last executing test programs: 4m29.319298861s ago: executing program 32 (id=448): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/40, 0x28}], 0x1}, 0x9}], 0x1, 0x10002, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x13, 0x6, 0x3, 0x2, 0x0, 0x70bd2d, 0x6}, 0x10}}, 0x4004800) 3m27.775878401s ago: executing program 3 (id=2654): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) 3m27.775785321s ago: executing program 3 (id=2655): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000800)=""/127, 0x7f}], 0x8}, 0x81}], 0x3, 0x2100, 0x0) 3m27.770782371s ago: executing program 3 (id=2656): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000564000/0x4000)=nil, 0x4000}) 3m27.752374281s ago: executing program 3 (id=2657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x7ffffffff000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 3m27.709927962s ago: executing program 3 (id=2658): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 3m27.709466662s ago: executing program 3 (id=2659): unshare(0x20000400) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 3m12.628120279s ago: executing program 33 (id=2659): unshare(0x20000400) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 2m56.896302387s ago: executing program 5 (id=3448): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000600)=0x8, 0x4) close(r0) 2m56.870291108s ago: executing program 5 (id=3451): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000000)) 2m56.812428798s ago: executing program 5 (id=3454): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 2m56.791576039s ago: executing program 5 (id=3456): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000005c0)='y\x105\xfb\xf7u\x83%\x1f\xe0\xb5\x04L9@:r\xc2\xb9x\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4s\t\x11\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\x82]\'#\x9a\x93)\x9f\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01L\x1c\xc5D\a\x92\x05\x9aH\x00\'\xd4\x94d[\xc8\xc8\'\xdf\xa8\xc5\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80}g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1+\xf0\xc2Gj\x11k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u+\xf5\xc4\xa5\xf2*-\xe3\xcb\x93T\x84\x9b5\x80C\xd0h\\]l\xa7<\xd5t\x0f\x8b\x9dZ\xb2P\x9d\xbatvC\xf3^\x96H\x831\x870\x8cn\x00'/230, 0x1) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 2m56.765786039s ago: executing program 5 (id=3458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 2m56.748830639s ago: executing program 5 (id=3460): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x1, 0x800) timerfd_gettime(r0, &(0x7f0000000540)) 2m41.689345147s ago: executing program 34 (id=3460): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x1, 0x800) timerfd_gettime(r0, &(0x7f0000000540)) 2m19.51747173s ago: executing program 2 (id=4429): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x806, r1, 0x1, 0x7, 0x6, @local}, 0x14) 2m19.51699811s ago: executing program 2 (id=4431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\a\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m17.922497827s ago: executing program 2 (id=4456): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 2m17.921244807s ago: executing program 2 (id=4458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 2m17.905759337s ago: executing program 2 (id=4460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x284, 0x0, 0x9}]}) 2m17.660068561s ago: executing program 2 (id=4462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) 2m17.620668912s ago: executing program 35 (id=4462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000091000040"]) 39.129552688s ago: executing program 6 (id=7116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001520", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 39.107510428s ago: executing program 6 (id=7117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r1, &(0x7f00000046c0)=""/4096, 0x1000) 39.091789788s ago: executing program 6 (id=7118): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000340)={0x0, {{0xa, 0x10, 0xfffffff7, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0xfffffffc, @remote, 0x80000}}}, 0x108) 39.079111489s ago: executing program 6 (id=7119): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 39.024078059s ago: executing program 6 (id=7120): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2040600) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 38.98965457s ago: executing program 6 (id=7121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$tmpfs(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x66, &(0x7f0000000380)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/fuse\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) 38.933825621s ago: executing program 36 (id=7121): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$tmpfs(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x66, &(0x7f0000000380)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/fuse\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'overlay\x00'}}]}) 36.656296368s ago: executing program 7 (id=7166): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 36.600012089s ago: executing program 7 (id=7167): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000087d1e323200000000000109022d000100002000090400fc02030002000921ffff040122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x3, 0x5, {0x5, 0x22, "26f860"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 33.590051759s ago: executing program 7 (id=7226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x9, 0x80800) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x400008001, 0x0, 0x8, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r2, 0x1}) 33.565219919s ago: executing program 7 (id=7228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x103) 33.551605489s ago: executing program 7 (id=7229): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe20, 0x0, @mcast1, 0x2}, 0x1c) 33.463702131s ago: executing program 7 (id=7231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 33.420907331s ago: executing program 37 (id=7231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 23.006287242s ago: executing program 8 (id=7518): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fcntl$setstatus(r1, 0x4, 0x800) waitid$P_PIDFD(0x3, r1, 0x0, 0x8, 0x0) 22.948085273s ago: executing program 8 (id=7519): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 22.931739803s ago: executing program 8 (id=7520): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 22.917913433s ago: executing program 8 (id=7521): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 22.904205094s ago: executing program 8 (id=7522): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x18) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22.775962616s ago: executing program 8 (id=7526): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) 22.763807586s ago: executing program 38 (id=7526): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r0) 2.44446556s ago: executing program 0 (id=7971): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x0, 0x1000}}, 0x50) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.100193485s ago: executing program 4 (id=7978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.019906926s ago: executing program 4 (id=7979): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) 1.594996234s ago: executing program 0 (id=7980): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.432638966s ago: executing program 0 (id=7982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.387481367s ago: executing program 9 (id=7985): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) 1.372796987s ago: executing program 9 (id=7986): ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x8, 0x5, 0x700000080000000, 0x7}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8504"]) 1.302982468s ago: executing program 9 (id=7987): socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.243971909s ago: executing program 9 (id=7988): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b01ac039e3b014b5aec34"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.237730169s ago: executing program 9 (id=7989): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000470000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x20000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x101ff, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000be9000/0x1000)=nil, 0x1000, 0x15) 1.20626581s ago: executing program 9 (id=7990): mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20010e"], 0x0}) 853.588696ms ago: executing program 1 (id=7993): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) 840.063886ms ago: executing program 1 (id=7994): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x6958, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) 715.622398ms ago: executing program 1 (id=7995): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) 715.221768ms ago: executing program 1 (id=7996): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000007000046009d", @ANYBLOB="c770ee18914110e7c19b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 602.30613ms ago: executing program 1 (id=7997): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80, 0x0) 601.80982ms ago: executing program 1 (id=7998): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000140)) 571.60791ms ago: executing program 0 (id=7999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 105.615158ms ago: executing program 4 (id=8000): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0xbcdfa000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1004) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x105, 0x89, 0x7, 0x0, 0x7, 0x5}, 0xc) 55.641409ms ago: executing program 4 (id=8001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 55.314199ms ago: executing program 4 (id=8002): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000db1000/0x2000)=nil, 0x2000}, 0x2000000}) 55.115019ms ago: executing program 4 (id=8003): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/238, 0xee) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 33.675299ms ago: executing program 0 (id=8004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='./file1\x00') 0s ago: executing program 0 (id=8005): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) kernel console output (not intermixed with test programs): 0 yes kernel y y y n y y y n y y y y y y y y n n [ 207.173081][T11594] UDPLITEv6 1408 0 0 NI 0 yes kernel y y y n y y y n y y y y n n y y y n [ 207.173081][T11594] UDPv6 1408 3 0 NI 0 yes kernel y y y n y y y n y y y y n n y y y n [ 207.173081][T11594] TCPv6 2624 0 0 no 320 yes kernel y y y y y y y y y y y y n y y y y y [ 207.173081][T11594] PPTP 1008 0 -1 NI 0 no kernel n n n n n n n n n n n n n n n n n n [ 207.173081][T11594] XDP 1152 0 -1 NI 0 no kernel n n n n n n n n n n n n n n n n n n [ 207.173081][T11594] UNIX-STREAM 1152 0 -1 NI 0 yes kernel y n n n n n n n n n n n n n n y n n [ 207.173081][T11594] UNIX 1152 0 -1 NI 0 yes kernel y n n n n n n n n n n n n n n n n n [ 207.173081][T11594] UDP-Lite 1216 0 0 NI 0 yes kernel y y y n y y y [ 207.316332][T11608] input: syz0 as /devices/virtual/input/input66 [ 207.524324][T11621] input: syz1 as /devices/virtual/input/input67 [ 207.603704][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.610183][T11635] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.616704][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.769701][ T322] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 207.869105][ T647] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 207.920300][ T322] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.929549][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.938292][ T322] usb 5-1: config 0 descriptor?? [ 208.029164][ T647] usb 7-1: Using ep0 maxpacket: 32 [ 208.035452][ T647] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 208.043841][ T647] usb 7-1: config 0 has no interface number 0 [ 208.049999][ T647] usb 7-1: config 0 interface 184 has no altsetting 0 [ 208.058348][ T647] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 208.067470][ T647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.075523][ T647] usb 7-1: Product: syz [ 208.079735][ T647] usb 7-1: Manufacturer: syz [ 208.084371][ T647] usb 7-1: SerialNumber: syz [ 208.089813][ T647] usb 7-1: config 0 descriptor?? [ 208.095856][ T647] smsc75xx v1.0.0 [ 208.747889][ T322] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.758055][ T322] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 208.779070][ T322] asix 5-1:0.0: probe with driver asix failed with error -71 [ 208.787412][ T322] usb 5-1: USB disconnect, device number 49 [ 208.899799][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 208.910819][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 208.920230][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 208.931066][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 208.940757][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 208.951597][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 208.961299][ T647] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 208.970704][ T647] usb 7-1: USB disconnect, device number 13 [ 209.437872][T11662] input: syz0 as /devices/virtual/input/input68 [ 209.623063][T11679] input: syz0 as /devices/virtual/input/input69 [ 209.669265][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 209.677044][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.716658][T11689] SELinux: failed to load policy [ 210.314439][T11768] Dead loop on virtual device ip6_vti0, fix it urgently! [ 210.449029][ T322] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 210.609464][ T322] usb 7-1: Using ep0 maxpacket: 16 [ 210.616030][ T322] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 210.625095][ T322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.646978][ T322] usb 7-1: config 0 has no interface number 0 [ 210.654912][ T322] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 210.666730][ T322] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.675764][ T36] audit: type=1400 audit(2000000350.955:905): avc: denied { relabelfrom } for pid=11801 comm="syz.4.