfs: overlapping lowerdir path [ 3243.151420][ T4352] netlink: 'syz.5.79763': attribute type 4 has an invalid length. [ 3243.159353][ T4352] netlink: 'syz.5.79763': attribute type 5 has an invalid length. [ 3243.167544][ T4352] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.79763'. [ 3243.204042][ T4079] ------------[ cut here ]------------ [ 3243.209620][ T4079] WARNING: CPU: 0 PID: 4079 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 3243.217828][ T4079] Modules linked in: [ 3243.221780][ T4079] CPU: 0 UID: 0 PID: 4079 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3243.233566][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3243.243986][ T4079] RIP: 0010:drop_nlink+0xce/0x110 [ 3243.249172][ T4079] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 3243.269065][ T4079] RSP: 0018:ffffc9000288fc60 EFLAGS: 00010293 [ 3243.275262][ T4079] RAX: ffffffff81ee1a7e RBX: ffff88811448e5a0 RCX: ffff8881244cb900 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3243.276613][ T36] audit: type=1400 audit(1763568083.614:635): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1435]" dev="pipefs" ino=1435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 3243.283320][ T4079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3243.314348][ T4079] RBP: ffffc9000288fc88 R08: 0000000000000003 R09: 0000000000000004 [ 3243.322445][ T4079] R10: dffffc0000000000 R11: fffff52000511f7c R12: dffffc0000000000 [ 3243.330711][ T4079] R13: 1ffff11022891cbd R14: ffff88811448e5e8 R15: 0000000000000000 [ 3243.339281][ T4079] FS: 000055557c8b9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 3243.348611][ T4079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3243.355241][ T4079] CR2: 000055557c8dc4e8 CR3: 0000000144f3a000 CR4: 00000000003526b0 [ 3243.363485][ T4079] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 3243.371591][ T4079] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3243.379645][ T4079] Call Trace: [ 3243.382958][ T4079] [ 3243.385939][ T4079] shmem_rmdir+0x5f/0x90 [ 3243.390742][ T4079] vfs_rmdir+0x3dd/0x560 [ 3243.395124][ T4079] incfs_kill_sb+0x109/0x230 [ 3243.400003][ T4079] deactivate_locked_super+0xd5/0x2a0 [ 3243.405526][ T4079] deactivate_super+0xb8/0xe0 [ 3243.410298][ T4079] cleanup_mnt+0x3f1/0x480 [ 3243.414900][ T4079] __cleanup_mnt+0x1d/0x40 [ 3243.419409][ T4079] task_work_run+0x1e0/0x250 [ 3243.424163][ T4079] ? __cfi_task_work_run+0x10/0x10 [ 3243.429388][ T4079] ? __x64_sys_umount+0x126/0x170 [ 3243.434918][ T4079] ? __cfi___x64_sys_umount+0x10/0x10 [ 3243.440406][ T4079] ? __kasan_check_read+0x15/0x20 [ 3243.445616][ T4079] resume_user_mode_work+0x36/0x50 [ 3243.450918][ T4079] syscall_exit_to_user_mode+0x64/0xb0 [ 3243.456574][ T4079] do_syscall_64+0x64/0xf0 [ 3243.461163][ T4079] ? clear_bhb_loop+0x50/0xa0 [ 3243.466060][ T4079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3243.472018][ T4079] RIP: 0033:0x7f5da2b90a77 [ 3243.476516][ T4079] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3243.496380][ T4079] RSP: 002b:00007ffc55ce3998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3243.504967][ T4079] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5da2b90a77 [ 3243.513252][ T4079] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55ce3a50 [ 3243.521299][ T4079] RBP: 00007ffc55ce3a50 R08: 0000000000000000 R09: 0000000000000000 [ 3243.529533][ T4079] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55ce4ae0 [ 3243.537568][ T4079] R13: 00007f5da2c13d7d R14: 0000000000317ccf R15: 00007ffc55ce4b20 [ 3243.545658][ T4079] [ 3243.548748][ T4079] ---[ end trace 0000000000000000 ]--- [ 3243.554397][ T4079] ================================================================== [ 3243.562518][ T4079] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 3243.568835][ T4079] Write of size 4 at addr 0000000000000168 by task syz-executor/4079 [ 3243.576934][ T4079] [ 3243.579286][ T4079] CPU: 1 UID: 0 PID: 4079 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3243.579333][ T4079] Tainted: [W]=WARN [ 3243.579341][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3243.579357][ T4079] Call Trace: [ 3243.579366][ T4079] [ 3243.579375][ T4079] __dump_stack+0x21/0x30 [ 3243.579456][ T4079] dump_stack_lvl+0x10c/0x190 [ 3243.579487][ T4079] ? __cfi_dump_stack_lvl+0x10/0x10 [ 3243.579520][ T4079] print_report+0x3d/0x70 [ 3243.579544][ T4079] kasan_report+0x163/0x1a0 [ 3243.579572][ T4079] ? ihold+0x24/0x70 [ 3243.579596][ T4079] ? _raw_spin_unlock+0x45/0x60 [ 3243.579678][ T4079] ? ihold+0x24/0x70 [ 3243.579700][ T4079] kasan_check_range+0x299/0x2a0 [ 3243.579725][ T4079] __kasan_check_write+0x18/0x20 [ 3243.579758][ T4079] ihold+0x24/0x70 [ 3243.579781][ T4079] vfs_rmdir+0x26a/0x560 [ 3243.579811][ T4079] incfs_kill_sb+0x109/0x230 [ 3243.579845][ T4079] deactivate_locked_super+0xd5/0x2a0 [ 3243.579877][ T4079] deactivate_super+0xb8/0xe0 [ 3243.579906][ T4079] cleanup_mnt+0x3f1/0x480 [ 3243.579932][ T4079] __cleanup_mnt+0x1d/0x40 [ 3243.579956][ T4079] task_work_run+0x1e0/0x250 [ 3243.579984][ T4079] ? __cfi_task_work_run+0x10/0x10 [ 3243.580011][ T4079] ? __x64_sys_umount+0x126/0x170 [ 3243.580043][ T4079] ? __cfi___x64_sys_umount+0x10/0x10 [ 3243.580075][ T4079] ? __kasan_check_read+0x15/0x20 [ 3243.580109][ T4079] resume_user_mode_work+0x36/0x50 [ 3243.580139][ T4079] syscall_exit_to_user_mode+0x64/0xb0 [ 3243.580164][ T4079] do_syscall_64+0x64/0xf0 [ 3243.580193][ T4079] ? clear_bhb_loop+0x50/0xa0 [ 3243.580218][ T4079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3243.580244][ T4079] RIP: 0033:0x7f5da2b90a77 [ 3243.580264][ T4079] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3243.580285][ T4079] RSP: 002b:00007ffc55ce3998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3243.580318][ T4079] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5da2b90a77 [ 3243.580334][ T4079] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55ce3a50 [ 3243.580350][ T4079] RBP: 00007ffc55ce3a50 R08: 0000000000000000 R09: 0000000000000000 [ 3243.580366][ T4079] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55ce4ae0 [ 3243.580382][ T4079] R13: 00007f5da2c13d7d R14: 0000000000317ccf R15: 00007ffc55ce4b20 [ 3243.580404][ T4079] [ 3243.580413][ T4079] ================================================================== [ 3243.853950][ T4079] Disabling lock debugging due to kernel taint [ 3243.860394][ T4079] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 3243.868242][ T4079] #PF: supervisor write access in kernel mode [ 3243.874349][ T4079] #PF: error_code(0x0002) - not-present page [ 3243.880356][ T4079] PGD 800000011b212067 P4D 800000011b212067 PUD 0 [ 3243.883512][ T36] audit: type=1400 audit(1763568084.215:636): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 3243.886906][ T4079] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 3243.886935][ T4079] CPU: 0 UID: 0 PID: 4079 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 3243.918295][ T36] audit: type=1400 audit(1763568084.215:637): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3243.928260][ T4079] Tainted: [B]=BAD_PAGE, [W]=WARN [ 3243.928273][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3243.928287][ T4079] RIP: 0010:ihold+0x2a/0x70 [ 3243.928321][ T4079] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 3243.950590][ T36] audit: type=1400 audit(1763568084.215:638): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3243.954958][ T4079] RSP: 0018:ffffc9000288fca0 EFLAGS: 00010246 [ 3243.954984][ T4079] RAX: ffff8881244cb900 RBX: 0000000000000000 RCX: ffff8881244cb900 [ 3243.965375][ T36] audit: type=1400 audit(1763568084.215:639): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3243.969639][ T4079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3243.969658][ T4079] RBP: ffffc9000288fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 3243.969677][ T4079] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811448e5ac [ 3243.989674][ T36] audit: type=1400 audit(1763568084.215:640): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3244.010489][ T4079] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3244.010514][ T4079] FS: 000055557c8b9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 3244.010535][ T4079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3244.010551][ T4079] CR2: 0000000000000168 CR3: 0000000144f3a000 CR4: 00000000003526b0 [ 3244.010571][ T4079] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 3244.010584][ T4079] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3244.010601][ T4079] Call Trace: [ 3244.010610][ T4079] [ 3244.010621][ T4079] vfs_rmdir+0x26a/0x560 [ 3244.010655][ T4079] incfs_kill_sb+0x109/0x230 [ 3244.010689][ T4079] deactivate_locked_super+0xd5/0x2a0 [ 3244.017693][ T36] audit: type=1400 audit(1763568084.215:641): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3244.024973][ T4079] deactivate_super+0xb8/0xe0 [ 3244.046081][ T36] audit: type=1400 audit(1763568084.215:642): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3244.054039][ T4079] cleanup_mnt+0x3f1/0x480 [ 3244.054074][ T4079] __cleanup_mnt+0x1d/0x40 [ 3244.217695][ T4079] task_work_run+0x1e0/0x250 [ 3244.222310][ T4079] ? __cfi_task_work_run+0x10/0x10 [ 3244.227436][ T4079] ? __x64_sys_umount+0x126/0x170 [ 3244.232485][ T4079] ? __cfi___x64_sys_umount+0x10/0x10 [ 3244.237912][ T4079] ? __kasan_check_read+0x15/0x20 [ 3244.242959][ T4079] resume_user_mode_work+0x36/0x50 [ 3244.248173][ T4079] syscall_exit_to_user_mode+0x64/0xb0 [ 3244.253638][ T4079] do_syscall_64+0x64/0xf0 [ 3244.258071][ T4079] ? clear_bhb_loop+0x50/0xa0 [ 3244.262758][ T4079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 3244.268835][ T4079] RIP: 0033:0x7f5da2b90a77 [ 3244.273261][ T4079] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 3244.292902][ T4079] RSP: 002b:00007ffc55ce3998 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 3244.301434][ T4079] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5da2b90a77 [ 3244.309420][ T4079] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc55ce3a50 [ 3244.317408][ T4079] RBP: 00007ffc55ce3a50 R08: 0000000000000000 R09: 0000000000000000 [ 3244.325409][ T4079] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc55ce4ae0 [ 3244.333391][ T4079] R13: 00007f5da2c13d7d R14: 0000000000317ccf R15: 00007ffc55ce4b20 [ 3244.341379][ T4079] [ 3244.344424][ T4079] Modules linked in: [ 3244.348389][ T4079] CR2: 0000000000000168 [ 3244.352634][ T4079] ---[ end trace 0000000000000000 ]--- [ 3244.358102][ T4079] RIP: 0010:ihold+0x2a/0x70 [ 3244.362716][ T4079] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 3244.382417][ T4079] RSP: 0018:ffffc9000288fca0 EFLAGS: 00010246 [ 3244.388498][ T4079] RAX: ffff8881244cb900 RBX: 0000000000000000 RCX: ffff8881244cb900 [ 3244.396571][ T4079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3244.404552][ T4079] RBP: ffffc9000288fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 3244.412716][ T4079] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88811448e5ac [ 3244.420708][ T4079] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 3244.428691][ T4079] FS: 000055557c8b9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 3244.437636][ T4079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3244.444236][ T4079] CR2: 0000000000000168 CR3: 0000000144f3a000 CR4: 00000000003526b0 [ 3244.452327][ T4079] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 3244.460402][ T4079] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3244.468388][ T4079] Kernel panic - not syncing: Fatal exception [ 3244.474763][ T4079] Kernel Offset: disabled [ 3244.479092][ T4079] Rebooting in 86400 seconds..