last executing test programs: 1m4.516128761s ago: executing program 1 (id=985): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000401080008001d000000", 0x24) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000088, &(0x7f0000000380)={0xa, 0x4e20, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/49, 0x31}, 0x5}], 0x1, 0x40032003, 0x0) 1m4.514830681s ago: executing program 1 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xdb, 0x0, 0x5, 0x8001, 0x4002004c8, 0x7b8, 0x0, 0x4, 0x2, 0x0, 0x0, 0x4000002], 0x8080000, 0x1144}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x29, 0x1f, 0x0, 0x47) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000440)=0x4000000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) (async) remap_file_pages(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x0, 0xe, 0x800) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m4.446810735s ago: executing program 1 (id=987): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x3c, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000400), 0x12) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x2c, 0x3) (async) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0088a8ffffffffffffaaaaaaaaaabb86dd694f9206001800000000000000000000000184009078b29b84596f2900080400fe800000000000000000ff"], 0x52) (async) r7 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) (async) read$ptp(0xffffffffffffffff, &(0x7f0000000200)=""/130, 0x82) (async) r8 = dup(r1) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f00000a6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="ba2100ed3e660f388097770064660f388125b801018ec066b9480200000f320f352e67d9f966b8010000000f01c10f0766660f5b25", 0x35}], 0x1, 0x74, &(0x7f0000000180)=[@cr0={0x0, 0xd3c16db94e862037}, @cstype3={0x5, 0x4}], 0x2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r8, 0x4068aea3, &(0x7f0000000300)={0xc5, 0x0, r1}) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000440)=[@nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x2b0}}, @wr_drn={0x68, 0x20, {0x6, 0x1}}], 0x68}) 1m4.334433252s ago: executing program 1 (id=988): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) poll(&(0x7f0000000000)=[{r0, 0x40}, {}, {0xffffffffffffffff, 0x8000}], 0x3, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) rmdir(&(0x7f0000000140)='./file1\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0xf3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, r5, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000980)={0x1, [{0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x1a, 0x2, 0x0}, {0x0, 0x8, 0x1cc03931, &(0x7f00000002c0)="8a"}, {0x1, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0x800, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x31d8, 0x0}, {0x2, 0x0, 0x244, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x5ad9, 0x0}]}) 1m4.092074916s ago: executing program 1 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) 1m4.01962444s ago: executing program 1 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@polexpire={0xc8, 0x1b, 0x31d, 0x70bd28, 0x25dfdbfc, {{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e20, 0x1, 0x4e24, 0x400, 0x2, 0x80, 0x0, 0x87}, {0x8, 0x10001, 0xfffffffffffffff4, 0x4, 0x2, 0x41ba, 0x7, 0x80000000}, {0x7fffffff, 0x3, 0x4, 0x8}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc8}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)) 1m3.895210997s ago: executing program 32 (id=992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@polexpire={0xc8, 0x1b, 0x31d, 0x70bd28, 0x25dfdbfc, {{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e20, 0x1, 0x4e24, 0x400, 0x2, 0x80, 0x0, 0x87}, {0x8, 0x10001, 0xfffffffffffffff4, 0x4, 0x2, 0x41ba, 0x7, 0x80000000}, {0x7fffffff, 0x3, 0x4, 0x8}, 0x3, 0x6e6bb8, 0x0, 0x0, 0x3, 0x1}, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc8}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)) 5.940606034s ago: executing program 2 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000000002) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000140)={{r0, &(0x7f0000000040)='/dev/kvm\x00', 0x480302, &(0x7f0000000080)={@align=0x2, {0x3399, 0x9, 0x40}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x2b}, {[0x7, 0x4, 0x7f, 0x6]}, 0x101, 0x1000, &(0x7f0000000300)=""/4096}) getsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000001c0)=""/38, &(0x7f0000000200)=0x26) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000240)) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffff9}]}) r4 = socket(0x11, 0x3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000001300)='schedstat\x00') ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.869397198s ago: executing program 2 (id=1390): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x1, 0x1ff, 0x1, 0x3, 0x9d, 0x8c, 0x11}, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) 5.850043479s ago: executing program 2 (id=1391): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0x8000009, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r2, 0x1) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r2, 0x0, 0x0, 0x8080, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x6, "052970c636f5"}, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xe, 0x2, "fa4d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() syz_usb_control_io$sierra_net(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xfffffffe) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x3, 0x23, "81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.192277327s ago: executing program 4 (id=1398): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000003c0)={0x200000000, 0x6, 0x0, [{0x40, 0xe5ab, 0x3, 0x5, 0x0, 0xed, 0xff, '\x00', 0x1}, {0x4, 0x7, 0x1, 0x8, 0x9, 0x3, 0x9, '\x00', 0x9}, {0x1, 0x4, 0x13, 0x7, 0x6, 0x7, 0xd2, '\x00', 0xbd}, {0x80, 0x8, 0x5, 0x1, 0x5, 0x5, 0x81, '\x00', 0x14}, {0x5, 0xfffffffffffffffd, 0x5, 0x3, 0x9, 0x7f, 0x71, '\x00', 0xfffffffffffffff8}, {0x4, 0x2, 0x5, 0x5, 0x90, 0x0, 0x1, '\x00', 0xfd8}]}) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000580)={{r3}, "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"}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socket(0x8000000010, 0x2, 0x0) (async) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) socket(0x840000000002, 0x3, 0x100) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x100) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) (async) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f00000003c0)={0x200000000, 0x6, 0x0, [{0x40, 0xe5ab, 0x3, 0x5, 0x0, 0xed, 0xff, '\x00', 0x1}, {0x4, 0x7, 0x1, 0x8, 0x9, 0x3, 0x9, '\x00', 0x9}, {0x1, 0x4, 0x13, 0x7, 0x6, 0x7, 0xd2, '\x00', 0xbd}, {0x80, 0x8, 0x5, 0x1, 0x5, 0x5, 0x81, '\x00', 0x14}, {0x5, 0xfffffffffffffffd, 0x5, 0x3, 0x9, 0x7f, 0x71, '\x00', 0xfffffffffffffff8}, {0x4, 0x2, 0x5, 0x5, 0x90, 0x0, 0x1, '\x00', 0xfd8}]}) (async) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000580)={{r3}, "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"}) (async) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async) 5.121222802s ago: executing program 4 (id=1399): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r4 = socket(0x1e, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000080)='./file0/file1\x00', 0xb) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_type(r5, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) shutdown(r4, 0x2) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0008140000001403fcd4869b496b5dbbf065800bd4c6ebe6fe68"], &(0x7f0000000100)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "04fa0cec7b027d8de76c784714431c67f5c2004e22e2be9803c23ffc5d9c0e147b8394548874236e60ccfdd241a2d4843e657489a0edfc8bfd500018635b5d3c8f8f415fba89c2a46c585c6da87b8d19c4bfb0c2f534d9b3624fe66e2e4f0e57e4ac6a5228e89a340c6b97dc0a7b599dc5a316a9b36033e612396fb79b4b3b9132e4f43f40f4148d4228a7ac55238ca23e331ab33504c82b885a45c2c540ede490239eeec7261a63d54b497d61f49d000a456e3a73ee111368117d51bafba0440cffc97a80e28b639c76dc13e87d6e850c70ea854d07ac1bb1ab"}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x10, 0x0, "4929ebe6", "d02349ab"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x40, 0xcd, 0xd0, 0x1ff, 0x7}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x40, 0x12, 0x71, "c9703b660c27d62140f3cb32328fc3a82af0d1c821f55842ee2a58a0580ef7bc568eaa15177332559a274f7a5850e54a2632e0ef7885016e54d5c1fe490b03472ef042098820aa4af418b1d1f195a12cabb77bb2b39b060e527884d3496654af7d827a4e16e833d2ac4ff259ca6add6889"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000000000edffffff"], &(0x7f0000000480)={0x40, 0x7, 0x2, 0xf}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, "c89a"}, &(0x7f0000000540)={0x40, 0xf, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "1b8e"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xed}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2, 0x1, 0x0, 0x8}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x1, &(0x7f0000002740)={0x0, 0xe8a8, 0x8, 0x3, 0x167}, &(0x7f00000027c0), &(0x7f0000002800)) 4.575274303s ago: executing program 0 (id=1400): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x9, 0xc, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}) 4.46448381s ago: executing program 0 (id=1401): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x22020600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setresgid(0xee00, 0xee01, 0x0) listen(r0, 0x0) setresgid(0x0, 0x0, 0xee01) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) listen(r0, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r1 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) 4.46419261s ago: executing program 0 (id=1402): socket$netlink(0x10, 0x3, 0x8) r0 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r0, 0x52, 0x0, 0x8000400001) unshare(0x7a030680) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 4.433316372s ago: executing program 0 (id=1403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fremovexattr(r2, &(0x7f00000033c0)=@known='system.posix_acl_access\x00') syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$packet(0x11, 0x2, 0x300) r3 = dup2(r1, r1) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000004c0)=0x8123) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000140)=0x1) write$UHID_INPUT(r3, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000020301020000000000000000000000000900040000000001000000000800034000000007080001"], 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x20004000) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000100)={'ipvlan1', 0x32, 0x32}, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c2100001e00090002000000ffdbdf2508"], 0x218c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 4.391120244s ago: executing program 0 (id=1404): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000407d1eed2c000000000001090224000100000000b3d9cad80122050009056b030800ace30c6dd35fb474c476fee1575775023f9b388a65135862d727aaed42bf18b4ab99c966518ba9a100"/91], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x40, 0x24, 0x27, {0x27, 0x7, "f744f1ccef5c2729ee157e1cddb1c057a8b206b5d80a4742221ce7f87da20a22a465719e88"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x462}}, &(0x7f00000001c0)={0x0, 0xf, 0x19c, {0x5, 0xf, 0x19c, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x7f, 0x7, 0xfb}, @generic={0xba, 0x10, 0x4, "d2cf2fb07ec930f2b5d5e2e2b933eff25a7f6134290e614016a97ac2dc111a6b54a91e8879c9f9a0de9de4080cf6fc3bcbdea072e3c5e20c8ff291900f018fe19984a14f481032f27e2b4007c603536ba233bf0960fb2dc1b16bbf461aa836f7736cae89ab86daae1836bd6789d41413b2c29562665d53dfd82563007d302f3a0093e015f2583355b425349c3defdbb37597900c535d11799bc66c7c28bc24c6a6447fb540d0c4d1a547fd43aa73f39750f4941139851b"}, @generic={0xc5, 0x10, 0x3, "6d9dd5c5ece44cd529e355f300123e9b8814c91919e9bf56b90cf94c89a889e5d5fda86237df3a56d66666deea8f0359e0870f450af33a15a2c9aa25d01d6ae949db3a63c5eb117562fd9c4f91a1df3aa19278cdb79af8b95efecfac7d154f1a4795af172a89db1eadf39b142d8ca0bf0364c45b6ac86f2430689b3e845c894f41ebb3c930728018e2c1bd158f877f1411810bfcf69b804215d6f468694167935bbb36ac05106ef48986c402bcb02a48409a4497209de163645db81f9b4c970f64d9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0x1}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0x80, 0x37, 0x4, "72615ac7", "d6f606f8"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x6, 0x7, 0x9, 0x5, 0x9}}}, &(0x7f0000000800)={0x84, &(0x7f0000000400)={0x20, 0x16, 0x2c, "1a8614f736e308dd1b3ee932d22576c77f8ce71416df7b136732563fe9d590191755670aa48a31d19bd74493"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x20}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "1c16"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x800}, &(0x7f0000000640)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000680)={0x40, 0x17, 0x6, @random="a840dc4c95fb"}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "3f1d"}, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80001, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0xcc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x23, 0x3, 0xffffe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000140), 0x8000, 0x101000) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) fcntl$getflags(r1, 0x406) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="4023020000000d00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f00000008c0)) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r6, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x24, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) 3.618447109s ago: executing program 3 (id=1405): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) setresuid(0xee01, 0xee00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x11) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'sit0\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x30, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xff, {0x8, 0x6, "6bb28a", 0x6, 0x33, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}}, 0x6a) 3.492487067s ago: executing program 3 (id=1406): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000104010200000000000900000a0000050a000200000000ff050000000500010001000000080003"], 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x4044844) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "1245f065"}, @local=@item_4={0x3, 0x2, 0x9, "cdc42fc2"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 3.42222106s ago: executing program 4 (id=1407): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB='\f\x00:'], 0x2c}, {&(0x7f0000000200)=ANY=[], 0x3864}], 0x2, 0x0, 0x0, 0x811}, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x934, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x13}}}}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4001000010003306000000000000000064010102000000000000000000000000fe8000000000000000000000000000bb00fe3f00001080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac1e00010000000000000000000000002703000000000000090000000000000000000000000000000400000000000000ff0f00000000000000000000000000000600000000000000000000000000000001000000000000000000000000000000000000000000000000000000000080008f00000000000000040000002dbd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000001000"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.404203911s ago: executing program 2 (id=1408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0x1023}], 0x1}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async, rerun: 32) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x41402, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES8=r0, @ANYBLOB=',\x00']) (async) r3 = socket$inet(0x2, 0x800, 0xd7) ioctl$int_out(r3, 0x2, &(0x7f0000000100)) (async) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) 3.344498485s ago: executing program 2 (id=1409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x863) 2.662120184s ago: executing program 4 (id=1410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x60, 0x30}, {0x0, 0x7, 0x20000000000003, 0x2, 0x0, 0xffffffffffffffff, 0x200, 0xfeffffffffffffff}, {0x3, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.641147416s ago: executing program 4 (id=1411): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1}, {&(0x7f00000001c0)=""/112, 0x70}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/111, 0x6f}], 0x4}}], 0x1, 0x40002002, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.516375603s ago: executing program 4 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x8302, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1.900065619s ago: executing program 2 (id=1413): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r0) socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfdb7, 0x9, 0x7e, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe665, 0x7fff, 0xb, 0x6, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x9, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0xa, 0x8, 0x4, 0x1, 0x40], [0xfffffff3, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xc1c7, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x3, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x605, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x8, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x7ffd, 0x7, 0x38, 0x4, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x10000003, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10001, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000080)) syz_usb_connect(0x6, 0x692, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x40400) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0xe1742, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write(r3, &(0x7f0000000400)="547bbe", 0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022e5fb000f5b61139c00"], 0x0}, 0x0) 1.158352762s ago: executing program 0 (id=1414): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x72f) sendmsg$unix(r0, 0x0, 0x11) recvmsg$unix(0xffffffffffffffff, 0x0, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, r2, 0x211, 0x70bd2d, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) prlimit64(0x0, 0x3, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)) syz_usb_connect(0x3, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e7010203010902440002000d000009049700010dd5ce000824020100e800000905000000000000000705a3f6d2"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f00000023c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@mode={'mode', 0x3d, 0x10001}}], [{@subj_user={'subj_user', 0x3d, 'devlink\x00'}}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000002500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa2efe0b54dbe0247}, 0xc, &(0x7f0000000300)={&(0x7f0000002480)=ANY=[@ANYBLOB="4d8783a8", @ANYRES16=r5, @ANYBLOB="01082cbd7000fedbdf25180000000c00990002000000030000000a000600ffffffffffff00000a001a0008021100000000000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 268.473874ms ago: executing program 3 (id=1415): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mincore(&(0x7f0000251000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/238) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mincore(&(0x7f0000251000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/238) (async) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) (async) 90.185405ms ago: executing program 3 (id=1416): setuid(0xee01) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) setfsuid(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000180)=0x9, 0x4) unshare(0x28000600) 67.785136ms ago: executing program 3 (id=1417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) read$FUSE(0xffffffffffffffff, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r0, &(0x7f0000000100)='net/sockstat6\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0000, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 0s ago: executing program 3 (id=1418): r0 = syz_io_uring_setup(0x644e, &(0x7f0000000c80)={0x0, 0x4538, 0x2000, 0x401, 0x25c}, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x80000001, 0x9, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x80000001, 0x9, 0x1}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000480)={{r0}, {@void, @actul_num={@void, 0xa4d, 0x6b}}}) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.846109][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.853769][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.862006][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.878092][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.886436][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.894488][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.902403][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.910295][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.917909][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.926982][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.935238][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.943292][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.950914][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.958811][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.966906][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.976170][ T9] hid-generic 0000:10000:0007.002B: unknown main item tag 0x0 [ 169.985361][ T9] hid-generic 0000:10000:0007.002B: hidraw1: HID v9.40 Device [syz1] on syz1 [ 170.025002][ T3577] fido_id[3577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.123230][ T10] usb 2-1: reset high-speed USB device number 83 using dummy_hcd [ 170.278340][ T36] audit: type=1400 audit(2000000003.049:654): avc: denied { getopt } for pid=3585 comm="syz.2.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 170.347151][ T491] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 170.507522][ T491] usb 1-1: no configurations [ 170.512529][ T491] usb 1-1: can't read configurations, error -22 [ 170.528333][ T488] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 170.656190][ T491] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 170.688317][ T488] usb 3-1: Using ep0 maxpacket: 32 [ 170.695038][ T488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.706323][ T488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.718048][ T488] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 170.727401][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.741569][ T488] usb 3-1: config 0 descriptor?? [ 170.816701][ T491] usb 1-1: no configurations [ 170.821934][ T491] usb 1-1: can't read configurations, error -22 [ 170.829284][ T491] usb usb1-port1: attempt power cycle [ 170.955404][ T9] usb 2-1: USB disconnect, device number 83 [ 171.177246][ T3586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.189236][ T491] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 171.200853][ T3586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.211397][ T491] usb 1-1: no configurations [ 171.216091][ T491] usb 1-1: can't read configurations, error -22 [ 171.232961][ T488] koneplus 0003:1E7D:2D51.002D: invalid report_size 58443 [ 171.245412][ T488] koneplus 0003:1E7D:2D51.002D: item 0 2 1 7 parsing failed [ 171.263914][ T488] koneplus 0003:1E7D:2D51.002D: parse failed [ 171.270324][ T488] koneplus 0003:1E7D:2D51.002D: probe with driver koneplus failed with error -22 [ 171.381074][ T491] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 171.390841][ T36] audit: type=1400 audit(2000000004.090:655): avc: denied { mounton } for pid=3623 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 171.414011][ T491] usb 1-1: no configurations [ 171.418815][ T491] usb 1-1: can't read configurations, error -22 [ 171.464846][ T31] usb 3-1: USB disconnect, device number 96 [ 171.482204][ T491] usb usb1-port1: unable to enumerate USB device [ 171.489992][ T2803] bridge_slave_1: left allmulticast mode [ 171.498435][ T2803] bridge_slave_1: left promiscuous mode [ 171.508199][ T2803] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.516412][ T2803] bridge_slave_0: left allmulticast mode [ 171.523366][ T2803] bridge_slave_0: left promiscuous mode [ 171.529198][ T2803] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.613111][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.621249][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.629055][ T3623] bridge_slave_0: entered allmulticast mode [ 171.637694][ T3623] bridge_slave_0: entered promiscuous mode [ 171.644618][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.653113][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.660566][ T3623] bridge_slave_1: entered allmulticast mode [ 171.667360][ T3623] bridge_slave_1: entered promiscuous mode [ 171.674638][ T2803] veth1_macvtap: left promiscuous mode [ 171.814025][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.821164][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.828666][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.835735][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.861435][ T2778] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.868953][ T2778] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.888455][ T2778] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.895585][ T2778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.903766][ T2778] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.911112][ T2778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.953603][ T3623] veth0_vlan: entered promiscuous mode [ 171.966902][ T3623] veth1_macvtap: entered promiscuous mode [ 171.997101][ T36] audit: type=1400 audit(2000000004.662:656): avc: denied { mounton } for pid=3623 comm="syz-executor" path="/root/syzkaller.4cVG3q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 172.074000][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.084248][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.179113][ T36] audit: type=1400 audit(2000000004.831:657): avc: denied { create } for pid=3643 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 172.211112][ T36] audit: type=1400 audit(2000000004.859:658): avc: denied { create } for pid=3648 comm="syz.3.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.329597][ T491] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 172.489509][ T491] usb 3-1: Using ep0 maxpacket: 32 [ 172.495907][ T491] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 172.504351][ T491] usb 3-1: config 0 has no interface number 0 [ 172.510697][ T491] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 172.520928][ T491] usb 3-1: config 0 interface 196 has no altsetting 0 [ 172.529923][ T491] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 172.539751][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.548242][ T491] usb 3-1: Product: syz [ 172.553117][ T491] usb 3-1: Manufacturer: syz [ 172.558081][ T491] usb 3-1: SerialNumber: syz [ 172.564747][ T491] usb 3-1: config 0 descriptor?? [ 172.570043][ T3637] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.221157][ T491] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 173.230846][ T491] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 173.242833][ T491] usb 3-1: USB disconnect, device number 97 [ 173.256912][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.304221][ T3678] kvm: kvm [3677]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 173.314308][ T491] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 173.325360][ T3678] kvm: kvm [3677]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 173.427518][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 173.435994][ T31] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.449021][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 173.458544][ T31] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 173.468047][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.476391][ T31] usb 5-1: Product: syz [ 173.480573][ T31] usb 5-1: Manufacturer: syz [ 173.485269][ T31] usb 5-1: SerialNumber: syz [ 173.709281][ T31] usbhid 5-1:1.0: can't add hid device: -71 [ 173.715476][ T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 173.724324][ T31] usb 5-1: USB disconnect, device number 2 [ 173.736548][ T488] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 173.768585][ T491] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 173.896445][ T488] usb 1-1: Using ep0 maxpacket: 32 [ 173.903365][ T488] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 173.912104][ T488] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 173.921324][ T488] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 173.930696][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.941510][ T488] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 173.951327][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 173.962728][ T488] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.973074][ T491] usb 3-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 173.983684][ T488] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 173.997128][ T491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.006173][ T488] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.015601][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.025228][ T491] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.034827][ T488] usb 1-1: config 0 descriptor?? [ 174.043270][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.051708][ T491] usb 3-1: Product: syz [ 174.055978][ T491] usb 3-1: Manufacturer: syz [ 174.056105][ T3681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.060856][ T491] usb 3-1: SerialNumber: syz [ 174.278120][ T3719] rust_binder: Error while translating object. [ 174.278204][ T3719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.280783][ T36] audit: type=1400 audit(2000000006.801:659): avc: denied { transfer } for pid=3718 comm="syz.4.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 174.285366][ T3719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 174.338420][ T36] audit: type=1400 audit(2000000006.858:660): avc: denied { append } for pid=3680 comm="syz.0.1007" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 174.407360][ T488] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 92 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.517810][ T36] audit: type=1326 audit(2000000007.027:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.541752][ T491] usb 3-1: 0:2 : does not exist [ 174.557976][ T36] audit: type=1326 audit(2000000007.027:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.587331][ T491] usb 1-1: USB disconnect, device number 92 [ 174.594151][ T36] audit: type=1326 audit(2000000007.027:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.618122][ T491] usblp0: removed [ 174.621355][ T31] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 174.624919][ T36] audit: type=1326 audit(2000000007.027:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.655326][ T36] audit: type=1326 audit(2000000007.027:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.679380][ T36] audit: type=1326 audit(2000000007.027:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.703490][ T36] audit: type=1326 audit(2000000007.027:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.727182][ T36] audit: type=1326 audit(2000000007.027:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1feaf9bf79 code=0x7fc00000 [ 174.792859][ T31] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 174.801192][ T31] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 174.834360][ T31] usb 5-1: config 179 has no interface number 0 [ 174.840707][ T31] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0 [ 174.866338][ T31] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 174.887670][ T31] usb 5-1: config 179 interface 65 has no altsetting 0 [ 174.894701][ T31] usb 5-1: New USB device found, idVendor=f5ab, idProduct=00da, bcdDevice= 0.00 [ 174.919632][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.162966][ T31] usb 5-1: USB disconnect, device number 3 [ 176.490911][ T3760] /dev/loop0: Can't lookup blockdev [ 176.593983][ T338] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 176.603723][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.629803][ T31] usb 3-1: USB disconnect, device number 98 [ 176.752993][ T338] usb 1-1: device descriptor read/64, error -71 [ 176.763640][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 176.770730][ T10] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 176.779169][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.789684][ T10] usb 5-1: config 0 has no interface number 0 [ 176.795864][ T10] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 176.807076][ T10] usb 5-1: config 0 interface 96 altsetting 3 endpoint 0x88 has invalid wMaxPacketSize 0 [ 176.817155][ T10] usb 5-1: config 0 interface 96 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.832307][ T10] usb 5-1: config 0 interface 96 has no altsetting 0 [ 176.841439][ T10] usb 5-1: New USB device found, idVendor=0b57, idProduct=76aa, bcdDevice=46.5f [ 176.850784][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.858969][ T10] usb 5-1: Product: syz [ 176.863240][ T10] usb 5-1: Manufacturer: syz [ 176.867957][ T10] usb 5-1: SerialNumber: syz [ 176.873779][ T10] usb 5-1: config 0 descriptor?? [ 176.987541][ T31] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 177.019466][ T338] usb 1-1: device descriptor read/64, error -71 [ 177.095696][ T10] usb 5-1: USB disconnect, device number 4 [ 177.147372][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 177.153954][ T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 177.163349][ T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 177.172094][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 177.181184][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 177.191247][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 177.201453][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 177.213024][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 177.223424][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 177.236815][ T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 177.246405][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.256753][ T31] usb 3-1: config 0 descriptor?? [ 177.262146][ T3764] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 177.275347][ T338] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 177.424753][ T338] usb 1-1: device descriptor read/64, error -71 [ 177.485674][ T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 99 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 177.680654][ T338] usb 1-1: device descriptor read/64, error -71 [ 177.797625][ T338] usb usb1-port1: attempt power cycle [ 177.822039][ T3783] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 177.832553][ C1] usblp0: nonzero read bulk status received: -71 [ 177.840195][ T31] usb 3-1: USB disconnect, device number 99 [ 178.000159][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 178.138601][ T10] usb 5-1: device descriptor read/64, error -71 [ 178.159923][ T338] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 178.182969][ T338] usb 1-1: device descriptor read/8, error -71 [ 178.213110][ T3763] usblp0: removed [ 178.321229][ T338] usb 1-1: device descriptor read/8, error -71 [ 178.394644][ T10] usb 5-1: device descriptor read/64, error -71 [ 178.575642][ T338] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 178.598002][ T338] usb 1-1: device descriptor read/8, error -71 [ 178.650266][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 178.736980][ T338] usb 1-1: device descriptor read/8, error -71 [ 178.789625][ T10] usb 5-1: device descriptor read/64, error -71 [ 178.863503][ T338] usb usb1-port1: unable to enumerate USB device [ 179.044639][ T10] usb 5-1: device descriptor read/64, error -71 [ 179.161988][ T10] usb usb5-port1: attempt power cycle [ 179.311079][ T31] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 179.470905][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 179.477478][ T31] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 179.485914][ T31] usb 3-1: config 0 has no interface number 0 [ 179.492040][ T31] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 179.503903][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 179.512985][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.521067][ T31] usb 3-1: Product: syz [ 179.525316][ T31] usb 3-1: Manufacturer: syz [ 179.529926][ T31] usb 3-1: SerialNumber: syz [ 179.534880][ T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 179.545629][ T31] usb 3-1: config 0 descriptor?? [ 179.551857][ T3804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.560225][ T10] usb 5-1: device descriptor read/8, error -71 [ 179.692542][ T36] kauditd_printk_skb: 16081 callbacks suppressed [ 179.692563][ T36] audit: type=1400 audit(2000000011.877:16750): avc: denied { create } for pid=3821 comm="syz.3.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.719707][ T10] usb 5-1: device descriptor read/8, error -71 [ 179.735674][ T36] audit: type=1400 audit(2000000011.915:16751): avc: denied { map } for pid=3821 comm="syz.3.1053" path="socket:[22801]" dev="sockfs" ino=22801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.759054][ T36] audit: type=1400 audit(2000000011.915:16752): avc: denied { read accept } for pid=3821 comm="syz.3.1053" path="socket:[22801]" dev="sockfs" ino=22801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.783701][ T3804] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.802488][ T36] audit: type=1400 audit(2000000011.990:16753): avc: denied { create } for pid=3823 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 179.971924][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 179.994647][ T10] usb 5-1: device descriptor read/8, error -71 [ 180.014518][ T367] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 180.132916][ T10] usb 5-1: device descriptor read/8, error -71 [ 180.153316][ T367] usb 1-1: device descriptor read/64, error -71 [ 180.249228][ T10] usb usb5-port1: unable to enumerate USB device [ 180.275917][ T31] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 180.286220][ T31] asix 3-1:0.188: probe with driver asix failed with error -71 [ 180.294844][ T31] usb 3-1: USB disconnect, device number 100 [ 180.408980][ T367] usb 1-1: device descriptor read/64, error -71 [ 180.664699][ T367] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 180.803279][ T367] usb 1-1: device descriptor read/64, error -71 [ 180.829456][ T3835] futex_wake_op: syz.2.1057 tries to shift op by 144; fix this program [ 180.974877][ T3839] netlink: 'syz.4.1059': attribute type 2 has an invalid length. [ 181.059130][ T367] usb 1-1: device descriptor read/64, error -71 [ 181.101743][ T10] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 181.176478][ T367] usb usb1-port1: attempt power cycle [ 181.263090][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 181.271967][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.282225][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 181.297710][ T10] usb 3-1: string descriptor 0 read error: -22 [ 181.303951][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 181.313129][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.321903][ T10] usb 3-1: config 0 descriptor?? [ 181.336637][ T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 181.340360][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.389510][ T488] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.538711][ T367] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 181.549361][ T488] usb 5-1: Using ep0 maxpacket: 16 [ 181.555921][ T488] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.561627][ T367] usb 1-1: device descriptor read/8, error -71 [ 181.566229][ T488] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.583106][ T488] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.592370][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.600369][ T488] usb 5-1: Product: syz [ 181.604664][ T488] usb 5-1: Manufacturer: syz [ 181.609310][ T488] usb 5-1: SerialNumber: syz [ 181.715843][ T31] usb 3-1: USB disconnect, device number 101 [ 181.724498][ T367] usb 1-1: device descriptor read/8, error -71 [ 181.830784][ T488] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 181.840685][ T488] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 181.850637][ T488] usb 5-1: USB disconnect, device number 9 [ 181.859571][ T2025] udevd[2025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.997054][ T367] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 182.019683][ T367] usb 1-1: device descriptor read/8, error -71 [ 182.036705][ T36] audit: type=1400 audit(2000000014.082:16754): avc: denied { mount } for pid=3847 comm="syz.3.1062" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 182.044766][ T3848] overlayfs: failed to clone lowerpath [ 182.111985][ T3850] overlayfs: failed to resolve './file0': -2 [ 182.111998][ T3851] overlayfs: failed to resolve './file0': -2 [ 182.144258][ T36] audit: type=1326 audit(2000000014.176:16755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.2.1065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4dd9bf79 code=0x0 [ 182.158497][ T367] usb 1-1: device descriptor read/8, error -71 [ 182.197426][ T3857] netlink: 'syz.3.1064': attribute type 4 has an invalid length. [ 182.285026][ T367] usb usb1-port1: unable to enumerate USB device [ 182.394496][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 182.508658][ T488] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 182.668595][ T488] usb 3-1: Using ep0 maxpacket: 32 [ 182.675111][ T488] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.686210][ T488] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 182.695399][ T488] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 182.703573][ T488] usb 3-1: Product: syz [ 182.707767][ T488] usb 3-1: Manufacturer: syz [ 182.712451][ T488] usb 3-1: SerialNumber: syz [ 182.718365][ T488] usb 3-1: config 0 descriptor?? [ 183.201484][ T488] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 183.318743][ T10] usb 3-1: USB disconnect, device number 102 [ 183.332245][ T3874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 183.362540][ T488] usb 1-1: config 127 has an invalid interface number: 4 but max is 0 [ 183.380151][ T488] usb 1-1: config 127 has no interface number 0 [ 183.386514][ T488] usb 1-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= 8.a3 [ 183.395679][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.469053][ T3878] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 183.469089][ T3878] rust_binder: Read failure Err(EFAULT) in pid:581 [ 183.479044][ T3877] rust_binder: Error while translating object. [ 183.485980][ T3877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 183.490457][ T3880] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64804 sclass=netlink_xfrm_socket pid=3880 comm=syz.4.1072 [ 183.493339][ T3877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:581 [ 183.621847][ T3871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3871 comm=syz.0.1069 [ 183.645377][ T488] usb 1-1: string descriptor 0 read error: -71 [ 183.653263][ T488] ums-datafab 1-1:127.4: USB Mass Storage device detected [ 183.725832][ T488] ums-sddr55 1-1:127.4: USB Mass Storage device detected [ 183.768203][ T488] usb 1-1: USB disconnect, device number 101 [ 183.787702][ T491] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 183.787737][ T367] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 183.937043][ T491] usb 5-1: device descriptor read/64, error -71 [ 183.958249][ T367] usb 3-1: Using ep0 maxpacket: 32 [ 183.964528][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.975567][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.985556][ T367] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.998460][ T367] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 184.007753][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.016717][ T367] usb 3-1: config 0 descriptor?? [ 184.192737][ T491] usb 5-1: device descriptor read/64, error -71 [ 184.448588][ T491] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 184.459189][ T46] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 184.472137][ T367] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002E/input/input37 [ 184.486035][ T367] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002E/input/input38 [ 184.506587][ T367] kye 0003:0458:5011.002E: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 184.587111][ T491] usb 5-1: device descriptor read/64, error -71 [ 184.640393][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 184.646747][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 184.655145][ T46] usb 1-1: config 179 has no interface number 0 [ 184.661740][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 184.673297][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 184.684719][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 184.696474][ T46] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 184.708412][ T46] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 184.725452][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 184.734708][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.745045][ T3891] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 184.853705][ T491] usb 5-1: device descriptor read/64, error -71 [ 184.971211][ T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input39 [ 184.974821][ T491] usb usb5-port1: attempt power cycle [ 184.997082][ T488] usb 1-1: USB disconnect, device number 102 [ 184.997107][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.011687][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 185.022027][ T488] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 185.040853][ T3900] loop7: detected capacity change from 0 to 8 [ 185.354597][ T491] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 185.376903][ T491] usb 5-1: device descriptor read/8, error -71 [ 185.515474][ T491] usb 5-1: device descriptor read/8, error -71 [ 185.653219][ C0] kye 0003:0458:5011.002E: usb_submit_urb(ctrl) failed: -1 [ 185.770254][ T491] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 185.793029][ T491] usb 5-1: device descriptor read/8, error -71 [ 185.926826][ T3925] overlayfs: failed to clone upperpath [ 185.932477][ T488] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 185.941344][ T491] usb 5-1: device descriptor read/8, error -71 [ 185.978323][ T36] audit: type=1326 audit(2000000017.778:16756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.3.1084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a2879bf79 code=0x0 [ 186.058169][ T491] usb usb5-port1: unable to enumerate USB device [ 186.090088][ T581] usb 3-1: reset high-speed USB device number 103 using dummy_hcd [ 186.098824][ T581] usb 3-1: device reset changed ep0 maxpacket size! [ 186.105548][ T488] usb 1-1: Using ep0 maxpacket: 16 [ 186.111094][ T46] usb 3-1: USB disconnect, device number 103 [ 186.112559][ T488] usb 1-1: config 0 has an invalid interface number: 187 but max is 7 [ 186.125755][ T488] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 186.136037][ T488] usb 1-1: config 0 has no interface number 0 [ 186.142185][ T488] usb 1-1: config 0 interface 187 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 186.155686][ T488] usb 1-1: config 0 interface 187 has no altsetting 0 [ 186.164379][ T488] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 186.173655][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.182297][ T488] usb 1-1: Product: syz [ 186.186563][ T488] usb 1-1: Manufacturer: syz [ 186.191190][ T488] usb 1-1: SerialNumber: syz [ 186.197037][ T488] usb 1-1: config 0 descriptor?? [ 186.271204][ T46] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 186.432438][ T46] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 186.433542][ T488] ftdi_sio 1-1:0.187: FTDI USB Serial Device converter detected [ 186.445234][ T46] usb 3-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 186.451262][ T488] usb 1-1: Detected FT232R [ 186.464069][ T488] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 186.464071][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.464097][ T46] usb 3-1: config 1 has no interface number 0 [ 186.471231][ T488] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 186.480207][ T46] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 186.487265][ T488] ftdi_sio 1-1:0.187: GPIO initialisation failed: -71 [ 186.493216][ T46] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 186.508118][ T488] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 186.513077][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.530306][ T488] usb 1-1: USB disconnect, device number 103 [ 186.539099][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.554829][ T488] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 186.556649][ T46] usb 3-1: Product: syz [ 186.569836][ T46] usb 3-1: Manufacturer: syz [ 186.574539][ T46] usb 3-1: SerialNumber: syz [ 186.585104][ T488] ftdi_sio 1-1:0.187: device disconnected [ 186.587156][ T46] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 186.598968][ T46] cdc_ncm 3-1:1.1: bind() failure [ 186.804782][ T491] usb 3-1: USB disconnect, device number 104 [ 187.155901][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 187.273132][ T491] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 187.317100][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.327335][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.337373][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.347708][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.357502][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.373207][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.383424][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.393704][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.403539][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.413938][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.423207][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 187.432980][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.434753][ T491] usb 1-1: config index 0 descriptor too short (expected 53284, got 36) [ 187.450696][ T491] usb 1-1: config 190 has too many interfaces: 218, using maximum allowed: 32 [ 187.461706][ T491] usb 1-1: config 190 has 1 interface, different from the descriptor's value: 218 [ 187.471592][ T491] usb 1-1: config 190 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.483526][ T491] usb 1-1: config 190 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 187.496726][ T491] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31cf, bcdDevice= 0.00 [ 187.506237][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.667333][ T46] usb 5-1: string descriptor 0 read error: -71 [ 187.676907][ T46] usb 5-1: USB disconnect, device number 14 [ 187.710144][ T367] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 187.733790][ T491] usb 1-1: string descriptor 0 read error: -71 [ 187.741627][ T491] usbhid 1-1:190.0: can't add hid device: -22 [ 187.748062][ T491] usbhid 1-1:190.0: probe with driver usbhid failed with error -22 [ 187.757775][ T491] usb 1-1: USB disconnect, device number 104 [ 187.869974][ T367] usb 3-1: Using ep0 maxpacket: 32 [ 187.876620][ T367] usb 3-1: config index 0 descriptor too short (expected 30244, got 36) [ 187.885109][ T367] usb 3-1: config 175 has too many interfaces: 69, using maximum allowed: 32 [ 187.894176][ T367] usb 3-1: config 175 has an invalid descriptor of length 219, skipping remainder of the config [ 187.904819][ T367] usb 3-1: config 175 has 0 interfaces, different from the descriptor's value: 69 [ 187.916172][ T367] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39 [ 187.925355][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.933422][ T367] usb 3-1: Product: syz [ 187.937756][ T367] usb 3-1: Manufacturer: syz [ 187.942469][ T367] usb 3-1: SerialNumber: syz [ 188.163904][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.172744][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.185786][ T367] usb 3-1: USB disconnect, device number 105 [ 188.304105][ T3941] overlay: Unknown parameter 'fsuuid' [ 188.311169][ T3941] netlink: 'syz.0.1090': attribute type 27 has an invalid length. [ 188.321146][ T3941] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 188.480629][ T2778] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.797304][ T46] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 188.967841][ T46] usb 5-1: Invalid ep0 maxpacket: 32 [ 188.999834][ T491] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 189.117045][ T46] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 189.160900][ T491] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 65, using maximum allowed: 30 [ 189.191654][ T491] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 189.223641][ T491] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.230307][ T491] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 189.239423][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.248436][ T491] usb 3-1: config 0 descriptor?? [ 189.276941][ T46] usb 5-1: Invalid ep0 maxpacket: 32 [ 189.282471][ T46] usb usb5-port1: attempt power cycle [ 189.650966][ T46] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 189.672768][ T46] usb 5-1: Invalid ep0 maxpacket: 32 [ 189.688267][ T491] uclogic 0003:5543:0064.002F: unbalanced delimiter at end of report description [ 189.700212][ T491] uclogic 0003:5543:0064.002F: parse failed [ 189.706612][ T491] uclogic 0003:5543:0064.002F: probe with driver uclogic failed with error -22 [ 189.809917][ T46] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 189.831605][ T46] usb 5-1: Invalid ep0 maxpacket: 32 [ 189.837212][ T46] usb usb5-port1: unable to enumerate USB device [ 189.971665][ T46] usb 3-1: USB disconnect, device number 106 [ 190.641262][ T781] Bluetooth: hci0: command 0x1003 tx timeout [ 190.647333][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.653566][ T3951] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 190.790495][ T491] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 190.907289][ T3981] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1104'. [ 190.951859][ T491] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.962940][ T491] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 190.973778][ T491] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2632, setting to 64 [ 190.984770][ T491] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 190.997417][ T491] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.006558][ T491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.014616][ T491] usb 3-1: Product: syz [ 191.018800][ T491] usb 3-1: Manufacturer: syz [ 191.023393][ T491] usb 3-1: SerialNumber: syz [ 191.029279][ T3967] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.089015][ T488] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 191.248780][ T488] usb 1-1: Using ep0 maxpacket: 16 [ 191.251282][ T3967] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.256094][ T488] usb 1-1: config index 0 descriptor too short (expected 55844, got 36) [ 191.261798][ T3967] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.269911][ T488] usb 1-1: config 128 has too many interfaces: 245, using maximum allowed: 32 [ 191.285682][ T488] usb 1-1: config 128 has an invalid interface number: 251 but max is 244 [ 191.294286][ T488] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 191.304704][ T488] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 245 [ 191.313980][ T488] usb 1-1: config 128 has no interface number 0 [ 191.321691][ T488] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 191.330910][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.338987][ T488] usb 1-1: Product: syz [ 191.343193][ T488] usb 1-1: Manufacturer: syz [ 191.347866][ T488] usb 1-1: SerialNumber: syz [ 191.499969][ T491] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 191.506124][ T491] cdc_ncm 3-1:1.0: bind() failure [ 191.514296][ T491] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 191.521211][ T491] cdc_ncm 3-1:1.1: bind() failure [ 191.530615][ T491] usb 3-1: USB disconnect, device number 107 [ 191.553994][ T36] audit: type=1326 audit(2000000023.004:16757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.2.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e4dd9bf79 code=0x0 [ 191.569585][ T3969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.585611][ T3969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.595557][ T488] asix 1-1:128.251: probe with driver asix failed with error -22 [ 191.604631][ T488] usb 1-1: USB disconnect, device number 105 [ 192.042434][ T4014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=4014 comm=syz.4.1116 [ 192.055634][ T4014] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=4014 comm=syz.4.1116 [ 192.200989][ T2803] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.207528][ T2803] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.335995][ T46] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.518297][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.525099][ T46] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 192.534592][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.560400][ T46] usb 5-1: config 0 descriptor?? [ 192.719762][ T31] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 192.891452][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.902610][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.912719][ T31] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 192.922332][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.933326][ T31] usb 3-1: config 0 descriptor?? [ 193.068052][ T46] saitek 0003:06A3:0CD7.0030: hidraw0: USB HID v0.04 Device [HID 06a3:0cd7] on usb-dummy_hcd.4-1/input0 [ 193.178786][ T4049] fuse: Bad value for 'fd' [ 193.203392][ T36] audit: type=1400 audit(2000000024.562:16758): avc: denied { ioctl } for pid=4050 comm="syz.3.1127" path="socket:[22420]" dev="sockfs" ino=22420 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 193.274409][ T46] usb 5-1: USB disconnect, device number 19 [ 193.444179][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 193.453542][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.465553][ T31] usb 3-1: USB disconnect, device number 108 [ 193.795575][ T4056] netlink: 'syz.3.1129': attribute type 27 has an invalid length. [ 193.853250][ T4060] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27419 sclass=netlink_xfrm_socket pid=4060 comm=syz.3.1130 [ 193.922404][ T36] audit: type=1400 audit(2000000025.228:16759): avc: denied { write } for pid=4070 comm="syz.3.1134" name="/" dev="configfs" ino=2447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.945302][ T36] audit: type=1400 audit(2000000025.228:16760): avc: denied { add_name } for pid=4070 comm="syz.3.1134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.966211][ T36] audit: type=1400 audit(2000000025.228:16761): avc: denied { create } for pid=4070 comm="syz.3.1134" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 194.005829][ T4073] fuse: Bad value for 'fd' [ 194.032096][ T4075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'. [ 194.115985][ T488] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 194.277869][ T488] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.287570][ T488] usb 5-1: config 2 has an invalid interface number: 106 but max is 1 [ 194.296106][ T488] usb 5-1: config 2 has an invalid descriptor of length 118, skipping remainder of the config [ 194.306896][ T488] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 194.316582][ T488] usb 5-1: config 2 has no interface number 0 [ 194.323095][ T488] usb 5-1: too many endpoints for config 2 interface 106 altsetting 27: 209, using maximum allowed: 30 [ 194.334627][ T488] usb 5-1: config 2 interface 106 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 194.339571][ T46] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 194.349205][ T488] usb 5-1: config 2 interface 106 has no altsetting 0 [ 194.365129][ T488] usb 5-1: New USB device found, idVendor=046d, idProduct=c11f, bcdDevice=8a.13 [ 194.374687][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.383367][ T488] usb 5-1: Product: syz [ 194.387672][ T488] usb 5-1: Manufacturer: syz [ 194.392316][ T488] usb 5-1: SerialNumber: syz [ 194.403794][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.410146][ T4023] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 194.532819][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.547212][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.565324][ T46] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 194.575898][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.588596][ T46] usb 3-1: config 0 descriptor?? [ 194.617500][ T488] usb 5-1: USB disconnect, device number 20 [ 194.683299][ T4098] fuse: Bad value for 'fd' [ 194.709436][ T4100] cgroup: Need name or subsystem set [ 194.716533][ T36] audit: type=1400 audit(2000000025.978:16762): avc: denied { bpf } for pid=4099 comm="syz.0.1145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.762459][ T4102] fuse: Unknown parameter '000000000000000000000030x00000000000000030000000000000000000000300000000000000000000' [ 195.024927][ T46] ryos 0003:1E7D:31CE.0031: ignoring exceeding usage max [ 195.033539][ T46] ryos 0003:1E7D:31CE.0031: item fetching failed at offset 3/5 [ 195.041623][ T46] ryos 0003:1E7D:31CE.0031: parse failed [ 195.047359][ T31] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 195.055206][ T46] ryos 0003:1E7D:31CE.0031: probe with driver ryos failed with error -22 [ 195.175231][ T4106] input: syz0 as /devices/virtual/input/input40 [ 195.225676][ T31] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.237176][ T31] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 195.248740][ T31] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.258555][ T4077] netlink: 'syz.2.1137': attribute type 16 has an invalid length. [ 195.262954][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.277681][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 195.286860][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.290571][ T488] usb 3-1: USB disconnect, device number 109 [ 195.302824][ T31] usb 1-1: config 0 descriptor?? [ 195.312872][ T4104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 195.356451][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.365074][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.728237][ T4124] fuse: Unknown parameter '@' [ 195.750544][ T36] audit: type=1400 audit(2000000026.945:16763): avc: denied { connect } for pid=4103 comm="syz.0.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.768506][ T31] logitech 0003:046D:C218.0032: hidraw0: USB HID v0.08 Device [HID 046d:c218] on usb-dummy_hcd.0-1/input0 [ 195.786207][ T31] logitech 0003:046D:C218.0032: no inputs found [ 195.966550][ T10] usb 1-1: USB disconnect, device number 106 [ 196.109160][ T488] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 196.247735][ T488] usb 3-1: device descriptor read/64, error -71 [ 196.293873][ T36] audit: type=1400 audit(2000000027.461:16764): avc: denied { append } for pid=4137 comm="syz.3.1157" name="netlink" dev="proc" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 196.378776][ T4151] tipc: Enabling of bearer rejected, failed to enable media [ 196.503537][ T488] usb 3-1: device descriptor read/64, error -71 [ 196.759351][ T488] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 196.780775][ T46] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 196.897993][ T488] usb 3-1: device descriptor read/64, error -71 [ 196.941744][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.952971][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.966369][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 196.975585][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.984777][ T46] usb 1-1: config 0 descriptor?? [ 196.991712][ T4166] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1165'. [ 197.153778][ T488] usb 3-1: device descriptor read/64, error -71 [ 197.260432][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 197.271230][ T488] usb usb3-port1: attempt power cycle [ 197.420210][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 197.426087][ T10] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 197.432273][ T46] ryos 0003:1E7D:31CE.0033: ignoring exceeding usage max [ 197.442690][ T46] ryos 0003:1E7D:31CE.0033: item fetching failed at offset 3/5 [ 197.450470][ T46] ryos 0003:1E7D:31CE.0033: parse failed [ 197.456197][ T46] ryos 0003:1E7D:31CE.0033: probe with driver ryos failed with error -22 [ 197.594576][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 197.604611][ T4175] fuse: Unknown parameter 'rootm000000000000100000' [ 197.633862][ T488] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 197.644367][ T46] usb 1-1: USB disconnect, device number 107 [ 197.666456][ T488] usb 3-1: device descriptor read/8, error -71 [ 197.805440][ T488] usb 3-1: device descriptor read/8, error -71 [ 198.059711][ T488] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 198.082285][ T488] usb 3-1: device descriptor read/8, error -71 [ 198.220734][ T488] usb 3-1: device descriptor read/8, error -71 [ 198.286832][ T4193] incfs: Error accessing: ./file0. [ 198.292084][ T4193] incfs: mount failed -20 [ 198.337208][ T488] usb usb3-port1: unable to enumerate USB device [ 198.408249][ T4193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:646 [ 198.408389][ T4193] rust_binder: BC_FREEZE_NOTIFICATION_DONE 4004630700000000 not found [ 198.425870][ T4193] rust_binder: Write failure EINVAL in pid:646 [ 198.892666][ T4198] overlayfs: failed to clone upperpath [ 199.456240][ T491] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 199.477565][ T46] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 199.616113][ T491] usb 1-1: Using ep0 maxpacket: 32 [ 199.622455][ T491] usb 1-1: config 4 has an invalid interface number: 228 but max is 0 [ 199.630798][ T491] usb 1-1: config 4 has no interface number 0 [ 199.636952][ T491] usb 1-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 199.648125][ T491] usb 1-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 132 [ 199.650514][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.658352][ T491] usb 1-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 199.670484][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.682715][ T491] usb 1-1: config 4 interface 228 has no altsetting 0 [ 199.696978][ T46] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 199.705487][ T491] usb 1-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 199.711852][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.721103][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.733674][ T46] usb 3-1: config 0 descriptor?? [ 199.743419][ T491] usb 1-1: Product: syz [ 199.747745][ T491] usb 1-1: Manufacturer: syz [ 199.752395][ T491] usb 1-1: SerialNumber: syz [ 199.758414][ T4210] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 199.987447][ T491] usb 1-1: USB disconnect, device number 108 [ 200.001727][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.149406][ T10] usb 5-1: string descriptor 0 read error: -71 [ 200.162130][ T10] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 200.172278][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.186812][ T46] ryos 0003:1E7D:31CE.0034: ignoring exceeding usage max [ 200.193348][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 200.200522][ T10] r8152-cfgselector 5-1: rejected 8 configurations due to insufficient available bus power [ 200.210319][ T46] ryos 0003:1E7D:31CE.0034: item fetching failed at offset 3/5 [ 200.219096][ T46] ryos 0003:1E7D:31CE.0034: parse failed [ 200.224043][ T10] r8152-cfgselector 5-1: no configuration chosen from 8 choices [ 200.233119][ T46] ryos 0003:1E7D:31CE.0034: probe with driver ryos failed with error -22 [ 200.242115][ T10] r8152-cfgselector 5-1: USB disconnect, device number 21 [ 200.323995][ T4236] overlayfs: failed to clone upperpath [ 200.398727][ T4206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.407357][ T4206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.415853][ T491] usb 3-1: USB disconnect, device number 114 [ 200.554200][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 200.715356][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 200.727139][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 200.738209][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 200.748081][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.761071][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.770205][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.779042][ T10] usb 5-1: config 0 descriptor?? [ 200.799444][ T46] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 200.900570][ T4242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1196'. [ 200.909731][ T4242] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1196'. [ 200.918776][ T4242] tipc: Invalid UDP bearer configuration [ 200.918803][ T4242] tipc: Enabling of bearer rejected, failed to enable media [ 200.960474][ T46] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 576, setting to 64 [ 200.971668][ T46] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 200.982865][ T46] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.996636][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 201.005598][ T46] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.015208][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.023519][ T46] usb 1-1: Product: syz [ 201.027819][ T46] usb 1-1: Manufacturer: syz [ 201.028735][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 201.032444][ T46] usb 1-1: SerialNumber: syz [ 201.043973][ T4238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.052194][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 201.055365][ T4238] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.073920][ T10] usb 5-1: USB disconnect, device number 22 [ 201.075018][ T4249] overlayfs: conflicting lowerdir path [ 201.089815][ T4249] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 201.137293][ T4256] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.137313][ T4256] rust_binder: Read failure Err(EFAULT) in pid:123 [ 201.145842][ T4256] rust_binder: validate_parent_fixup: new_min_offset=52, sg_entry.length=0 [ 201.152675][ T4256] rust_binder: Error while translating object. [ 201.161940][ T4256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.168180][ T4256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 201.247204][ T491] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 201.302604][ T46] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 201.312294][ T46] usb 1-1: USB disconnect, device number 109 [ 201.419045][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.430184][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.440095][ T491] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.453212][ T491] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.462315][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.471208][ T491] usb 3-1: config 0 descriptor?? [ 201.545568][ T352] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 201.554605][ T4261] fuse: Bad value for 'group_id' [ 201.559723][ T4261] fuse: Bad value for 'group_id' [ 201.684259][ T352] usb 5-1: device descriptor read/64, error -71 [ 201.890202][ T4265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.899231][ T4265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.910147][ T491] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 201.919205][ T491] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.940025][ T352] usb 5-1: device descriptor read/64, error -71 [ 202.113883][ T4269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=4269 comm=syz.3.1205 [ 202.142544][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 202.195894][ T352] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 202.302464][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 202.309114][ T10] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 202.317388][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.327991][ T10] usb 1-1: config 0 has no interface number 0 [ 202.334646][ T352] usb 5-1: device descriptor read/64, error -71 [ 202.336004][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.350108][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.358183][ T10] usb 1-1: Product: syz [ 202.362410][ T10] usb 1-1: Manufacturer: syz [ 202.367077][ T10] usb 1-1: SerialNumber: syz [ 202.372277][ T10] usb 1-1: config 0 descriptor?? [ 202.378851][ T10] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 202.385212][ T10] usb 1-1: No valid video chain found. [ 202.590274][ T352] usb 5-1: device descriptor read/64, error -71 [ 202.597686][ T10] usb 1-1: USB disconnect, device number 110 [ 202.707640][ T352] usb usb5-port1: attempt power cycle [ 202.743952][ T36] audit: type=1400 audit(2000000033.511:16765): avc: denied { mounton } for pid=4280 comm="syz.3.1210" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 202.744142][ T4281] 9pnet_fd: Insufficient options for proto=fd [ 202.828828][ T4272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.837629][ T4272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.850626][ T10] usb 3-1: USB disconnect, device number 115 [ 203.069991][ T352] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 203.092775][ T352] usb 5-1: device descriptor read/8, error -71 [ 203.211103][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 203.230905][ T4297] Invalid argument reading file caps for ./file0 [ 203.231071][ T352] usb 5-1: device descriptor read/8, error -71 [ 203.360938][ T4306] netlink: 8540 bytes leftover after parsing attributes in process `syz.3.1219'. [ 203.370185][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1219'. [ 203.379277][ T4306] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1219'. [ 203.382098][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.398322][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.408231][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.417432][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.425472][ T10] usb 3-1: SerialNumber: syz [ 203.496542][ T352] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 203.518971][ T352] usb 5-1: device descriptor read/8, error -71 [ 203.645585][ T4293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.654161][ T4293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.663807][ T10] usb 3-1: 0:2 : does not exist [ 203.663847][ T352] usb 5-1: device descriptor read/8, error -71 [ 203.676653][ T10] usb 3-1: USB disconnect, device number 116 [ 203.688646][ T2025] udevd[2025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 203.784596][ T352] usb usb5-port1: unable to enumerate USB device [ 203.942569][ T4310] fuse: Bad value for 'fd' [ 204.072157][ T352] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 204.210634][ T352] usb 1-1: device descriptor read/64, error -71 [ 204.466502][ T352] usb 1-1: device descriptor read/64, error -71 [ 204.519749][ T10] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 204.658309][ T10] usb 3-1: device descriptor read/64, error -71 [ 204.732929][ T352] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 204.871521][ T352] usb 1-1: device descriptor read/64, error -71 [ 204.903586][ T46] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 204.914165][ T10] usb 3-1: device descriptor read/64, error -71 [ 205.064837][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 205.075848][ T46] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 205.084939][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.093880][ T46] usb 5-1: config 0 descriptor?? [ 205.099200][ T4325] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 205.127354][ T352] usb 1-1: device descriptor read/64, error -71 [ 205.170073][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 205.244766][ T352] usb usb1-port1: attempt power cycle [ 205.308886][ T10] usb 3-1: device descriptor read/64, error -71 [ 205.325172][ T46] a4tech 0003:09DA:001A.0036: hidraw0: USB HID vff.fb Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 205.358545][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.367350][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.565595][ T10] usb 3-1: device descriptor read/64, error -71 [ 205.573852][ T491] usb 5-1: USB disconnect, device number 27 [ 205.607047][ T352] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 205.639804][ T352] usb 1-1: device descriptor read/8, error -71 [ 205.692364][ T10] usb usb3-port1: attempt power cycle [ 205.778834][ T352] usb 1-1: device descriptor read/8, error -71 [ 205.945999][ T36] audit: type=1400 audit(2000000036.504:16766): avc: denied { ioctl } for pid=4353 comm="syz.4.1237" path="socket:[24139]" dev="sockfs" ino=24139 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.947087][ T4354] Unsupported ieee802154 address type: 0 [ 206.033592][ T352] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 206.054828][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 206.056485][ T352] usb 1-1: device descriptor read/8, error -71 [ 206.079584][ T10] usb 3-1: device descriptor read/8, error -71 [ 206.205672][ T352] usb 1-1: device descriptor read/8, error -71 [ 206.215903][ T10] usb 3-1: device descriptor read/8, error -71 [ 206.321401][ T352] usb usb1-port1: unable to enumerate USB device [ 206.374599][ T31] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 206.470599][ T10] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 206.492983][ T10] usb 3-1: device descriptor read/8, error -71 [ 206.534500][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 206.541160][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.549655][ T31] usb 5-1: config 0 has no interface number 0 [ 206.555831][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 206.563927][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.573114][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.581181][ T31] usb 5-1: Product: syz [ 206.585357][ T31] usb 5-1: Manufacturer: syz [ 206.590067][ T31] usb 5-1: SerialNumber: syz [ 206.595669][ T31] usb 5-1: config 0 descriptor?? [ 206.602009][ T31] smsc75xx v1.0.0 [ 206.631736][ T10] usb 3-1: device descriptor read/8, error -71 [ 206.747822][ T10] usb usb3-port1: unable to enumerate USB device [ 207.172902][ T4382] pim6reg1: entered promiscuous mode [ 207.178632][ T4382] pim6reg1: entered allmulticast mode [ 207.885558][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 207.896627][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.906304][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 207.917164][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 207.926992][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 207.931115][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 207.937925][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 207.954994][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 207.964641][ T31] usb 5-1: USB disconnect, device number 28 [ 208.045196][ T4410] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 208.090673][ T36] audit: type=1400 audit(2000000038.521:16767): avc: denied { create } for pid=4414 comm="syz.3.