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.682798][ T322] usb 7-1: Product: syz [ 210.697055][ T36] audit: type=1400 audit(2000000350.955:906): avc: denied { relabelto } for pid=11801 comm="syz.4.5390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.715598][ T322] usb 7-1: Manufacturer: syz [ 210.724348][ T322] usb 7-1: SerialNumber: syz [ 210.730459][ T322] usb 7-1: config 0 descriptor?? [ 210.736470][ T322] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 210.742885][ T322] usb 7-1: No valid video chain found. [ 210.938586][ T647] usb 7-1: USB disconnect, device number 14 [ 211.039068][ T322] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 211.190310][ T322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.200517][ T322] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.210164][ T322] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.219282][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.227280][ T322] usb 5-1: SerialNumber: syz [ 211.435676][ T322] usb 5-1: 0:2 : does not exist [ 211.447014][ T322] usb 5-1: USB disconnect, device number 50 [ 211.508063][ T36] audit: type=1400 audit(2000000352.783:907): avc: denied { create } for pid=11819 comm="syz.0.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 211.508512][T11820] tmpfs: Invalid uid '0x00000000ffffffff' [ 211.529415][ T36] audit: type=1400 audit(2000000352.783:908): avc: denied { getopt } for pid=11819 comm="syz.0.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 211.927413][T11862] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 211.934328][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.988168][T11870] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5424'. [ 212.155582][ T36] audit: type=1400 audit(2000000353.433:909): avc: denied { mounton } for pid=11891 comm="syz.0.5434" path="/864/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 213.173021][T11963] input: syz0 as /devices/virtual/input/input70 [ 213.299039][ T322] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 213.449037][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 213.458525][ T322] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 213.458611][T11983] kvm_intel: kvm [11982]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 213.469857][ T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.486186][ T322] usb 5-1: Product: syz [ 213.490586][ T322] usb 5-1: Manufacturer: syz [ 213.495311][ T322] usb 5-1: SerialNumber: syz [ 213.502619][ T322] r8152-cfgselector 5-1: Unknown version 0x0000 [ 213.508883][ T322] r8152-cfgselector 5-1: config 0 descriptor?? [ 213.615743][ T36] audit: type=1326 audit(2000000354.893:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.0.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb78e929 code=0x7fc00000 [ 213.923867][ T647] r8152-cfgselector 5-1: USB disconnect, device number 51 [ 213.989154][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 213.995536][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.109430][ T36] audit: type=1400 audit(2000000355.393:911): avc: denied { write } for pid=12046 comm="syz.7.5507" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 214.140633][ T36] audit: type=1400 audit(2000000355.393:912): avc: denied { open } for pid=12046 comm="syz.7.5507" path="/204/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 214.499072][ T647] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 214.650213][ T647] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.661351][ T647] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.671509][ T647] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 214.680857][ T647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.690197][ T647] usb 7-1: config 0 descriptor?? [ 215.102858][ T647] hid-steam 0003:28DE:1142.006F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 215.170862][ T647] hid-steam 0003:28DE:1142.006F: Steam wireless receiver connected [ 215.189780][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 215.197580][ T647] hid-steam 0003:28DE:1142.0070: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 215.308094][ T647] usb 7-1: USB disconnect, device number 15 [ 215.315390][ T647] hid-steam 0003:28DE:1142.006F: Steam wireless receiver disconnected [ 215.359144][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 215.365492][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.376550][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 215.385642][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.394471][ T9] usb 5-1: config 0 descriptor?? [ 215.802253][ T9] arvo 0003:1E7D:30D4.0071: unknown main item tag 0x0 [ 215.809202][ T9] arvo 0003:1E7D:30D4.0071: unknown main item tag 0x0 [ 215.816017][ T9] arvo 0003:1E7D:30D4.0071: item fetching failed at offset 2/5 [ 215.823991][ T9] arvo 0003:1E7D:30D4.0071: parse failed [ 215.829976][ T9] arvo 0003:1E7D:30D4.0071: probe with driver arvo failed with error -22 [ 216.003035][ T647] usb 5-1: USB disconnect, device number 52 [ 216.055401][ T36] audit: type=1400 audit(2000000357.333:913): avc: denied { link } for pid=12113 comm="syz.7.5538" name="file1" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 216.085908][T12116] SELinux: ebitmap: truncated map [ 216.092537][T12116] SELinux: failed to load policy [ 216.314742][T12126] netlink: 'syz.7.5542': attribute type 1 has an invalid length. [ 216.770558][ T36] audit: type=1326 audit(2000000358.053:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.794089][ T36] audit: type=1326 audit(2000000358.053:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.821825][ T36] audit: type=1326 audit(2000000358.053:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.849638][ T36] audit: type=1326 audit(2000000358.053:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.874637][ T36] audit: type=1326 audit(2000000358.053:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.898369][ T36] audit: type=1326 audit(2000000358.053:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.922117][ T36] audit: type=1326 audit(2000000358.053:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.945904][ T36] audit: type=1326 audit(2000000358.053:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.969715][ T36] audit: type=1326 audit(2000000358.053:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.6.5536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7fc00000 [ 216.974773][T12169] SELinux: failed to load policy [ 217.176464][T12194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.176990][T12194] rust_binder: Error while translating object. [ 217.183614][T12194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.190089][T12194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:983 [ 217.652669][ T647] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 217.820071][ T647] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 217.828574][ T647] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 217.837848][ T647] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 217.848201][ T647] usb 7-1: config 220 has no interface number 2 [ 217.854565][ T647] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 217.867794][ T647] usb 7-1: config 220 interface 0 has no altsetting 0 [ 217.874655][ T647] usb 7-1: config 220 interface 76 has no altsetting 0 [ 217.881927][ T647] usb 7-1: config 220 interface 1 has no altsetting 0 [ 217.890307][ T647] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 217.899510][ T647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.907600][ T647] usb 7-1: Product: syz [ 217.912378][ T647] usb 7-1: Manufacturer: syz [ 217.917064][ T647] usb 7-1: SerialNumber: syz [ 218.126539][ T647] usb 7-1: selecting invalid altsetting 0 [ 218.132418][ T647] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 218.138864][ T647] usb 7-1: No valid video chain found. [ 218.147227][ T647] usb 7-1: USB disconnect, device number 16 [ 218.585138][T12286] SELinux: failed to load policy [ 218.724008][T12307] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.733188][T12307] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 220.070559][T12415] kvm: kvm [12414]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 220.523355][T12467] rust_binder: Error while translating object. [ 220.523380][T12467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.529672][T12467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550 [ 220.579445][T12473] SELinux: failed to load policy [ 220.739063][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 220.889015][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 220.896751][ T9] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.906950][ T9] usb 7-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 220.918177][ T9] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 220.931426][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 220.938080][ T9] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 220.948717][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.957816][ T9] usb 7-1: config 0 descriptor?? [ 221.147030][T12540] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5741'. [ 221.367901][ T9] hid-thrustmaster 0003:044F:B65D.0072: unknown main item tag 0x0 [ 221.376040][ T9] hid-thrustmaster 0003:044F:B65D.0072: unknown main item tag 0x0 [ 221.384135][ T9] hid-thrustmaster 0003:044F:B65D.0072: unknown main item tag 0x0 [ 221.392060][ T9] hid-thrustmaster 0003:044F:B65D.0072: unknown main item tag 0x0 [ 221.399974][ T9] hid-thrustmaster 0003:044F:B65D.0072: unknown main item tag 0x0 [ 221.412270][ T9] hid-thrustmaster 0003:044F:B65D.0072: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 221.425278][ T9] hid-thrustmaster 0003:044F:B65D.0072: Wrong number of endpoints? [ 221.575864][ C0] hid-thrustmaster 0003:044F:B65D.0072: Unknown packet type 0x2124, unable to proceed further with wheel init [ 221.600654][T12565] kvm: kvm [12564]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 221.776885][ T647] usb 7-1: USB disconnect, device number 17 [ 222.661490][T12622] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 222.677511][T12624] KVM: debugfs: duplicate directory 12624-4 [ 223.029182][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 223.029353][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.659055][ T647] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 223.809101][ T647] usb 7-1: Using ep0 maxpacket: 32 [ 223.815677][ T647] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 223.824182][ T647] usb 7-1: config 0 has no interface number 0 [ 223.830590][ T647] usb 7-1: config 0 interface 184 has no altsetting 0 [ 223.839069][ T647] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 223.859004][ T647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.867435][ T647] usb 7-1: Product: syz [ 223.872173][ T647] usb 7-1: Manufacturer: syz [ 223.877225][ T647] usb 7-1: SerialNumber: syz [ 223.887078][ T647] usb 7-1: config 0 descriptor?? [ 223.899841][ T647] smsc75xx v1.0.0 [ 223.917839][ T292] tipc: Subscription rejected, illegal request [ 223.993280][T12748] kvm_intel: kvm [12747]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 224.060527][T12753] rust_binder: Got transaction with invalid offset. [ 224.060600][T12753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.067373][T12753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:648 [ 224.115946][T12759] kvm: kvm [12758]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 224.473945][T12808] tipc: Enabling of bearer rejected, failed to enable media [ 224.703176][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 224.714424][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 224.724619][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 224.726873][T12830] input: syz1 as /devices/virtual/input/input74 [ 224.735898][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 224.752102][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 224.762813][ T647] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 224.772342][ T647] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 224.786085][ T647] usb 7-1: USB disconnect, device number 18 [ 224.843556][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 224.843575][ T36] audit: type=1400 audit(2000000366.123:968): avc: denied { remount } for pid=12833 comm="syz.4.5882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 224.877478][ T36] audit: type=1326 audit(2000000366.153:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12835 comm="syz.4.5883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f676478e929 code=0x0 [ 225.771885][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.778301][T12854] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 225.785059][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.809085][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 225.960061][ T31] usb 7-1: config 0 has an invalid interface number: 104 but max is 0 [ 225.968251][ T31] usb 7-1: config 0 has no interface number 0 [ 225.974539][ T31] usb 7-1: config 0 interface 104 has no altsetting 0 [ 225.982676][ T31] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 225.991781][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.999804][ T31] usb 7-1: Product: syz [ 226.004078][ T31] usb 7-1: Manufacturer: syz [ 226.008667][ T31] usb 7-1: SerialNumber: syz [ 226.014031][ T31] usb 7-1: config 0 descriptor?? [ 226.224608][ T31] usb 7-1: USB disconnect, device number 19 [ 227.199048][ T1126] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 227.349782][ T1126] usb 7-1: Using ep0 maxpacket: 16 [ 227.356312][ T1126] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.367424][ T1126] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.377345][ T1126] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 227.390563][ T1126] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.397187][ T1126] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 227.406373][ T1126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.415536][ T1126] usb 7-1: config 0 descriptor?? [ 227.458176][T12874] netlink: 'syz.0.5901': attribute type 3 has an invalid length. [ 227.466091][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'. [ 227.545706][ T3881] kernel write not supported for file /input/event2 (pid: 3881 comm: kworker/1:5) [ 227.829067][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.839778][ T1126] hid (null): invalid report_size 27418 [ 227.849426][ T1126] hid (null): report_id 1505116794 is invalid [ 227.856948][ T1126] hid (null): unknown global tag 0xe [ 227.862669][ T1126] hid (null): unknown global tag 0xd [ 227.892710][T12904] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 228.003649][ T36] audit: type=1400 audit(2000000369.283:970): avc: denied { read } for pid=12913 comm="syz.0.5921" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 228.046293][ T9] usb 7-1: USB disconnect, device number 20 [ 228.510298][ T36] audit: type=1400 audit(2000000369.793:971): avc: denied { watch watch_reads } for pid=12948 comm="syz.4.5938" path="/1416/file0" dev="tmpfs" ino=7263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.783368][ T36] audit: type=1400 audit(2000000370.063:972): avc: denied { nosuid_transition } for pid=12986 comm="syz.4.5956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 228.819113][ T36] audit: type=1400 audit(2000000370.063:973): avc: denied { transition } for pid=12986 comm="syz.4.5956" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 228.860564][ T36] audit: type=1400 audit(2000000370.063:974): avc: denied { entrypoint } for pid=12986 comm="syz.4.5956" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1082 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.899180][ T36] audit: type=1400 audit(2000000370.063:975): avc: denied { noatsecure } for pid=12986 comm="syz.4.5956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 229.150698][T13017] batadv_slave_1: entered promiscuous mode [ 229.157112][T13017] batadv_slave_1: left promiscuous mode [ 230.329029][ T3881] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 230.390360][ T36] audit: type=1326 audit(2000000371.673:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13073 comm="syz.7.5998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e8ef8e929 code=0x0 [ 230.490459][ T3881] usb 7-1: unable to get BOS descriptor or descriptor too short [ 230.498696][ T3881] usb 7-1: no configurations [ 230.503348][ T3881] usb 7-1: can't read configurations, error -22 [ 231.075483][T13087] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 231.509032][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 231.651908][T13102] batadv_slave_0: entered promiscuous mode [ 231.658245][T13101] batadv_slave_0: left promiscuous mode [ 231.675270][T13104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.675445][T13104] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 232.182193][T13135] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.190982][T13135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 232.197420][T13135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1245 [ 232.228769][ T36] audit: type=1400 audit(2000000373.503:977): avc: denied { write } for pid=13138 comm="syz.6.6028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.309115][ T3881] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 232.459068][ T3881] usb 5-1: Using ep0 maxpacket: 16 [ 232.465512][ T3881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.472334][ T3881] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 232.481470][ T3881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.490119][ T3881] usb 5-1: config 0 descriptor?? [ 232.905609][ T3881] hid (null): invalid report_size 41201 [ 232.911261][ T3881] hid (null): unknown global tag 0xe [ 232.916559][ T3881] hid (null): unknown global tag 0xe [ 232.921990][ T3881] hid (null): bogus close delimiter [ 233.103472][ T3881] usb 5-1: USB disconnect, device number 53 [ 233.879017][ T647] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 234.029030][ T647] usb 5-1: Using ep0 maxpacket: 16 [ 234.035238][ T647] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.045689][ T647] usb 5-1: config 0 has no interfaces? [ 234.052592][ T647] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 234.061701][ T647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.069728][ T647] usb 5-1: Product: syz [ 234.073909][ T647] usb 5-1: Manufacturer: syz [ 234.078499][ T647] usb 5-1: SerialNumber: syz [ 234.083836][ T647] usb 5-1: config 0 descriptor?? [ 234.296765][ T647] usb 5-1: USB disconnect, device number 54 [ 234.389064][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.393247][ T36] audit: type=1400 audit(2000000375.673:978): avc: denied { create } for pid=13182 comm="syz.0.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 234.421857][ T36] audit: type=1400 audit(2000000375.693:979): avc: denied { sys_admin } for pid=13182 comm="syz.0.6049" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 234.942210][T13224] netlink: 277 bytes leftover after parsing attributes in process `syz.4.6069'. [ 236.029019][ T3881] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 236.054829][T13293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6103'. [ 236.063886][T13293] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6103'. [ 236.072887][T13293] netlink: 'syz.4.6103': attribute type 6 has an invalid length. [ 236.080756][T13293] netlink: 'syz.4.6103': attribute type 5 has an invalid length. [ 236.088486][T13293] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6103'. [ 236.190054][ T3881] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.201168][ T3881] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 236.212056][ T3881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.218698][ T3881] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 236.228107][ T3881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.237594][ T3881] usb 7-1: config 0 descriptor?? [ 236.243698][T13277] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 236.451099][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.458261][T13299] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.465532][T13299] bridge_slave_0: entered allmulticast mode [ 236.472339][T13299] bridge_slave_0: entered promiscuous mode [ 236.481021][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.488120][T13299] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.495524][T13299] bridge_slave_1: entered allmulticast mode [ 236.501965][T13299] bridge_slave_1: entered promiscuous mode [ 236.560533][T13299] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.567616][T13299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.574964][T13299] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.582050][T13299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.606850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.614322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.625618][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.632713][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.642944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.650028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.667268][ T3881] holtek_mouse 0003:04D9:A067.0075: bogus close delimiter [ 236.677245][ T3881] holtek_mouse 0003:04D9:A067.0075: item 0 2 2 10 parsing failed [ 236.685116][T13299] veth0_vlan: entered promiscuous mode [ 236.691222][ T3881] holtek_mouse 0003:04D9:A067.0075: hid parse failed: -22 [ 236.698459][ T3881] holtek_mouse 0003:04D9:A067.0075: probe with driver holtek_mouse failed with error -22 [ 236.713325][T13299] veth1_macvtap: entered promiscuous mode [ 236.880752][ T647] usb 7-1: USB disconnect, device number 24 [ 237.596310][ T36] audit: type=1400 audit(2000000378.873:980): avc: denied { read } for pid=13363 comm="syz.6.6136" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.620680][ T36] audit: type=1400 audit(2000000378.873:981): avc: denied { open } for pid=13363 comm="syz.6.6136" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.645365][ T36] audit: type=1400 audit(2000000378.873:982): avc: denied { ioctl } for pid=13363 comm="syz.6.6136" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.742539][T13373] tun0: tun_chr_ioctl cmd 1074025676 [ 237.747938][T13373] tun0: owner set to 0 [ 237.949069][ T647] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 238.049990][ T1126] hid-generic 0000:0000:0000.0076: unknown main item tag 0x0 [ 238.060001][ T1126] hid-generic 0000:0000:0000.0076: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.109030][ T647] usb 7-1: Using ep0 maxpacket: 16 [ 238.115576][ T647] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.125643][ T647] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.135580][ T647] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.148986][ T647] usb 7-1: config 1 interface 0 has no altsetting 0 [ 238.157190][ T647] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.166464][ T647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.174611][ T647] usb 7-1: Product: syz [ 238.179129][ T647] usb 7-1: Manufacturer: syz [ 238.183798][ T647] usb 7-1: SerialNumber: syz [ 238.375441][T13403] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6154'. [ 238.384988][T13403] gretap0: entered promiscuous mode [ 238.392149][T13403] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6154'. [ 238.401646][T13403] 0{X: renamed from gretap0 [ 238.407716][T13403] 0{X: left promiscuous mode [ 238.413093][ T647] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 238.413313][T13403] 0{X: entered allmulticast mode [ 238.430405][T13403] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 238.606845][ T36] audit: type=1400 audit(2000000379.883:983): avc: denied { read write } for pid=13370 comm="syz.6.6139" name="lp0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 238.608281][ T1126] usb 7-1: USB disconnect, device number 25 [ 238.631930][ T36] audit: type=1400 audit(2000000379.883:984): avc: denied { open } for pid=13370 comm="syz.6.6139" path="/dev/usb/lp0" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 238.639442][ T1126] usblp0: removed [ 238.662215][ T36] audit: type=1400 audit(2000000379.883:985): avc: denied { ioctl } for pid=13370 comm="syz.6.6139" path="/dev/usb/lp0" dev="devtmpfs" ino=936 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 239.090298][ T36] audit: type=1326 audit(2000000380.373:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13428 comm="syz.0.6166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb78e929 code=0x0 [ 239.407381][T13455] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 239.420455][T13455] overlayfs: missing 'lowerdir' [ 239.620749][T13475] kvm: kvm [13474]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 239.977283][ T36] audit: type=1326 audit(2000000381.253:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13505 comm="syz.0.6202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb78e929 code=0x0 [ 240.009811][T13508] overlayfs: missing 'workdir' [ 240.032559][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 240.266940][T13520] kvm: kvm [13519]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 240.361046][T13522] rust_binder: Error while translating object. [ 240.361074][T13522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 240.367265][T13522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 240.619035][ T647] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 240.779023][ T647] usb 5-1: Using ep0 maxpacket: 16 [ 240.785382][ T647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.795877][ T647] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 240.806899][ T647] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 240.816647][ T647] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 240.829187][ T647] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.838310][ T647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.846605][ T647] usb 5-1: Product: syz [ 240.851010][ T647] usb 5-1: Manufacturer: syz [ 240.855686][ T647] usb 5-1: SerialNumber: syz [ 241.066055][ T647] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 241.076248][ T647] usb 5-1: USB disconnect, device number 55 [ 241.087893][ T1792] udevd[1792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.129075][ T3881] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 241.279015][ T3881] usb 7-1: Using ep0 maxpacket: 16 [ 241.285320][ T3881] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 241.293624][ T3881] usb 7-1: config 0 has no interface number 0 [ 241.299780][ T3881] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 241.309725][ T3881] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 241.321044][ T3881] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 241.330146][ T3881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.338495][ T3881] usb 7-1: Product: syz [ 241.342707][ T3881] usb 7-1: Manufacturer: syz [ 241.347501][ T3881] usb 7-1: SerialNumber: syz [ 241.352873][ T3881] usb 7-1: config 0 descriptor?? [ 241.358159][T13532] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.365505][T13532] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.575837][T13532] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.583218][T13532] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.825118][T13556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6226'. [ 241.934294][T13560] xfrm0: mtu less than device minimum [ 242.079183][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 242.079371][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 242.114034][T13572] tun0: tun_chr_ioctl cmd 1074025675 [ 242.119707][T13572] tun0: persist disabled [ 242.192687][ T3881] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 242.202961][ T3881] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 242.213472][ T3881] asix 7-1:0.251: probe with driver asix failed with error -71 [ 242.224197][ T3881] usb 7-1: USB disconnect, device number 26 [ 242.964562][T13623] tipc: Started in network mode [ 242.969561][T13623] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 242.979149][T13623] tipc: Enabled bearer , priority 10 [ 243.425067][T13646] serio: Serial port ttynull [ 243.792016][T13658] loop2: detected capacity change from 0 to 7 [ 244.069058][ T31] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 