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 208.110609][ T10] usb 3-1: device descriptor read/64, error -71 [ 208.368038][ T10] usb 3-1: device descriptor read/64, error -71 [ 208.440164][ T36] audit: type=1400 audit(2000000038.849:16768): avc: denied { unlink } for pid=3623 comm="syz-executor" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.623879][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 208.719842][ T46] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 208.762505][ T10] usb 3-1: device descriptor read/64, error -71 [ 208.879766][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 208.886195][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.897161][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.907883][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.916994][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.925062][ T46] usb 5-1: SerialNumber: syz [ 209.018327][ T10] usb 3-1: device descriptor read/64, error -71 [ 209.140852][ T10] usb usb3-port1: attempt power cycle [ 209.150527][ T4422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.159219][ T4422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.168273][ T46] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 209.180806][ T46] usb 5-1: USB disconnect, device number 29 [ 209.402198][ T352] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 209.508668][ T10] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 209.531187][ T10] usb 3-1: device descriptor read/8, error -71 [ 209.562002][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 209.572287][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.583957][ T352] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 209.593197][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.602190][ T352] usb 1-1: config 0 descriptor?? [ 209.669781][ T10] usb 3-1: device descriptor read/8, error -71 [ 209.769516][ T4454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1272'. [ 209.793191][ T36] audit: type=1400 audit(2000000040.115:16769): avc: denied { read } for pid=4455 comm="syz.4.1273" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.816186][ T36] audit: type=1400 audit(2000000040.115:16770): avc: denied { open } for pid=4455 comm="syz.4.1273" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.839656][ T36] audit: type=1400 audit(2000000040.115:16771): avc: denied { ioctl } for pid=4455 comm="syz.4.1273" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.924603][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 209.947039][ T10] usb 3-1: device descriptor read/8, error -71 [ 210.052388][ T491] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 210.085547][ T10] usb 3-1: device descriptor read/8, error -71 [ 210.113058][ T352] hkems 0003:2006:0118.0037: unbalanced delimiter at end of report description [ 210.122296][ T352] hkems 0003:2006:0118.0037: parse failed [ 210.128163][ T352] hkems 0003:2006:0118.0037: probe with driver hkems failed with error -22 [ 210.201679][ T10] usb usb3-port1: unable to enumerate USB device [ 210.213422][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.224422][ T491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.234326][ T491] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 210.243418][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.255134][ T491] usb 5-1: config 0 descriptor?? [ 210.530536][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.539124][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.701573][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.710366][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.762815][ T491] playstation 0003:054C:0DF2.0038: unknown main item tag 0x1 [ 210.770336][ T491] playstation 0003:054C:0DF2.0038: item fetching failed at offset 4/5 [ 210.778937][ T491] playstation 0003:054C:0DF2.0038: Parse failed [ 210.785251][ T491] playstation 0003:054C:0DF2.0038: probe with driver playstation failed with error -22 [ 210.840992][ T36] audit: type=1400 audit(2000000041.100:16772): avc: denied { sys_module } for pid=4467 comm="syz.3.1277" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 210.977615][ T10] usb 5-1: USB disconnect, device number 30 [ 211.288896][ T491] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 211.418025][ T4472] overlayfs: failed to resolve './file1': -2 [ 211.448854][ T491] usb 3-1: Using ep0 maxpacket: 16 [ 211.455278][ T491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.466286][ T491] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 211.475432][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.484144][ T491] usb 3-1: config 0 descriptor?? [ 211.531327][ T36] audit: type=1400 audit(2000000041.748:16773): avc: denied { name_bind } for pid=4475 comm="syz.4.1281" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 211.621223][ T4486] vlan0: entered allmulticast mode [ 211.626454][ T4486] veth0_vlan: entered allmulticast mode [ 211.634112][ T4485] vlan0: left allmulticast mode [ 211.639090][ T4485] veth0_vlan: left allmulticast mode [ 211.709364][ T4489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.745373][ T36] audit: type=1400 audit(2000000041.945:16774): avc: denied { read } for pid=4493 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.782079][ T491] usbhid 3-1:0.0: can't add hid device: -71 [ 211.788550][ T491] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.800448][ T491] usb 3-1: USB disconnect, device number 125 [ 211.806769][ T36] audit: type=1400 audit(2000000042.010:16775): avc: denied { write } for pid=4495 comm="syz.2.1288" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.990844][ T4499] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.1289'. [ 212.011562][ T36] audit: type=1326 audit(2000000042.198:16776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4500 comm="syz.3.1290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a2879bf79 code=0x0 [ 212.093934][ T4508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1292'. [ 212.173751][ T491] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 212.312255][ T491] usb 3-1: device descriptor read/64, error -71 [ 212.342506][ T10] usb 1-1: USB disconnect, device number 115 [ 212.568092][ T491] usb 3-1: device descriptor read/64, error -71 [ 212.696057][ T10] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 212.823970][ T491] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 212.855908][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 212.862242][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 212.870562][ T10] usb 1-1: config 0 has no interface number 0 [ 212.876719][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 212.886966][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 212.895569][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 212.904901][ T488] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 212.912761][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.920863][ T10] usb 1-1: Product: syz [ 212.925218][ T10] usb 1-1: Manufacturer: syz [ 212.929822][ T10] usb 1-1: SerialNumber: syz [ 212.935171][ T10] usb 1-1: config 0 descriptor?? [ 212.940592][ T4515] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.973198][ T491] usb 3-1: device descriptor read/64, error -71 [ 213.081214][ T488] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.092355][ T488] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 213.103309][ T488] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.116272][ T488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.123081][ T488] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 213.132263][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.141454][ T488] usb 5-1: config 0 descriptor?? [ 213.146827][ T4517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 213.169247][ T10] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 213.177198][ T10] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 213.187042][ T10] usb 1-1: USB disconnect, device number 116 [ 213.271711][ T491] usb 3-1: device descriptor read/64, error -71 [ 213.389087][ T491] usb usb3-port1: attempt power cycle [ 213.751360][ T491] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 213.773675][ T491] usb 3-1: device descriptor read/8, error -71 [ 213.792982][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 213.793002][ T36] audit: type=1400 audit(2000000043.868:16778): avc: denied { create } for pid=4538 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 213.820360][ T488] usbhid 5-1:0.0: can't add hid device: -71 [ 213.826399][ T488] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.835285][ T488] usb 5-1: USB disconnect, device number 31 [ 213.912497][ T491] usb 3-1: device descriptor read/8, error -71 [ 214.148952][ T4552] kvm: kvm [4551]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xc80e [ 214.157904][ T4552] kvm: kvm [4551]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x24a7 [ 214.167134][ T491] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 214.189850][ T491] usb 3-1: device descriptor read/8, error -71 [ 214.216548][ T4555] 9pnet_fd: p9_fd_create_unix (4555): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 214.328619][ T491] usb 3-1: device descriptor read/8, error -71 [ 214.375958][ T36] audit: type=1400 audit(2000000044.421:16779): avc: denied { remount } for pid=4558 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 214.410640][ T4562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1309'. [ 214.420079][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4562 comm=syz.4.1309 [ 214.435653][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43690 sclass=netlink_route_socket pid=4562 comm=syz.4.1309 [ 214.444761][ T491] usb usb3-port1: unable to enumerate USB device [ 214.497718][ T10] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 214.657525][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 214.664774][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 214.676063][ T10] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 214.689060][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.695899][ T10] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 214.705020][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.713791][ T10] usb 1-1: config 0 descriptor?? [ 214.721605][ T352] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 214.881342][ T352] usb 5-1: Using ep0 maxpacket: 16 [ 214.887819][ T352] usb 5-1: config 222 interface 0 has no altsetting 0 [ 214.896586][ T352] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 214.905922][ T352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.913985][ T352] usb 5-1: Product: syz [ 214.918172][ T352] usb 5-1: Manufacturer: syz [ 214.922791][ T352] usb 5-1: SerialNumber: syz [ 215.023362][ T36] audit: type=1400 audit(2000000045.031:16780): avc: denied { ioctl } for pid=4586 comm="syz.2.1318" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 215.061916][ T4591] >: renamed from veth0_vlan (while UP) [ 215.149366][ T10] hid-thrustmaster 0003:044F:B65D.0039: hidraw0: USB HID v0.04 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 215.161647][ T10] hid-thrustmaster 0003:044F:B65D.0039: Wrong number of endpoints? [ 215.267437][ T4601] netlink: 'syz.3.1322': attribute type 11 has an invalid length. [ 215.275679][ T4601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=4601 comm=syz.3.1322 [ 215.324872][ T4605] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.1324'. [ 215.356656][ T36] audit: type=1400 audit(2000000045.341:16781): avc: denied { read } for pid=4561 comm="syz.4.1309" path="socket:[25907]" dev="sockfs" ino=25907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.383417][ C0] hid-thrustmaster 0003:044F:B65D.0039: URB to get model id failed with error -71 [ 215.385379][ T46] usb 1-1: USB disconnect, device number 117 [ 215.412134][ T352] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 215.422315][ T352] usb 5-1: USB disconnect, device number 32 [ 215.435549][ T2025] udevd[2025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.693989][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1326'. [ 216.020596][ T4623] syzkaller1: entered promiscuous mode [ 216.026201][ T4623] syzkaller1: entered allmulticast mode [ 216.033607][ T36] audit: type=1326 audit(2000000045.978:16782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.2.1332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e4dd9bf79 code=0x0 [ 216.192553][ T367] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 216.298402][ T4628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1334'. [ 216.320459][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 216.353605][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.363622][ T367] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 216.372832][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.381732][ T367] usb 1-1: config 0 descriptor?? [ 216.480363][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 216.486944][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 216.495319][ T10] usb 5-1: config 0 has no interface number 0 [ 216.503344][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 216.512566][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.520586][ T10] usb 5-1: Product: syz [ 216.524852][ T10] usb 5-1: Manufacturer: syz [ 216.529497][ T10] usb 5-1: SerialNumber: syz [ 216.535020][ T10] usb 5-1: config 0 descriptor?? [ 216.541204][ T10] smsc95xx v2.0.0 [ 216.603417][ T367] apple 0003:05AC:0292.003A: unbalanced collection at end of report description [ 216.612832][ T367] apple 0003:05AC:0292.003A: parse failed [ 216.618739][ T367] apple 0003:05AC:0292.003A: probe with driver apple failed with error -22 [ 216.819453][ T367] usb 1-1: USB disconnect, device number 118 [ 216.976083][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 216.988357][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.999135][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 217.019409][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 217.030524][ T10] usb 5-1: USB disconnect, device number 33 [ 217.418981][ T4656] fuse: Bad value for 'fd' [ 217.420607][ T4657] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1343'. [ 217.432536][ T4657] z00ªX¹¦: renamed from gretap0 [ 217.438019][ T4657] z00ªX¹¦: left promiscuous mode [ 217.443022][ T4657] z00ªX¹¦: entered allmulticast mode [ 217.454139][ T367] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 217.486075][ T36] audit: type=1400 audit(2000000047.339:16783): avc: denied { listen } for pid=4664 comm="syz.3.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.505792][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 217.621011][ T491] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 217.622727][ T367] usb 3-1: config 9 has an invalid interface number: 81 but max is 0 [ 217.637007][ T367] usb 3-1: config 9 has no interface number 0 [ 217.643188][ T367] usb 3-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 217.654167][ T367] usb 3-1: config 9 interface 81 has no altsetting 0 [ 217.662393][ T367] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 217.671517][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.676253][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 217.679806][ T367] usb 3-1: Product: syz [ 217.691484][ T10] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 217.694644][ T367] usb 3-1: Manufacturer: syz [ 217.705257][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.708645][ T367] usb 3-1: SerialNumber: syz [ 217.721633][ T10] usb 5-1: config 0 descriptor?? [ 217.727025][ T4652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.737236][ T4648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.780948][ T491] usb 1-1: Using ep0 maxpacket: 32 [ 217.787505][ T491] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 217.795978][ T491] usb 1-1: config 0 has no interface number 0 [ 217.802117][ T491] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 217.812286][ T491] usb 1-1: config 0 interface 196 has no altsetting 0 [ 217.820927][ T491] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 217.830124][ T491] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.838206][ T491] usb 1-1: Product: syz [ 217.842437][ T491] usb 1-1: Manufacturer: syz [ 217.847121][ T491] usb 1-1: SerialNumber: syz [ 217.852690][ T491] usb 1-1: config 0 descriptor?? [ 217.858185][ T4654] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 217.960404][ T4648] lo: entered allmulticast mode [ 217.967886][ T4648] syzkaller1: entered promiscuous mode [ 217.973513][ T4648] syzkaller1: entered allmulticast mode [ 217.983552][ T367] usbserial_generic 3-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 217.995238][ T367] usbserial_generic 3-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 218.006177][ T367] usbserial_generic 3-1:9.81: generic converter detected [ 218.014509][ T367] usb 3-1: generic converter now attached to ttyUSB0 [ 218.022737][ T367] usb 3-1: generic converter now attached to ttyUSB1 [ 218.031977][ T367] usb 3-1: USB disconnect, device number 4 [ 218.042752][ T367] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 218.052380][ T367] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 218.060972][ T367] usbserial_generic 3-1:9.81: device disconnected [ 218.075284][ T4668] netlink: 'syz.3.1346': attribute type 17 has an invalid length. [ 218.087982][ T4668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4668 comm=syz.3.1346 [ 218.169957][ T10] a4tech 0003:09DA:001A.003B: hidraw0: USB HID vff.fb Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 218.382535][ T10] usb 5-1: USB disconnect, device number 34 [ 218.878884][ T367] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 218.936373][ T4682] overlayfs: failed to clone upperpath [ 219.040066][ T367] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 219.048368][ T367] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 219.058754][ T367] usb 3-1: config 0 has no interface number 0 [ 219.060877][ T491] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 219.065295][ T367] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 219.081222][ T491] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 219.083749][ T367] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 219.104438][ T367] usb 3-1: config 0 interface 255 has no altsetting 0 [ 219.112798][ T367] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=f8.41 [ 219.121946][ T367] usb 3-1: New USB device strings: Mfr=255, Product=246, SerialNumber=2 [ 219.130394][ T367] usb 3-1: Product: syz [ 219.135178][ T367] usb 3-1: Manufacturer: syz [ 219.139854][ T367] usb 3-1: SerialNumber: syz [ 219.146659][ T367] usb 3-1: config 0 descriptor?? [ 219.209340][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 