244.089003][ T1126] tipc: Node number set to 4269801488 [ 244.220226][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.230930][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.241397][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.256841][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.266424][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.275474][ T31] usb 5-1: Product: syz [ 244.280043][ T31] usb 5-1: Manufacturer: syz [ 244.284680][ T31] usb 5-1: SerialNumber: syz [ 244.426108][ T36] audit: type=1326 audit(2000000385.703:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13681 comm="syz.0.6285" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3cb78e929 code=0x0 [ 244.500974][ T36] audit: type=1400 audit(2000000385.783:989): avc: denied { mounton } for pid=13681 comm="syz.0.6285" path="/proc/2127/task/2128/net" dev="proc" ino=97527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 244.502083][ T31] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 244.788205][ T9] usb 5-1: USB disconnect, device number 56 [ 244.795374][ T9] usblp0: removed [ 244.889015][ T31] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 245.378461][T13713] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.378894][T13713] rust_binder: Write failure EINVAL in pid:1418 [ 245.427005][T13722] can0: slcan on ttyS3. [ 245.539097][T13722] can0 (unregistered): slcan off ttyS3. [ 245.590655][T13741] kvm: user requested TSC rate below hardware speed [ 246.941373][T13831] tipc: Started in network mode [ 246.946268][T13831] tipc: Node identity 7f000001, cluster identity 4711 [ 246.953467][T13831] tipc: Enabled bearer , priority 10 [ 246.985948][T13835] netlink: 'syz.4.6344': attribute type 1 has an invalid length. [ 247.033166][T13839] rust_binder: Error while translating object. [ 247.033192][T13839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 247.039486][T13839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:229 [ 247.351491][T13875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 247.559041][ T31] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 247.709003][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 247.715298][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.726421][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.736232][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 247.745360][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.754187][ T31] usb 5-1: config 0 descriptor?? [ 248.069053][ T3881] tipc: Node number set to 2130706433 [ 248.166343][ T31] logitech-hidpp-device 0003:046D:C343.0077: unbalanced delimiter at end of report description [ 248.179172][ T31] logitech-hidpp-device 0003:046D:C343.0077: hidpp_probe:parse failed [ 248.187429][ T31] logitech-hidpp-device 0003:046D:C343.0077: probe with driver logitech-hidpp-device failed with error -22 [ 248.191882][T13894] batadv_slave_1: entered promiscuous mode [ 248.206196][T13893] batadv_slave_1: left promiscuous mode [ 248.238047][ T36] audit: type=1400 audit(2000000389.513:990): avc: denied { write } for pid=13898 comm="syz.0.6374" name="/" dev="incremental-fs" ino=5395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.260883][ T36] audit: type=1400 audit(2000000389.513:991): avc: denied { add_name } for pid=13898 comm="syz.0.6374" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.281710][ T36] audit: type=1400 audit(2000000389.513:992): avc: denied { create } for pid=13898 comm="syz.0.6374" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 248.302130][ T36] audit: type=1400 audit(2000000389.513:993): avc: denied { associate } for pid=13898 comm="syz.0.6374" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 248.362454][ T647] usb 5-1: USB disconnect, device number 57 [ 249.249024][ T3881] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 249.319026][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 249.386079][ T36] audit: type=1400 audit(2000000390.663:994): avc: denied { ioctl } for pid=13938 comm="syz.7.6392" path="/385/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0xae62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.412191][ T3881] usb 7-1: Using ep0 maxpacket: 16 [ 249.419074][ T3881] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.427915][ T3881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.438389][ T3881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.450213][ T3881] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.459404][ T3881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.467424][ T3881] usb 7-1: Product: syz [ 249.472078][ T3881] usb 7-1: Manufacturer: syz [ 249.476834][ T3881] usb 7-1: SerialNumber: syz [ 249.490097][ T31] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 249.498332][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.510154][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.521153][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.532525][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.545692][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.554905][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.569155][ T31] usb 5-1: config 0 descriptor?? [ 249.575006][T13935] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 249.887647][ T3881] usb 7-1: 0:2 : does not exist [ 249.985128][ T31] plantronics 0003:047F:FFFF.0078: unknown main item tag 0xd [ 249.993997][ T31] plantronics 0003:047F:FFFF.0078: No inputs registered, leaving [ 250.003135][ T31] plantronics 0003:047F:FFFF.0078: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 250.046572][ T36] audit: type=1400 audit(2000000391.323:995): avc: denied { audit_read } for pid=13958 comm="syz.7.6400" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.240567][ T647] usb 5-1: USB disconnect, device number 58 [ 250.497431][ T3881] usb 7-1: USB disconnect, device number 28 [ 250.961079][T14004] batadv_slave_0: entered promiscuous mode [ 250.967960][T14003] batadv_slave_0: left promiscuous mode [ 251.012275][T14012] input: syz0 as /devices/virtual/input/input78 [ 251.058309][ T36] audit: type=1400 audit(2000000392.333:996): avc: denied { create } for pid=14015 comm="syz.6.6426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 251.129418][T14026] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.783385][T14115] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 251.952552][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 251.963352][ T36] audit: type=1400 audit(2000000393.243:997): avc: denied { ioctl } for pid=14124 comm="syz.0.6478" path="socket:[100810]" dev="sockfs" ino=100810 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 252.139991][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.149839][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.161303][ T10] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 252.170407][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.178410][ T10] usb 7-1: Product: syz [ 252.182631][ T10] usb 7-1: Manufacturer: syz [ 252.187254][ T10] usb 7-1: SerialNumber: syz [ 252.197261][ T10] usb 7-1: config 0 descriptor?? [ 252.202665][T14109] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 252.210024][T14109] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 252.382575][ T3881] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 252.391675][ T3881] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.418594][T14109] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 252.425866][T14109] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 253.236998][ T10] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 253.248545][ T10] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 253.262743][ T10] usb 7-1: USB disconnect, device number 29 [ 253.269679][ T10] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 253.278364][T14170] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 253.293551][T14170] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 253.510528][T14193] input: syz0 as /devices/virtual/input/input79 [ 253.642600][T14207] input: syz1 as /devices/virtual/input/input80 [ 253.649019][T14207] input: failed to attach handler leds to device input80, error: -6 [ 253.756623][T14213] kvm: apic: phys broadcast and lowest prio [ 253.801267][T14219] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 253.808626][T14219] rust_binder: Write failure EINVAL in pid:365 [ 253.915108][T14236] input: syz1 as /devices/virtual/input/input81 [ 254.415058][ T36] audit: type=1400 audit(2000000395.693:998): avc: denied { setattr } for pid=14278 comm="syz.6.6552" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.457290][ T31] hid-generic 0000:0003:0000.007A: unknown main item tag 0x0 [ 254.465107][ T31] hid-generic 0000:0003:0000.007A: unknown main item tag 0x0 [ 254.474608][ T31] hid-generic 0000:0003:0000.007A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 254.519039][ T3881] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 254.671716][ T3881] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 254.681150][ T3881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.690255][ T3881] usb 5-1: config 0 descriptor?? [ 254.762291][ T36] audit: type=1326 audit(2000000396.043:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.7.6561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e8ef8e929 code=0x0 [ 254.897389][ T3881] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 255.448423][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 255.699148][ T3881] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 255.709648][ T3881] asix 5-1:0.0: probe with driver asix failed with error -71 [ 255.719050][ T3881] usb 5-1: USB disconnect, device number 59 [ 256.479055][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 256.630343][ T10] usb 5-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 256.640808][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 256.650417][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 256.659498][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.667505][ T10] usb 5-1: SerialNumber: syz [ 256.876798][ T10] usb 5-1: 0:2 : does not exist [ 256.883353][ T10] usb 5-1: USB disconnect, device number 60 [ 257.441076][T14354] input: syz1 as /devices/virtual/input/input82 [ 257.509172][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 257.509200][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 257.581594][T14369] input: syz0 as /devices/virtual/input/input83 [ 257.592836][ T1792] udevd[1792]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 258.239361][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 258.400459][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.414461][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.423593][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.432100][ T10] usb 7-1: SerialNumber: syz [ 258.784308][T14449] input: syz1 as /devices/virtual/input/input84 [ 259.043014][ T10] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 259.369998][T14493] overlayfs: failed to resolve '?': -2 [ 259.451621][ T1126] usb 7-1: USB disconnect, device number 30 [ 259.460900][ T1126] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 260.668265][T14577] overlayfs: workdir and upperdir must reside under the same mount [ 260.839671][ T36] audit: type=1326 audit(2000000402.123:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14592 comm="syz.6.6681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddc538e929 code=0x0 [ 261.687316][T14616] input: syz0 as /devices/virtual/input/input85 [ 261.767450][T14628] input: syz1 as /devices/virtual/input/input86 [ 261.796634][T14632] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 262.069081][ T5886] Bluetooth: hci0: command 0x1003 tx timeout [ 262.069082][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.138677][T14663] overlayfs: upper fs does not support file handles, falling back to index=off. [ 262.147821][T14663] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 262.159028][ T1126] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 262.281156][T14677] input: syz1 as /devices/virtual/input/input87 [ 262.319010][ T1126] usb 5-1: Using ep0 maxpacket: 32 [ 262.325333][ T1126] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.336448][ T1126] usb 5-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.348218][ T1126] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.359606][ T1126] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.369545][ T1126] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.382605][ T1126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.389293][ T1126] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 262.398612][ T1126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.408094][ T1126] usb 5-1: config 0 descriptor?? [ 262.816904][ T1126] hid-thrustmaster 0003:044F:B65D.007B: unknown main item tag 0x0 [ 262.824914][ T1126] hid-thrustmaster 0003:044F:B65D.007B: unknown main item tag 0x0 [ 262.832809][ T1126] hid-thrustmaster 0003:044F:B65D.007B: unknown main item tag 0x0 [ 262.840755][ T1126] hid-thrustmaster 0003:044F:B65D.007B: unknown main item tag 0x0 [ 262.848591][ T1126] hid-thrustmaster 0003:044F:B65D.007B: unknown main item tag 0x0 [ 262.857268][ T1126] hid-thrustmaster 0003:044F:B65D.007B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 262.869437][ T1126] hid-thrustmaster 0003:044F:B65D.007B: setup data couldn't be sent [ 263.018293][T14644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.027043][T14644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.035764][ C1] hid-thrustmaster 0003:044F:B65D.007B: URB to get model id failed with error -71 [ 263.035845][ T9] usb 5-1: USB disconnect, device number 61 [ 263.541531][ T36] audit: type=1400 audit(2000000404.823:1001): avc: denied { execute } for pid=14704 comm="syz.6.6731" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 263.720302][T14724] block device autoloading is deprecated and will be removed. [ 263.843897][ T36] audit: type=1400 audit(2000000405.123:1002): avc: denied { validate_trans } for pid=14735 comm="syz.0.6744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 264.489019][ T1126] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 264.494201][T14765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.547420][ T36] audit: type=1326 audit(2000000405.823:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.586777][ T36] audit: type=1326 audit(2000000405.823:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.622037][ T36] audit: type=1326 audit(2000000405.843:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.646037][ T36] audit: type=1326 audit(2000000405.843:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.650717][ T1126] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.669787][ T36] audit: type=1326 audit(2000000405.843:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.710274][ T36] audit: type=1326 audit(2000000405.843:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.725309][ T1126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.734682][ T36] audit: type=1326 audit(2000000405.843:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14773 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc538e929 code=0x7ffc0000 [ 264.746088][ T1126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.779417][ T1126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.793065][ T1126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.802358][ T1126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.826813][ T1126] usb 5-1: config 0 descriptor?? [ 264.827237][T14790] 9pnet: p9_errstr2errno: server reported unknown error [ 265.240032][ T1126] plantronics 0003:047F:FFFF.007C: unknown main item tag 0x0 [ 265.247818][ T1126] plantronics 0003:047F:FFFF.007C: No inputs registered, leaving [ 265.257086][ T1126] plantronics 0003:047F:FFFF.007C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 265.369018][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 265.402755][T14809] kvm: kvm [14808]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 265.519027][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 265.525235][ T9] usb 7-1: config 0 has an invalid interface number: 155 but max is 0 [ 265.533661][ T9] usb 7-1: config 0 has no interface number 0 [ 265.534937][ T1126] usb 5-1: USB disconnect, device number 62 [ 265.539866][ T9] usb 7-1: config 0 interface 155 has no altsetting 0 [ 265.557291][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice=32.14 [ 265.566452][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.574978][ T9] usb 7-1: Product: syz [ 265.587299][ T9] usb 7-1: Manufacturer: syz [ 265.595877][ T9] usb 7-1: SerialNumber: syz [ 265.606098][ T9] usb 7-1: config 0 descriptor?? [ 265.826498][ T9] usb-storage 7-1:0.155: USB Mass Storage device detected [ 265.855161][ T9] usb 7-1: USB disconnect, device number 31 [ 266.183372][T14837] SELinux: ebitmap start bit (3808428352) is beyond the end of the bitmap (1472) [ 266.195967][T14837] SELinux: failed to load policy [ 266.466096][T14861] input: syz0 as /devices/virtual/input/input89 [ 266.528560][T14879] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6804'. [ 266.539313][T14879] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6804'. [ 266.548312][T14879] netlink: 'syz.7.6804': attribute type 6 has an invalid length. [ 266.559157][T14879] netlink: 'syz.7.6804': attribute type 5 has an invalid length. [ 266.567609][T14879] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6804'. [ 266.850986][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 266.851006][ T36] audit: type=1400 audit(2000000408.133:1017): avc: denied { map } for pid=14924 comm="syz.4.6824" path="socket:[107337]" dev="sockfs" ino=107337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.880660][ T36] audit: type=1400 audit(2000000408.133:1018): avc: denied { read } for pid=14924 comm="syz.4.6824" path="socket:[107337]" dev="sockfs" ino=107337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.891801][T14928] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14928 comm=syz.4.6825 [ 266.959030][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 267.047374][T14950] overlayfs: workdir and upperdir must be separate subtrees [ 267.091014][T14958] loop7: detected capacity change from 0 to 16384 [ 267.120057][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.135343][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.145602][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.158811][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.168080][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.179238][ T9] usb 7-1: config 0 descriptor?? [ 267.420991][T14986] input: syz0 as /devices/virtual/input/input90 [ 267.427391][T14986] input: failed to attach handler leds to device input90, error: -6 [ 267.590414][ T9] plantronics 0003:047F:FFFF.007D: No inputs registered, leaving [ 267.600921][ T9] plantronics 0003:047F:FFFF.007D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 268.560552][ T36] audit: type=1400 audit(2000000409.843:1019): avc: denied { setattr } for pid=15015 comm="syz.4.6867" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.812934][T15036] tmpfs: Invalid gid '0x00000000ffffffff' [ 268.879198][ C1] plantronics 0003:047F:FFFF.007D: usb_submit_urb(ctrl) failed: -1 [ 269.069077][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 269.220309][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.231274][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.241063][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 269.253992][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 269.263069][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.271885][ T9] usb 5-1: config 0 descriptor?? [ 269.662195][ T10] usb 7-1: USB disconnect, device number 32 [ 269.682060][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.689589][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.697099][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.704703][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.712396][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.719833][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.727338][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.734851][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.742307][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.750022][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.757444][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.764932][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.772369][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.779826][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.787248][ T9] plantronics 0003:047F:FFFF.007E: unknown main item tag 0x0 [ 269.794928][ T9] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving [ 269.804428][ T9] plantronics 0003:047F:FFFF.007E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 269.939508][ T10] usb 5-1: USB disconnect, device number 63 [ 270.070360][ T36] audit: type=1400 audit(2000000411.353:1020): avc: denied { execute } for pid=15088 comm="syz.6.6901" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 271.167563][T15155] netlink: 'syz.6.6931': attribute type 4 has an invalid length. [ 271.258058][T15167] kvm: apic: phys broadcast and lowest prio [ 271.325981][T15169] input: syz1 as /devices/virtual/input/input91 [ 272.414612][T15220] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 272.423368][T15220] rust_binder: Write failure EINVAL in pid:677 [ 272.429416][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 272.589007][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 272.595153][ T10] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 272.603769][ T10] usb 7-1: config 179 has no interface number 0 [ 272.619004][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 272.632779][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 272.644099][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.655379][ T10] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 272.668171][ T10] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 272.681500][ T10] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 272.690659][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.702356][T15207] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 273.115558][ T31] usb 7-1: USB disconnect, device number 33 [ 273.115572][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 273.115607][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 273.404614][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 273.640965][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 275.429067][ T2210] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.429267][T15247] Bluetooth: hci0: command 0x1003 tx timeout [ 275.490812][ T36] audit: type=1326 audit(2000000416.773:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 275.514956][ T36] audit: type=1326 audit(2000000416.773:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 275.538650][ T36] audit: type=1326 audit(2000000416.773:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f10fb38d58a code=0x7ffc0000 [ 275.562187][ T36] audit: type=1326 audit(2000000416.793:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10fb3c11e5 code=0x7ffc0000 [ 275.669036][ T2210] Bluetooth: hci1: command 0x1003 tx timeout [ 275.669036][ T5886] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 275.715118][ T36] audit: type=1326 audit(2000000416.993:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 275.739037][ T36] audit: type=1326 audit(2000000416.993:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 275.762780][ T36] audit: type=1326 audit(2000000417.003:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10fb38d290 code=0x7ffc0000 [ 275.786520][ T36] audit: type=1326 audit(2000000417.003:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10fb38e52b code=0x7ffc0000 [ 275.810154][ T36] audit: type=1326 audit(2000000417.003:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 275.833820][ T36] audit: type=1326 audit(2000000417.003:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15273 comm="syz.4.6985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 276.673074][T15307] input: syz1 as /devices/virtual/input/input92 [ 277.428809][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.438164][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.445273][T15397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.569686][ T1126] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 277.720897][ T1126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.731885][ T1126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.741849][ T1126] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 277.750967][ T1126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.759686][ T1126] usb 7-1: config 0 descriptor?? [ 277.849040][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 278.000148][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.011241][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.026359][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 278.041153][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.053304][ T9] usb 5-1: config 0 descriptor?? [ 278.168017][ T1126] kone 0003:1E7D:2CED.007F: unknown main item tag 0x0 [ 278.175107][ T1126] kone 0003:1E7D:2CED.007F: unknown main item tag 0x0 [ 278.182192][ T1126] kone 0003:1E7D:2CED.007F: unknown main item tag 0x0 [ 278.195794][ T1126] kone 0003:1E7D:2CED.007F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.6-1/input0 [ 278.383070][ T1126] usb 7-1: USB disconnect, device number 34 [ 279.189758][ T9] hid-led 0003:27B8:01ED.0080: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 279.208739][ T9] hid-led 0003:27B8:01ED.0080: ThingM blink(1) initialized [ 279.390302][ T1126] usb 5-1: USB disconnect, device number 64 [ 280.019004][ T1126] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 280.170130][ T1126] usb 7-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1023 [ 280.180593][ T1126] usb 7-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.195972][ T1126] usb 7-1: config 1 interface 0 has no altsetting 0 [ 280.203613][ T1126] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.214296][ T1126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 280.222393][ T1126] usb 7-1: SerialNumber: syz [ 280.228089][T15468] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 280.365144][T15494] input: syz0 as /devices/virtual/input/input94 [ 280.645806][ T1126] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 280.655915][ T1126] usb 7-1: USB disconnect, device number 35 [ 280.819174][ T9] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 280.970156][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 280.978297][ T9] usb 5-1: config 0 has no interface number 0 [ 280.984558][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 280.992701][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 281.001807][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.009844][ T9] usb 5-1: Product: syz [ 281.014044][ T9] usb 5-1: Manufacturer: syz [ 281.018628][ T9] usb 5-1: SerialNumber: syz [ 281.024035][ T9] usb 5-1: config 0 descriptor?? [ 281.237047][T15537] input: syz0 as /devices/virtual/input/input95 [ 281.358632][T15547] netlink: 'syz.6.7110': attribute type 4 has an invalid length. [ 281.380543][ T31] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 281.389575][ T31] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.550739][T15561] netlink: 'syz.6.7116': attribute type 4 has an invalid length. [ 281.682988][ T46] bridge_slave_1: left allmulticast mode [ 281.688728][ T46] bridge_slave_1: left promiscuous mode [ 281.694665][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.702810][ T46] bridge_slave_0: left allmulticast mode [ 281.708640][ T46] bridge_slave_0: left promiscuous mode [ 281.714688][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.831769][ T46] tipc: Disabling bearer [ 281.836944][ T46] tipc: Left network mode [ 281.845089][ T46] veth1_macvtap: left promiscuous mode [ 281.850907][ T46] veth0_vlan: left promiscuous mode [ 281.922204][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.929439][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.936530][T15569] bridge_slave_0: entered allmulticast mode [ 281.943009][T15569] bridge_slave_0: entered promiscuous mode [ 281.949648][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.956718][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.963854][T15569] bridge_slave_1: entered allmulticast mode [ 281.970771][T15569] bridge_slave_1: entered promiscuous mode [ 282.029202][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.036281][T15569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.043630][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.050703][T15569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.058111][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 282.067854][ T9] usb 5-1: USB disconnect, device number 65 [ 282.083423][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.090983][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.100499][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.107561][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.116609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.123787][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.153647][T15569] veth0_vlan: entered promiscuous mode [ 282.164991][T15569] veth1_macvtap: entered promiscuous mode [ 282.391311][T15581] 9p: Unknown Cache mode or invalid value ;j~.rM09]~ށa΋!B\nz\A/ [ 282.611284][T15595] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 282.620681][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 282.620700][ T36] audit: type=1400 audit(2000000423.893:1036): avc: denied { remount } for pid=15596 comm="syz.4.7132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 282.734157][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7140'. [ 282.997142][T15634] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 283.004410][T15634] rust_binder: Write failure EINVAL in pid:2498 [ 283.053883][ T36] audit: type=1400 audit(2000000424.333:1037): avc: denied { execute } for pid=15637 comm="syz.0.7152" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 283.111686][T15644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 283.111724][T15644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2504 [ 283.178982][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 283.340270][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.350609][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.360685][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.369842][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.377843][ T9] usb 5-1: SerialNumber: syz [ 283.587016][ T9] usb 5-1: 0:2 : does not exist [ 283.595227][ T9] usb 5-1: USB disconnect, device number 66 [ 284.248736][ T36] audit: type=1400 audit(2000000425.523:1038): avc: denied { unmount } for pid=13299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 284.479001][ T31] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 284.630231][ T31] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 284.640325][ T31] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 284.651667][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.660794][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.668799][ T31] usb 5-1: Product: syz [ 284.673002][ T31] usb 5-1: Manufacturer: syz [ 284.677631][ T31] usb 5-1: SerialNumber: syz [ 285.085647][T15689] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 285.095053][T15689] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 285.711980][ T31] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 285.717769][ T31] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 285.738063][ T31] cdc_ncm 5-1:1.0: bind() failure [ 285.744035][ T31] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 285.751200][ T31] cdc_ncm 5-1:1.1: bind() failure [ 285.757369][ T31] usb 5-1: USB disconnect, device number 67 [ 285.980158][T15716] rust_binder: Write failure EINVAL in pid:2542 [ 286.061058][T15721] kvm: user requested TSC rate below hardware speed [ 286.076356][T15721] kvm: user requested TSC rate below hardware speed [ 286.278261][T15738] kvm: user requested TSC rate below hardware speed [ 286.466589][T15753] input: syz1 as /devices/virtual/input/input96 [ 286.568512][T15765] input: syz0 as /devices/virtual/input/input97 [ 286.574955][T15765] input: failed to attach handler leds to device input97, error: -6 [ 286.750159][ T647] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 286.909112][ T647] usb 5-1: Using ep0 maxpacket: 16 [ 286.915594][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.926620][ T647] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 286.935727][ T647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.944820][ T647] usb 5-1: config 0 descriptor?? [ 287.177587][ T46] bridge_slave_1: left allmulticast mode [ 287.185876][ T46] bridge_slave_1: left promiscuous mode [ 287.191947][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.202209][ T46] bridge_slave_0: left allmulticast mode [ 287.207920][ T46] bridge_slave_0: left promiscuous mode [ 287.224689][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.305267][T15812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 287.368356][ T647] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 287.404424][ T647] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 287.413956][ T647] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 287.421157][ T46] veth1_macvtap: left promiscuous mode [ 287.423265][ T647] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 287.429548][ T46] veth0_vlan: left promiscuous mode [ 287.436715][ T647] appleir 0003:05AC:8241.0082: unknown main item tag 0x0 [ 287.446427][ T647] appleir 0003:05AC:8241.0082: No inputs registered, leaving [ 287.457466][ T647] appleir 0003:05AC:8241.0082: hiddev96,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 287.546845][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.554000][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.562463][T15813] bridge_slave_0: entered allmulticast mode [ 287.572630][T15813] bridge_slave_0: entered promiscuous mode [ 287.579418][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.586485][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.596220][T15813] bridge_slave_1: entered allmulticast mode [ 287.602704][T15813] bridge_slave_1: entered promiscuous mode [ 287.654245][ T647] usb 5-1: USB disconnect, device number 68 [ 287.746933][T15844] netlink: 44 bytes leftover after parsing attributes in process `syz.8.7248'. [ 287.756271][T15844] netlink: 43 bytes leftover after parsing attributes in process `syz.8.7248'. [ 287.766130][T15844] netlink: 'syz.8.7248': attribute type 6 has an invalid length. [ 287.767548][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.780991][T15813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.788281][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.789327][T15844] netlink: 'syz.8.7248': attribute type 5 has an invalid length. [ 287.795350][T15813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.803523][T15844] netlink: 43 bytes leftover after parsing attributes in process `syz.8.7248'. [ 287.821096][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.828539][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.853891][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.861026][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.874757][ T36] audit: type=1400 audit(2000000429.143:1039): avc: denied { ioctl } for pid=15847 comm="syz.8.7249" path="socket:[115754]" dev="sockfs" ino=115754 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 287.881485][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.906732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.946617][T15813] veth0_vlan: entered promiscuous mode [ 287.961359][T15813] veth1_macvtap: entered promiscuous mode [ 288.279018][ T3881] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 288.337547][ T36] audit: type=1400 audit(2000000429.613:1040): avc: denied { read } for pid=15887 comm="syz.4.7267" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.359872][ T36] audit: type=1400 audit(2000000429.613:1041): avc: denied { open } for pid=15887 comm="syz.4.7267" path="/391/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.441008][ T3881] usb 10-1: config 4 has an invalid interface number: 95 but max is 0 [ 288.449582][ T3881] usb 10-1: config 4 has no interface number 0 [ 288.455862][ T3881] usb 10-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 288.470974][ T3881] usb 10-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 288.480534][ T3881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.497327][ T3881] usb 10-1: Product: syz [ 288.502064][ T3881] usb 10-1: Manufacturer: syz [ 288.506962][ T3881] usb 10-1: SerialNumber: syz [ 288.517162][T15854] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 288.730184][ T3881] usb 10-1: MIDIStreaming interface descriptor not found [ 288.745463][ T3881] usb 10-1: USB disconnect, device number 2 [ 288.759117][ T647] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 288.763289][ T1793] udevd[1793]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:4.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 288.888983][ T36] audit: type=1400 audit(2000000430.163:1042): avc: denied { remove_name } for pid=15917 comm="syz.0.7280" name="file0" dev="incremental-fs" ino=6524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.912940][ T36] audit: type=1400 audit(2000000430.173:1043): avc: denied { rmdir } for pid=15917 comm="syz.0.7280" name="file0" dev="incremental-fs" ino=6524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.915535][ T647] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.947803][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.963821][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 288.973668][ T647] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.991498][ T647] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.001815][ T647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.010905][ T647] usb 5-1: config 0 descriptor?? [ 289.422306][ T647] plantronics 0003:047F:FFFF.0083: ignoring exceeding usage max [ 289.433956][ T647] plantronics 0003:047F:FFFF.0083: No inputs registered, leaving [ 289.443016][ T647] plantronics 0003:047F:FFFF.0083: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 289.800718][T15968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.264849][ T36] audit: type=1400 audit(2000000432.543:1044): avc: denied { map } for pid=16048 comm="syz.4.7336" path="socket:[118136]" dev="sockfs" ino=118136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.499394][ T31] usb 5-1: USB disconnect, device number 69 [ 292.079015][ T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 292.183076][T16131] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 292.229112][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 292.235571][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.246768][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.256719][ T31] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 292.265919][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.278133][ T31] usb 10-1: config 0 descriptor?? [ 292.691413][ T31] savu 0003:1E7D:2D5A.0084: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 292.842883][T16162] input: syz0 as /devices/virtual/input/input98 [ 292.876907][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.949727][ T647] usb 10-1: USB disconnect, device number 3 [ 293.384265][T16188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:899 [ 293.435322][T16189] rust_binder: Write failure EINVAL in pid:899 [ 294.431936][ T36] audit: type=1400 audit(2000000435.713:1045): avc: denied { getattr } for pid=16225 comm="syz.4.7418" path="cgroup:[4026532312]" dev="nsfs" ino=4026532312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 294.779772][T16251] input: syz1 as /devices/virtual/input/input99 [ 294.948993][ T5886] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.949904][ T2210] Bluetooth: hci0: command 0x1003 tx timeout [ 294.997418][T16269] input: syz0 as /devices/virtual/input/input100 [ 295.089466][T16283] tipc: Started in network mode [ 295.094362][T16283] tipc: Node identity 7f000001, cluster identity 4711 [ 295.101394][T16283] tipc: Enabled bearer , priority 10 [ 295.328789][T16309] netlink: 112 bytes leftover after parsing attributes in process `syz.8.7455'. [ 295.404567][ T36] audit: type=1326 audit(2000000436.683:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16231 comm="syz.9.7421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b58e929 code=0x7fc00000 [ 295.784295][T16347] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7472'. [ 296.048998][ T647] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 296.206089][T16369] kvm: kvm [16368]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 296.210255][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 296.226188][ T9] tipc: Node number set to 2130706433 [ 296.232621][ T647] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 296.245238][ T647] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 296.254574][ T647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.264779][ T647] usb 5-1: Product: syz [ 296.269158][ T647] usb 5-1: Manufacturer: syz [ 296.273791][ T647] usb 5-1: SerialNumber: syz [ 296.279623][ T647] usb 5-1: config 0 descriptor?? [ 296.491201][ T647] usb 5-1: USB disconnect, device number 70 [ 296.501671][ T1793] udevd[1793]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 297.207072][T16426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=16426 comm=syz.8.7509 [ 297.375246][ T36] audit: type=1400 audit(2000000438.653:1047): avc: denied { write } for pid=16429 comm="syz.4.7511" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 297.851568][ T12] bridge_slave_1: left allmulticast mode [ 297.857336][ T12] bridge_slave_1: left promiscuous mode [ 297.863365][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.872105][ T12] bridge_slave_0: left allmulticast mode [ 297.877874][ T12] bridge_slave_0: left promiscuous mode [ 297.884519][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.038909][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.046095][T16465] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.053354][T16465] bridge_slave_0: entered allmulticast mode [ 298.060086][T16465] bridge_slave_0: entered promiscuous mode [ 298.078421][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.085603][T16465] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.093074][T16465] bridge_slave_1: entered allmulticast mode [ 298.099830][T16465] bridge_slave_1: entered promiscuous mode [ 298.111412][ T12] tipc: Disabling bearer [ 298.117068][ T12] tipc: Left network mode [ 298.135446][ T12] veth1_macvtap: left promiscuous mode [ 298.141086][ T12] veth0_vlan: left promiscuous mode [ 298.151157][T16479] input: syz1 as /devices/virtual/input/input101 [ 298.261251][T16489] input: syz1 as /devices/virtual/input/input102 [ 298.308947][T16465] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.316061][T16465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.323457][T16465] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.330569][T16465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.362547][ T36] audit: type=1400 audit(2000000439.633:1048): avc: denied { read } for pid=16490 comm="syz.4.7539" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 298.405978][ T36] audit: type=1400 audit(2000000439.633:1049): avc: denied { open } for pid=16490 comm="syz.4.7539" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 298.406086][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.440877][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.461076][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.468173][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.480610][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.487718][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.552076][T16465] veth0_vlan: entered promiscuous mode [ 298.587977][T16465] veth1_macvtap: entered promiscuous mode [ 298.889269][ T647] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 299.050092][ T647] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 299.061243][ T647] usb 2-1: config 0 has no interface number 0 [ 299.067352][ T647] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 299.078744][ T647] usb 2-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 299.096096][ T647] usb 2-1: config 0 interface 230 has no altsetting 0 [ 299.100118][ T36] audit: type=1400 audit(2000000440.373:1050): avc: denied { sys_nice } for pid=16532 comm="syz.9.7555" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 299.109966][ T647] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 299.134992][ T647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.136057][T16533] netlink: 112 bytes leftover after parsing attributes in process `syz.9.7555'. [ 299.152545][ T647] usb 2-1: Product: syz [ 299.156764][ T647] usb 2-1: Manufacturer: syz [ 299.163154][ T647] usb 2-1: SerialNumber: syz [ 299.168608][ T647] usb 2-1: config 0 descriptor?? [ 299.180454][ T36] audit: type=1326 audit(2000000440.463:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16536 comm="syz.4.7557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10fb38e929 code=0x0 [ 299.184984][T16502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.211409][T16502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.225151][ T647] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 299.233971][ T647] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 300.045733][T16563] input: syz1 as /devices/virtual/input/input103 [ 300.055829][T16565] tun0: tun_chr_ioctl cmd 1074025675 [ 300.061718][T16565] tun0: persist enabled [ 300.066882][T16565] tun0: tun_chr_ioctl cmd 1074025675 [ 300.072324][T16565] tun0: persist enabled [ 300.307195][T16593] input: syz1 as /devices/virtual/input/input104 [ 300.742657][ T36] audit: type=1400 audit(2000000442.023:1052): avc: denied { watch watch_reads } for pid=16635 comm="syz.4.7599" path="/487/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 300.778882][T16642] input: syz0 as /devices/virtual/input/input105 [ 300.794910][T16644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 300.794949][T16644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1052 [ 301.159017][ T9] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 301.320096][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 301.328473][ T9] usb 5-1: config 179 has no interface number 0 [ 301.334808][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 301.346089][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 301.357446][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 is Bulk; changing to Interrupt [ 301.367670][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.381002][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.390133][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.399365][T16652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 301.409247][T16652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 301.540414][ T647] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 301.622887][ T3881] usb 5-1: USB disconnect, device number 71 [ 301.622953][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 301.637308][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 301.729374][ T31] usb 2-1: USB disconnect, device number 3 [ 302.408984][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 302.453664][T16704] batadv_slave_1: entered promiscuous mode [ 302.460144][T16702] batadv_slave_1: left promiscuous mode [ 302.553697][T16714] overlayfs: conflicting lowerdir path [ 302.569190][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 302.582642][ T9] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 302.598970][ T9] usb 10-1: config 0 has no interface number 0 [ 302.607014][ T9] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.626665][ T9] usb 10-1: config 0 interface 85 has no altsetting 0 [ 302.642281][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 302.655547][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.664271][ T9] usb 10-1: Product: syz [ 302.668570][ T9] usb 10-1: Manufacturer: syz [ 302.673975][ T9] usb 10-1: SerialNumber: syz [ 302.688799][ T9] usb 10-1: config 0 descriptor?? [ 302.876428][T16733] netlink: 'syz.4.7642': attribute type 4 has an invalid length. [ 302.889488][T16733] netlink: 'syz.4.7642': attribute type 17 has an invalid length. [ 303.101501][ T9] usb 10-1: USB disconnect, device number 4 [ 303.469033][ T3881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 303.619000][ T3881] usb 2-1: Using ep0 maxpacket: 16 [ 303.626073][ T3881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.642857][ T3881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.652796][ T3881] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 303.661919][ T3881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.670378][ T31] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 303.691362][ T3881] usb 2-1: config 0 descriptor?? [ 303.844775][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 303.853095][ T31] usb 5-1: config 1 has no interface number 0 [ 303.859725][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 303.870648][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 303.881269][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.889477][ T31] usb 5-1: Product: syz [ 303.894026][ T31] usb 5-1: Manufacturer: syz [ 303.898877][ T31] usb 5-1: SerialNumber: syz [ 304.007328][ T36] audit: type=1400 audit(2000000445.283:1053): avc: denied { watch } for pid=16788 comm="syz.9.7668" path="/105/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 304.111628][ T3881] wacom 0003:056A:033B.0085: unknown main item tag 0x0 [ 304.120481][ T3881] wacom 0003:056A:033B.0085: unknown main item tag 0x0 [ 304.131468][ T3881] wacom 0003:056A:033B.0085: unknown main item tag 0x0 [ 304.138455][ T3881] wacom 0003:056A:033B.0085: unknown main item tag 0x0 [ 304.147590][ T3881] wacom 0003:056A:033B.0085: unknown main item tag 0x0 [ 304.156652][ T3881] wacom 0003:056A:033B.0085: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 304.166913][ T3881] wacom 0003:056A:033B.0085: hidraw0: USB HID v20.00 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 304.179028][ T3881] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033B.0085/input/input106 [ 304.322092][ T647] usb 2-1: USB disconnect, device number 4 [ 304.638426][T16807] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 304.638446][T16807] rust_binder: Read failure Err(EFAULT) in pid:2788 [ 304.659217][ T1126] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 304.819044][ T1126] usb 10-1: Using ep0 maxpacket: 8 [ 304.825721][ T1126] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 304.838340][ T1126] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 304.851115][ T1126] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.860708][ T1126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.868905][ T1126] usb 10-1: Product: syz [ 304.873584][ T1126] usb 10-1: Manufacturer: syz [ 304.878385][ T1126] usb 10-1: SerialNumber: syz [ 304.923574][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 304.934734][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 304.948285][ T31] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:5f:64:18:d2:55 [ 304.962617][ T31] usb 5-1: USB disconnect, device number 72 [ 304.979395][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 305.032862][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 305.045355][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 305.055320][ T13] tipc: Subscription rejected, illegal request [ 305.055789][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 305.107899][T16842] netlink: 'syz.0.7688': attribute type 4 has an invalid length. [ 305.350191][T16881] batadv_slave_1: entered promiscuous mode [ 305.356610][T16880] batadv_slave_1: left promiscuous mode [ 305.483088][T16892] netlink: 'syz.1.7702': attribute type 5 has an invalid length. [ 305.749168][T16916] netlink: 'syz.4.7714': attribute type 4 has an invalid length. [ 305.757060][T16916] netlink: 'syz.4.7714': attribute type 27 has an invalid length. [ 305.764959][T16916] netlink: 3609 bytes leftover after parsing attributes in process `syz.4.7714'. [ 305.800663][T16922] TCP: TCP_TX_DELAY enabled [ 305.859009][ T647] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 305.892639][ T1126] cdc_ncm 10-1:1.0: bind() failure [ 305.898987][ T1126] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 305.907442][ T1126] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 305.918838][ T1126] usb 10-1: USB disconnect, device number 5 [ 306.010372][ T647] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.028062][ T647] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.038162][ T647] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.054202][ T647] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.064475][ T647] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.072722][ T647] usb 2-1: Product: syz [ 306.076974][ T647] usb 2-1: Manufacturer: syz [ 306.081734][ T647] usb 2-1: SerialNumber: syz [ 306.439000][ T9] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 306.592218][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 306.601366][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.611540][ T9] usb 5-1: config 0 descriptor?? [ 306.715638][ T36] audit: type=1400 audit(2000000447.993:1054): avc: denied { create } for pid=16984 comm="syz.9.7745" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 306.736957][ T36] audit: type=1400 audit(2000000447.993:1055): avc: denied { append } for pid=16984 comm="syz.9.7745" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.878073][T16993] pim6reg1: entered promiscuous mode [ 306.883522][T16993] pim6reg1: entered allmulticast mode [ 307.094460][ T647] cdc_ncm 2-1:1.0: bind() failure [ 307.100740][ T647] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 307.109269][ T647] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 307.121676][ T647] usb 2-1: USB disconnect, device number 5 [ 307.622579][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 307.632790][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 307.641251][ T9] usb 5-1: USB disconnect, device number 73 [ 307.823404][T17007] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 308.299046][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 308.450525][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.462127][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.474234][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.487376][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.496584][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.508648][ T9] usb 2-1: config 0 descriptor?? [ 308.596222][T17039] kvm: user requested TSC rate below hardware speed [ 308.919496][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.927089][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.934588][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.942168][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.949793][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.957413][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.964906][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.972448][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.979927][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.987453][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 308.994994][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 309.002523][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 309.015117][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 309.022643][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 309.030117][ T9] plantronics 0003:047F:FFFF.0086: unknown main item tag 0x0 [ 309.038407][ T9] plantronics 0003:047F:FFFF.0086: No inputs registered, leaving [ 309.047694][ T9] plantronics 0003:047F:FFFF.0086: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 309.080205][T17058] input: syz0 as /devices/virtual/input/input109 [ 309.086777][T17058] input: failed to attach handler leds to device input109, error: -6 [ 309.132118][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7780'. [ 309.141818][T17063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=17063 comm=syz.9.7780 [ 309.189817][ T9] usb 2-1: USB