219.367078][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.370162][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 219.376193][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.387122][ T10] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 219.391861][ T367] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 219.397957][ T10] usb 5-1: config 4 has no interface number 0 [ 219.407334][ T367] ftdi_sio ttyUSB0: unknown device type: 0xf841 [ 219.418177][ T367] usb 3-1: USB disconnect, device number 5 [ 219.424852][ T367] ftdi_sio 3-1:0.255: device disconnected [ 219.427209][ T10] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 40384, setting to 1024 [ 219.442451][ T10] usb 5-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024 [ 219.452735][ T10] usb 5-1: config 4 interface 228 has no altsetting 0 [ 219.461366][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 219.470475][ T10] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 219.478716][ T10] usb 5-1: Product: syz [ 219.482936][ T10] usb 5-1: Manufacturer: syz [ 219.487577][ T10] usb 5-1: SerialNumber: syz [ 219.493833][ T4682] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 219.502805][ T46] usb 1-1: USB disconnect, device number 119 [ 219.539963][ T46] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 219.721056][ T10] usb 5-1: USB disconnect, device number 35 [ 219.730631][ T2025] udevd[2025]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.081599][ T36] audit: type=1400 audit(2000000049.768:16785): avc: denied { map } for pid=4726 comm="syz.0.1356" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.104895][ T36] audit: type=1400 audit(2000000049.768:16784): avc: denied { map } for pid=4726 comm="syz.0.1356" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.128285][ T36] audit: type=1400 audit(2000000049.768:16786): avc: denied { execute } for pid=4726 comm="syz.0.1356" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.152331][ T36] audit: type=1400 audit(2000000049.768:16787): avc: denied { execute } for pid=4726 comm="syz.0.1356" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.211361][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 220.337851][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.361231][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.379564][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.388551][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 220.396103][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.403344][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.414676][ T46] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 220.432438][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.439630][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.447841][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.456086][ T46] usb 3-1: Product: syz [ 220.460430][ T46] usb 3-1: Manufacturer: syz [ 220.465060][ T46] usb 3-1: SerialNumber: syz [ 220.469921][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.477028][ T4731] bridge_slave_0: entered allmulticast mode [ 220.484249][ T46] usb 3-1: config 0 descriptor?? [ 220.489791][ T4731] bridge_slave_0: entered promiscuous mode [ 220.497151][ T46] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 220.505907][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.513546][ T46] usb 3-1: Detected FT232H [ 220.518076][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.525733][ T4731] bridge_slave_1: entered allmulticast mode [ 220.532422][ T4731] bridge_slave_1: entered promiscuous mode [ 220.566669][ T2801] bridge_slave_1: left allmulticast mode [ 220.572445][ T2801] bridge_slave_1: left promiscuous mode [ 220.578365][ T2801] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.585770][ T488] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 220.594611][ T2801] bridge_slave_0: left allmulticast mode [ 220.595228][ T367] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 220.600824][ T2801] bridge_slave_0: left promiscuous mode [ 220.614104][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.711368][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 220.728362][ T46] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 220.736263][ T46] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 220.744222][ T46] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 220.756218][ T488] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.760425][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.774329][ T4731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.781687][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.787162][ T488] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.788847][ T4731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.807623][ T46] usb 3-1: USB disconnect, device number 6 [ 220.813140][ T488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 220.820187][ T2801] tipc: Left network mode [ 220.825977][ T367] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 220.828772][ T488] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 220.840959][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.846025][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.856410][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 220.872450][ T488] usb 5-1: config 0 descriptor?? [ 220.882083][ T2801] veth1_macvtap: left promiscuous mode [ 220.889934][ T367] usb 1-1: config 0 descriptor?? [ 220.890312][ T2801] veth0_vlan: left promiscuous mode [ 220.901022][ T46] ftdi_sio 3-1:0.0: device disconnected [ 221.010433][ T2778] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.018133][ T2778] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.029875][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.037007][ T2803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.047710][ T2778] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.054860][ T2778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.094185][ T4731] veth0_vlan: entered promiscuous mode [ 221.108343][ T4731] veth1_macvtap: entered promiscuous mode [ 221.121749][ T367] usbhid 1-1:0.0: can't add hid device: -71 [ 221.128201][ T367] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 221.139944][ T367] usb 1-1: USB disconnect, device number 120 [ 221.310351][ T46] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 221.318674][ T488] lenovo 0003:17EF:60EE.003C: unknown main item tag 0x0 [ 221.325868][ T488] lenovo 0003:17EF:60EE.003C: unknown main item tag 0x0 [ 221.332959][ T488] lenovo 0003:17EF:60EE.003C: unknown main item tag 0x0 [ 221.339937][ T488] lenovo 0003:17EF:60EE.003C: unknown main item tag 0x0 [ 221.347192][ T488] lenovo 0003:17EF:60EE.003C: unknown main item tag 0x0 [ 221.355085][ T488] lenovo 0003:17EF:60EE.003C: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 221.437321][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 221.458655][ T46] usb 3-1: device descriptor read/64, error -71 [ 221.597271][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 221.603869][ T31] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 221.612259][ T31] usb 4-1: config 0 has no interface number 0 [ 221.618408][ T31] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 221.628530][ T31] usb 4-1: config 0 interface 196 has no altsetting 0 [ 221.637090][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 221.646258][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.654509][ T31] usb 4-1: Product: syz [ 221.658729][ T31] usb 4-1: Manufacturer: syz [ 221.663528][ T31] usb 4-1: SerialNumber: syz [ 221.669310][ T31] usb 4-1: config 0 descriptor?? [ 221.674904][ T4760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.719006][ T4763] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 221.719036][ T4763] rust_binder: Read failure Err(EFAULT) in pid:734 [ 221.727230][ T46] usb 3-1: device descriptor read/64, error -71 [ 221.730408][ T4763] rust_binder: Error while translating object. [ 221.740263][ T4763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 221.747097][ T4763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:734 [ 221.779844][ T488] lenovo 0003:17EF:60EE.003C: Fn-lock setting failed: -71 [ 221.796629][ T488] lenovo 0003:17EF:60EE.003C: Sensitivity setting failed: -71 [ 221.806016][ T488] usb 5-1: USB disconnect, device number 36 [ 221.981040][ T46] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 222.066348][ T367] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 222.119566][ T46] usb 3-1: device descriptor read/64, error -71 [ 222.226212][ T367] usb 1-1: Using ep0 maxpacket: 32 [ 222.232448][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.243497][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.253402][ T367] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 222.262602][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.272302][ T367] usb 1-1: config 0 descriptor?? [ 222.281698][ T4765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.290823][ T4765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.407428][ T46] usb 3-1: device descriptor read/64, error -71 [ 222.524731][ T46] usb usb3-port1: attempt power cycle [ 222.588640][ T491] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 222.707792][ T367] koneplus 0003:1E7D:2D51.003D: unknown main item tag 0x1 [ 222.715892][ T367] koneplus 0003:1E7D:2D51.003D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 222.749813][ T491] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 222.757935][ T491] usb 5-1: config 0 has no interface number 0 [ 222.764431][ T491] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.775522][ T491] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.785377][ T491] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 222.795106][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.804055][ T491] usb 5-1: config 0 descriptor?? [ 222.887194][ T46] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 222.910015][ T46] usb 3-1: device descriptor read/8, error -71 [ 223.023497][ T4767] syz_tun: refused to change device tx_queue_len [ 223.032218][ T491] uclogic 0003:28BD:0905.003E: Interface probing failed: -22 [ 223.039847][ T491] uclogic 0003:28BD:0905.003E: interface is invalid, ignoring [ 223.049182][ T46] usb 3-1: device descriptor read/8, error -71 [ 223.244749][ T491] usb 5-1: USB disconnect, device number 37 [ 223.302864][ T46] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 223.325172][ T46] usb 3-1: device descriptor read/8, error -71 [ 223.464146][ T46] usb 3-1: device descriptor read/8, error -71 [ 223.580120][ T46] usb usb3-port1: unable to enumerate USB device [ 224.070611][ T491] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 224.224225][ T4779] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 224.231175][ T491] usb 5-1: Using ep0 maxpacket: 32 [ 224.238301][ T491] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.247052][ T491] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 224.255868][ T491] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.266068][ T491] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.277634][ T491] usb 5-1: string descriptor 0 read error: -22 [ 224.283951][ T491] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.293061][ T491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.305954][ T491] usb 5-1: 0:2 : does not exist [ 224.382230][ T31] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 224.397065][ T31] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 224.407123][ T31] usb 4-1: USB disconnect, device number 23 [ 224.527404][ T4774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1139860394 (145902130432 ns) > initial count (76008557568 ns). Using initial count to start timer. [ 224.547243][ T4774] kvm: kvm [4773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 224.556260][ T4774] kvm: kvm [4773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 224.574619][ T4774] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 224.592348][ T491] usb 5-1: USB disconnect, device number 38 [ 224.720633][ T31] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 224.892308][ T31] usb 4-1: config 1 has too many interfaces: 235, using maximum allowed: 32 [ 224.901835][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.911956][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 235 [ 224.921216][ T31] usb 4-1: config 1 has no interface number 1 [ 224.927523][ T31] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.940883][ T367] koneplus 0003:1E7D:2D51.003D: couldn't init struct koneplus_device [ 224.949274][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 224.956260][ T367] koneplus 0003:1E7D:2D51.003D: couldn't install mouse [ 224.964469][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 224.973617][ T367] koneplus 0003:1E7D:2D51.003D: probe with driver koneplus failed with error -71 [ 224.984462][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.993850][ T367] usb 1-1: USB disconnect, device number 121 [ 224.999917][ T31] usb 4-1: Product: syz [ 225.004137][ T31] usb 4-1: Manufacturer: syz [ 225.010728][ T31] usb 4-1: SerialNumber: syz [ 225.232565][ T31] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 225.317600][ T367] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 225.447449][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.456073][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.464743][ T491] usb 4-1: USB disconnect, device number 24 [ 225.478828][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.489931][ T367] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.499725][ T367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.512681][ T367] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.521772][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.530549][ T367] usb 1-1: config 0 descriptor?? [ 225.541413][ T488] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 225.704392][ T488] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 225.713649][ T488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.721700][ T488] usb 5-1: Product: syz [ 225.725984][ T488] usb 5-1: Manufacturer: syz [ 225.730631][ T488] usb 5-1: SerialNumber: syz [ 225.966950][ T367] plantronics 0003:047F:FFFF.003F: No inputs registered, leaving [ 225.976117][ T367] plantronics 0003:047F:FFFF.003F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 226.298347][ T367] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 226.436915][ T367] usb 4-1: device descriptor read/64, error -71 [ 226.620362][ C0] plantronics 0003:047F:FFFF.003F: hid_field_extract() called with n (132) > 32! (swapper/0) [ 226.692714][ T367] usb 4-1: device descriptor read/64, error -71 [ 226.845200][ T46] usb 1-1: USB disconnect, device number 122 [ 226.948612][ T367] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 227.087130][ T367] usb 4-1: device descriptor read/64, error -71 [ 227.342970][ T367] usb 4-1: device descriptor read/64, error -71 [ 227.460323][ T367] usb usb4-port1: attempt power cycle [ 227.641468][ T46] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 227.758756][ T488] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.780080][ T46] usb 1-1: device descriptor read/64, error -71 [ 227.822874][ T367] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 227.845214][ T367] usb 4-1: device descriptor read/8, error -71 [ 227.918637][ T488] usb 3-1: Using ep0 maxpacket: 16 [ 227.926807][ T488] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 227.936065][ T488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.944193][ T488] usb 3-1: Product: syz [ 227.948362][ T488] usb 3-1: Manufacturer: syz [ 227.953053][ T488] usb 3-1: SerialNumber: syz [ 227.994369][ T367] usb 4-1: device descriptor read/8, error -71 [ 228.035917][ T46] usb 1-1: device descriptor read/64, error -71 [ 228.249143][ T367] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 228.271682][ T367] usb 4-1: device descriptor read/8, error -71 [ 228.291742][ T46] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 228.390573][ T488] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 228.401379][ T488] usb 3-1: USB disconnect, device number 11 [ 228.409813][ T2025] udevd[2025]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.421384][ T367] usb 4-1: device descriptor read/8, error -71 [ 228.432886][ T46] usb 1-1: device descriptor read/64, error -71 [ 228.491446][ T491] usb 5-1: USB disconnect, device number 39 [ 228.542553][ T4808] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1378'. [ 228.551826][ T367] usb usb4-port1: unable to enumerate USB device [ 228.552930][ T4808] syzkaller0: entered promiscuous mode [ 228.563917][ T4808] syzkaller0: entered allmulticast mode [ 228.696801][ T46] usb 1-1: device descriptor read/64, error -71 [ 228.814236][ T46] usb usb1-port1: attempt power cycle [ 229.053295][ T36] audit: type=1400 audit(2000000058.192:16788): avc: denied { view } for pid=4810 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 229.072965][ T4812] ªªªªªª: renamed from vlan0 (while UP) [ 229.121927][ T4821] EXT4-fs: Conflicting test_dummy_encryption options [ 229.176508][ T46] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 229.199370][ T46] usb 1-1: device descriptor read/8, error -71 [ 229.316607][ T2801] Bluetooth: hci0: Frame reassembly failed (-84) [ 229.337544][ T46] usb 1-1: device descriptor read/8, error -71 [ 229.371388][ T36] audit: type=1400 audit(2000000058.492:16789): avc: denied { append } for pid=4840 comm="syz.3.1389" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 229.581592][ T367] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 229.602904][ T46] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 229.625280][ T46] usb 1-1: device descriptor read/8, error -71 [ 229.776253][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 229.782011][ T46] usb 1-1: device descriptor read/8, error -71 [ 229.792724][ T367] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 229.801154][ T367] usb 3-1: config 1 has no interface number 0 [ 229.807578][ T367] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.817712][ T367] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.828832][ T367] usb 3-1: config 1 interface 105 has no altsetting 0 [ 229.838569][ T367] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 229.852284][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.865866][ T367] usb 3-1: Product: syz [ 229.870397][ T367] usb 3-1: Manufacturer: syz [ 229.875363][ T367] usb 3-1: SerialNumber: syz [ 229.885266][ T4845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.892748][ T4845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.912382][ T46] usb usb1-port1: unable to enumerate USB device [ 229.952146][ T4866] netlink: 'syz.4.1398': attribute type 12 has an invalid length. [ 230.009411][ T4866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 230.009455][ T4866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:233 [ 230.025697][ T4867] netlink: 'syz.4.1398': attribute type 12 has an invalid length. [ 230.317146][ T488] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 230.332703][ T4845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.340128][ T4845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.497945][ T488] usb 5-1: Using ep0 maxpacket: 16 [ 230.504471][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.515686][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.525700][ T488] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.538746][ T488] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.548055][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.557809][ T488] usb 5-1: config 0 descriptor?? [ 230.659414][ T4875] overlayfs: conflicting lowerdir path [ 230.692980][ T36] audit: type=1400 audit(2000000059.731:16790): avc: denied { create } for pid=4876 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 230.756835][ T4879] rust_binder: Write failure EFAULT in pid:751 [ 230.760481][ T4879] netlink: 8540 bytes leftover after parsing attributes in process `syz.0.1403'. [ 230.897989][ T36] audit: type=1400 audit(2000000059.918:16791): avc: denied { shutdown } for pid=4870 comm="syz.4.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 230.990353][ T367] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 231.009207][ T367] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7a:0a:2c:05:ab:09 [ 231.063806][ T491] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 231.207265][ T488] usbhid 5-1:0.0: can't add hid device: -71 [ 231.217078][ T488] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 231.227372][ T367] usb 3-1: USB disconnect, device number 12 [ 231.237074][ T491] usb 1-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 231.240098][ T367] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 231.266005][ T488] usb 5-1: USB disconnect, device number 40 [ 231.272015][ T491] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.302561][ T491] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 231.322446][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.345481][ T367] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.348374][ T491] usb 1-1: config 0 descriptor?? [ 231.365705][ T367] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 231.381774][ T367] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 231.489756][ T781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.496013][ T4841] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 231.574353][ T4912] Falling back ldisc for ttyS3. [ 231.905533][ T488] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 232.012128][ T491] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 232.044077][ T367] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.065390][ T488] usb 4-1: Using ep0 maxpacket: 16 [ 232.071649][ T488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.082636][ T488] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.095630][ T488] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.104897][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.113973][ T488] usb 4-1: config 0 descriptor?? [ 232.183855][ T491] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 232.195222][ T491] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.205039][ T491] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.211682][ T491] usb 5-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 232.220783][ T491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.225443][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 232.235184][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.236426][ T491] usb 5-1: config 0 descriptor?? [ 232.246900][ T367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.261035][ T367] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.273982][ T367] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.283172][ T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.292986][ T367] usb 3-1: config 0 descriptor?? [ 232.334307][ T4915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1406'. [ 232.350189][ T4925] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 232.350251][ T4925] rust_binder: Read failure Err(EFAULT) in pid:753 [ 232.471386][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.486553][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.503099][ T491] usbhid 5-1:0.0: can't add hid device: -71 [ 232.509132][ T491] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.522267][ T491] usb 5-1: USB disconnect, device number 41 [ 232.735331][ T367] usbhid 3-1:0.0: can't add hid device: -71 [ 232.746182][ T367] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 232.755589][ T367] usb 3-1: USB disconnect, device number 13 [ 233.003547][ T491] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 233.142052][ T491] usb 5-1: device descriptor read/64, error -71 [ 233.289896][ T2759] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.296375][ T2759] Bluetooth: hci0: Frame reassembly failed (-84) [ 233.397912][ T491] usb 5-1: device descriptor read/64, error -71 [ 233.653808][ T491] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 233.792377][ T491] usb 5-1: device descriptor read/64, error -71 [ 234.008532][ T10] usb 1-1: USB disconnect, device number 127 [ 234.058853][ T491] usb 5-1: device descriptor read/64, error -71 [ 234.176244][ T491] usb usb5-port1: attempt power cycle [ 234.399942][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 234.559880][ T491] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 234.581190][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 234.587511][ T491] usb 5-1: device descriptor read/8, error -71 [ 234.593866][ T10] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 234.602551][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.612710][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 234.622001][ T10] usb 1-1: config 0 has no interface number 0 [ 234.628349][ T10] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.639601][ T10] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 234.652031][ T10] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 234.662404][ T10] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.687832][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 234.696959][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.705415][ T10] usb 1-1: Product: syz [ 234.709818][ T10] usb 1-1: Manufacturer: syz [ 234.714459][ T10] usb 1-1: SerialNumber: syz [ 234.720684][ T10] usb 1-1: config 0 descriptor?? [ 234.726004][ T4944] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.742289][ T491] usb 5-1: device descriptor read/8, error -71 [ 234.859539][ T488] usbhid 4-1:0.0: can't add hid device: -71 [ 234.871269][ T488] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 234.880298][ T488] usb 4-1: USB disconnect, device number 29 [ 234.964331][ T10] usb 1-1: USB disconnect, device number 2 [ 234.989040][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.007631][ T491] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 235.040619][ T491] usb 5-1: device descriptor read/8, error -71 [ 235.134258][ T4731] ------------[ cut here ]------------ [ 235.139816][ T4731] WARNING: CPU: 0 PID: 4731 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 235.149265][ T4731] Modules linked in: [ 235.153200][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz-executor Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 235.164997][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.175094][ T4731] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 235.180804][ T4731] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 235.200491][ T4731] RSP: 0018:ffffc900015ffb48 EFLAGS: 00010293 [ 235.206602][ T4731] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888132ac1300 [ 235.214643][ T4731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.222680][ T4731] RBP: ffffc900015ffb70 R08: ffff888110c86c3f R09: 1ffff11022190d87 [ 235.230685][ T4731] R10: dffffc0000000000 R11: ffffed1022190d88 R12: 0000000000000000 [ 235.238718][ T4731] R13: dffffc0000000000 R14: ffff888110c86ba0 R15: ffff88811e27f110 [ 235.246741][ T4731] FS: 000055556e7c7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.255787][ T4731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.262492][ T4731] CR2: 000055556e7e2908 CR3: 000000012e4ae000 CR4: 00000000003526b0 [ 235.270542][ T4731] Call Trace: [ 235.273858][ T4731] [ 235.276841][ T4731] ovl_do_remove+0x81b/0xda0 [ 235.281482][ T4731] ? ovl_set_redirect+0x780/0x780 [ 235.286565][ T4731] ? down_write+0xee/0x2b0 [ 235.291021][ T4731] ? __cfi_down_write+0x10/0x10 [ 235.295940][ T4731] ovl_rmdir+0x1e/0x30 [ 235.300039][ T4731] vfs_rmdir+0x3e3/0x560 [ 235.304318][ T4731] incfs_kill_sb+0x109/0x230 [ 235.308983][ T4731] deactivate_locked_super+0xd5/0x2a0 [ 235.314387][ T4731] deactivate_super+0xb8/0xe0 [ 235.319174][ T4731] cleanup_mnt+0x406/0x4a0 [ 235.323633][ T4731] __cleanup_mnt+0x1d/0x40 [ 235.328668][ T4731] task_work_run+0x1e5/0x260 [ 235.333311][ T4731] ? __cfi_task_work_run+0x10/0x10 [ 235.338653][ T4731] ? __x64_sys_umount+0x12e/0x180 [ 235.343722][ T4731] ? __cfi___x64_sys_umount+0x10/0x10 [ 235.349154][ T4731] ? __kasan_check_read+0x15/0x20 [ 235.354214][ T4731] resume_user_mode_work+0x35/0x50 [ 235.359405][ T4731] syscall_exit_to_user_mode+0x63/0xb0 [ 235.364898][ T4731] do_syscall_64+0x63/0xf0 [ 235.369371][ T4731] ? clear_bhb_loop+0x50/0xa0 [ 235.374123][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 235.380057][ T4731] RIP: 0033:0x7f9d34f9d1d7 [ 235.384536][ T4731] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 235.404211][ T4731] RSP: 002b:00007fff934d7a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 235.412789][ T4731] RAX: 0000000000000000 RBX: 00007f9d35031c3b RCX: 00007f9d34f9d1d7 [ 235.420786][ T4731] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff934d7af0 [ 235.428962][ T4731] RBP: 00007fff934d7af0 R08: 00007fff934d8af0 R09: 00000000ffffffff [ 235.436989][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff934d8b80 [ 235.445015][ T4731] R13: 00007f9d35031c3b R14: 000000000003845f R15: 00007fff934d8bc0 [ 235.453033][ T4731] [ 235.456105][ T4731] ---[ end trace 0000000000000000 ]--- [ 235.462414][ T4731] ------------[ cut here ]------------ [ 235.467945][ T4731] WARNING: CPU: 0 PID: 4731 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 235.477391][ T4731] Modules linked in: [ 235.481324][ T4731] CPU: 0 UID: 0 PID: 4731 Comm: syz-executor Tainted: G W syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 235.494606][ T4731] Tainted: [W]=WARN [ 235.498021][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 235.498474][ T4731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.504789][ T781] Bluetooth: hci0: command 0x1003 tx timeout [ 235.514608][ T4731] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 235.522508][ T4940] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 235.526262][ T4731] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 235.526286][ T4731] RSP: 0018:ffffc900015ffb48 EFLAGS: 00010293 [ 235.558071][ T4731] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888132ac1300 [ 235.566161][ T4731] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.574196][ T4731] RBP: ffffc900015ffb70 R08: ffff888110c86c3f R09: 1ffff11022190d87 [ 235.582206][ T4731] R10: dffffc0000000000 R11: ffffed1022190d88 R12: 0000000000000000 [ 235.590236][ T4731] R13: dffffc0000000000 R14: ffff888110c86ba0 R15: ffff88811e27f110 [ 235.598274][ T4731] FS: 000055556e7c7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 235.607276][ T4731] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.613894][ T4731] CR2: 000055556e7e2908 CR3: 000000012e4ae000 CR4: 00000000003526b0 [ 235.621947][ T4731] Call Trace: [ 235.625252][ T4731] [ 235.628288][ T4731] ovl_do_remove+0x81b/0xda0 [ 235.632925][ T4731] ? ovl_set_redirect+0x780/0x780 [ 235.638001][ T4731] ? down_write+0xee/0x2b0 [ 235.642459][ T4731] ? __cfi_down_write+0x10/0x10 [ 235.647393][ T4731] ovl_rmdir+0x1e/0x30 [ 235.651495][ T4731] vfs_rmdir+0x3e3/0x560 [ 235.655770][ T4731] incfs_kill_sb+0x1a0/0x230 [ 235.660429][ T4731] deactivate_locked_super+0xd5/0x2a0 [ 235.665832][ T4731] deactivate_super+0xb8/0xe0 [ 235.670682][ T4731] cleanup_mnt+0x406/0x4a0 [ 235.675141][ T4731] __cleanup_mnt+0x1d/0x40 [ 235.679621][ T4731] task_work_run+0x1e5/0x260 [ 235.684249][ T4731] ? __cfi_task_work_run+0x10/0x10 [ 235.689404][ T4731] ? __x64_sys_umount+0x12e/0x180 [ 235.694479][ T4731] ? __cfi___x64_sys_umount+0x10/0x10 [ 235.699934][ T4731] ? __kasan_check_read+0x15/0x20 [ 235.705046][ T4731] resume_user_mode_work+0x35/0x50 [ 235.710293][ T4731] syscall_exit_to_user_mode+0x63/0xb0 [ 235.715820][ T4731] do_syscall_64+0x63/0xf0 [ 235.720276][ T4731] ? clear_bhb_loop+0x50/0xa0 [ 235.725077][ T4731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 235.731020][ T4731] RIP: 0033:0x7f9d34f9d1d7 [ 235.735493][ T4731] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 235.755167][ T4731] RSP: 002b:00007fff934d7a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 235.763636][ T4731] RAX: 0000000000000000 RBX: 00007f9d35031c3b RCX: 00007f9d34f9d1d7 [ 235.771674][ T4731] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff934d7af0 [ 235.779733][ T4731] RBP: 00007fff934d7af0 R08: 00007fff934d8af0 R09: 00000000ffffffff [ 235.787816][ T4731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff934d8b80 [ 235.795849][ T4731] R13: 00007f9d35031c3b R14: 000000000003845f R15: 00007fff934d8bc0 [ 235.803885][ T4731] [ 235.806948][ T4731] ---[ end trace 0000000000000000 ]--- [ 235.815465][ T491] usb 5-1: device descriptor read/8, error -71 [ 235.935101][ T491] usb usb5-port1: unable to enumerate USB device