disconnect, device number 6 [ 309.341356][T17070] tipc: Started in network mode [ 309.346257][T17070] tipc: Node identity ac1414aa, cluster identity 4711 [ 309.353391][T17070] tipc: Enabling of bearer rejected, failed to enable media [ 309.615989][T17087] rust_binder: 17084 RLIMIT_NICE not set [ 309.743000][T17103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:341 [ 309.782297][T17107] SELinux: security policydb version 17 (MLS) not backwards compatible [ 309.799820][T17107] SELinux: failed to load policy [ 309.831115][T17111] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 309.863622][T17115] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 309.863652][T17115] rust_binder: Read failure Err(EFAULT) in pid:349 [ 309.885847][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 309.940282][ T36] audit: type=1326 audit(2000000451.223:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17126 comm="syz.9.7807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f116b58e929 code=0x0 [ 310.670612][ T36] audit: type=1400 audit(2000000451.953:1057): avc: denied { mounton } for pid=17145 comm="syz.4.7814" path="/557/file0" dev="tmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 310.818759][ T36] audit: type=1400 audit(2000000452.093:1058): avc: denied { read } for pid=17161 comm="syz.9.7821" name="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.841136][ T36] audit: type=1400 audit(2000000452.093:1059): avc: denied { open } for pid=17161 comm="syz.9.7821" path="/" dev="configfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 311.338998][ T1126] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 311.490082][ T1126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.501173][ T1126] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 311.510250][ T1126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.519045][ T1126] usb 5-1: config 0 descriptor?? [ 311.549046][ T2171] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 311.700194][ T2171] usb 10-1: config 0 has an invalid interface number: 230 but max is 0 [ 311.708620][ T2171] usb 10-1: config 0 has no interface number 0 [ 311.715319][ T2171] usb 10-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 311.726329][ T2171] usb 10-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 311.729238][ T1126] usbhid 5-1:0.0: can't add hid device: -71 [ 311.737631][ T2171] usb 10-1: config 0 interface 230 has no altsetting 0 [ 311.744932][ T1126] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.752775][ T2171] usb 10-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 311.762577][ T1126] usb 5-1: USB disconnect, device number 74 [ 311.767548][ T2171] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.781208][ T2171] usb 10-1: Product: syz [ 311.785552][ T2171] usb 10-1: Manufacturer: syz [ 311.790428][ T2171] usb 10-1: SerialNumber: syz [ 311.795813][ T2171] usb 10-1: config 0 descriptor?? [ 311.801184][T17201] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 311.808347][T17201] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 311.816178][ T2171] ums-usbat 10-1:0.230: USB Mass Storage device detected [ 311.824039][ T2171] ums-usbat 10-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 311.909014][ T5886] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 311.909076][ T2210] Bluetooth: hci0: command 0x1003 tx timeout [ 312.169042][ T1126] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 312.320217][ T1126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.331321][ T1126] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.340403][ T1126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.349142][ T1126] usb 5-1: config 0 descriptor?? [ 312.519337][T17210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.757875][ T1126] keytouch 0003:0926:3333.0087: fixing up Keytouch IEC report descriptor [ 312.776759][ T1126] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0087/input/input111 [ 312.857428][ T1126] keytouch 0003:0926:3333.0087: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 313.137902][T17252] SELinux: failed to load policy [ 313.159323][ T647] usb 5-1: USB disconnect, device number 75 [ 313.161605][T17254] batadv_slave_0: entered promiscuous mode [ 313.175515][T17254] batadv_slave_0: left promiscuous mode [ 313.261099][T17266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2852 [ 313.262193][T17266] rust_binder: Read failure Err(EFAULT) in pid:2852 [ 313.596064][T17304] input: syz0 as /devices/virtual/input/input112 [ 313.692839][T17311] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.7881'. [ 314.091075][ T2171] ums-usbat 10-1:0.230: probe with driver ums-usbat failed with error -5 [ 314.772637][ T36] audit: type=1326 audit(2000000456.055:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17368 comm="syz.4.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 314.798685][ T36] audit: type=1326 audit(2000000456.075:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17368 comm="syz.4.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 314.822637][ T36] audit: type=1326 audit(2000000456.075:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17368 comm="syz.4.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 314.848295][ T36] audit: type=1326 audit(2000000456.075:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17368 comm="syz.4.7905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x7ffc0000 [ 314.900114][ T36] audit: type=1326 audit(2000000456.175:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.0.7887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cb78e929 code=0x7fc00000 [ 315.008992][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 315.160062][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 315.168998][ T2171] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 315.170963][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.190326][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.200316][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 315.214677][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 315.223998][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 315.232308][ T31] usb 2-1: Manufacturer: syz [ 315.238498][ T31] usb 2-1: config 0 descriptor?? [ 315.286768][ T1126] usb 10-1: USB disconnect, device number 6 [ 315.339019][ T2171] usb 5-1: Using ep0 maxpacket: 32 [ 315.345398][ T2171] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 315.353915][ T2171] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 315.362615][ T2171] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 315.371649][ T2171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 315.381363][ T2171] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 315.391158][ T2171] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.404176][ T2171] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 315.413366][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.422652][ T2171] usb 5-1: config 0 descriptor?? [ 315.630390][ T2171] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 76 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 315.648100][ T31] appleir 0003:05AC:8243.0088: unknown main item tag 0x0 [ 315.655415][ T31] appleir 0003:05AC:8243.0088: No inputs registered, leaving [ 315.664404][ T31] appleir 0003:05AC:8243.0088: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 316.306641][T17411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:424 [ 316.346782][ T36] audit: type=1400 audit(2000000457.625:1065): avc: denied { map } for pid=17414 comm="syz.9.7926" path="socket:[129510]" dev="sockfs" ino=129510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 316.368469][T17417] team_slave_1: entered promiscuous mode [ 316.385436][T17417] team_slave_1: entered allmulticast mode [ 316.389444][ T2171] usb 5-1: USB disconnect, device number 76 [ 316.403573][ T2171] usblp0: removed [ 316.443327][T17427] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7931'. [ 316.454239][ T36] audit: type=1400 audit(2000000457.735:1066): avc: denied { name_bind } for pid=17425 comm="syz.9.7931" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 316.481468][T17429] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.521571][T17434] input: syz0 as /devices/virtual/input/input113 [ 316.546240][ T36] audit: type=1326 audit(2000000457.825:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17435 comm="syz.4.7935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10fb38e929 code=0x0 [ 317.719442][ T2171] usb 2-1: USB disconnect, device number 7 [ 317.797936][T17485] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 317.797936][T17485] C<+ [ 317.913655][T17491] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 317.921115][T17491] rust_binder: Write failure EINVAL in pid:472 [ 317.921303][T17491] rust_binder: Write failure EFAULT in pid:472 [ 317.987332][T17501] netlink: 'syz.0.7963': attribute type 4 has an invalid length. [ 318.030103][T17507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.249079][ T1126] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 318.268989][ T2171] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 318.400590][ T1126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.411815][ T1126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.421753][ T1126] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 318.428978][ T2171] usb 10-1: Using ep0 maxpacket: 16 [ 318.431053][ T1126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.439534][ T2171] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.449153][ T1126] usb 2-1: config 0 descriptor?? [ 318.455919][ T2171] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.474699][ T2171] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.484067][ T2171] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.492220][ T2171] usb 10-1: Product: syz [ 318.496558][ T2171] usb 10-1: Manufacturer: syz [ 318.501698][ T2171] usb 10-1: SerialNumber: syz [ 318.554558][T17534] netlink: 'syz.4.7977': attribute type 1 has an invalid length. [ 318.716520][ T2171] usb 10-1: USB disconnect, device number 7 [ 318.848983][ T31] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 318.873872][ T1126] savu 0003:1E7D:2D5A.0089: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 319.000154][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.011160][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.020973][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 319.030081][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.038724][ T31] usb 5-1: config 0 descriptor?? [ 319.140221][ T2171] usb 2-1: USB disconnect, device number 8 [ 319.374661][ T36] audit: type=1400 audit(2000000460.655:1068): avc: denied { create } for pid=17556 comm="syz.9.7987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 319.392565][T17559] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ4 [ 319.448544][ T31] playstation 0003:054C:0DF2.008A: unknown main item tag 0x0 [ 319.456156][ T31] playstation 0003:054C:0DF2.008A: unknown main item tag 0x0 [ 319.466065][ T31] playstation 0003:054C:0DF2.008A: unknown main item tag 0x0 [ 319.473651][ T31] playstation 0003:054C:0DF2.008A: unknown main item tag 0x0 [ 319.481180][ T31] playstation 0003:054C:0DF2.008A: unknown main item tag 0x0 [ 319.499169][ T31] playstation 0003:054C:0DF2.008A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 319.699623][ T2171] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 319.860100][ T2171] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.871397][ T2171] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.881616][ T2171] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 319.891903][ T2171] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.901425][ T2171] usb 10-1: config 0 descriptor?? [ 319.963867][T17578] 9pnet: p9_errstr2errno: server reported unknown error pA [ 320.048027][ T31] playstation 0003:054C:0DF2.008A: Failed to retrieve feature with reportID 5: -71 [ 320.057875][ T31] playstation 0003:054C:0DF2.008A: Failed to retrieve DualSense calibration info: -71 [ 320.067806][ T31] playstation 0003:054C:0DF2.008A: Failed to get calibration data from DualSense [ 320.077381][ T31] playstation 0003:054C:0DF2.008A: Failed to create dualsense. [ 320.085717][ T31] playstation 0003:054C:0DF2.008A: probe with driver playstation failed with error -71 [ 320.098083][ T31] usb 5-1: USB disconnect, device number 77 [ 320.112569][T17584] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 320.310233][ T2171] cp2112 0003:10C4:EA90.008B: unknown main item tag 0x0 [ 320.317976][ T2171] cp2112 0003:10C4:EA90.008B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 320.509523][ T2171] cp2112 0003:10C4:EA90.008B: Part Number: 0x82 Device Version: 0xFE [ 320.644808][ T36] audit: type=1400 audit(2000000461.925:1069): avc: denied { rename } for pid=17594 comm="syz.0.8004" name="file0" dev="incremental-fs" ino=7233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.670350][ T3372] ------------[ cut here ]------------ [ 320.675873][ T3372] WARNING: CPU: 0 PID: 3372 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 320.683982][ T3372] Modules linked in: [ 320.687932][ T3372] CPU: 0 UID: 0 PID: 3372 Comm: syz-executor Not tainted 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 320.701617][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 320.711796][ T3372] RIP: 0010:drop_nlink+0xce/0x110 [ 320.716857][ T3372] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 5a 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 320.736514][ T3372] RSP: 0018:ffffc900015efc60 EFLAGS: 00010293 [ 320.742645][ T3372] RAX: ffffffff81ed45be RBX: ffff888139b85a78 RCX: ffff8881276bdf00 [ 320.750659][ T3372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.758657][ T3372] RBP: ffffc900015efc88 R08: 0000000000000003 R09: 0000000000000004 [ 320.766669][ T3372] R10: dffffc0000000000 R11: fffff520002bdf7c R12: dffffc0000000000 [ 320.774709][ T3372] R13: 1ffff11027370b58 R14: ffff888139b85ac0 R15: 0000000000000000 [ 320.782760][ T3372] FS: 000055557ceb8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 320.791750][ T3372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.798343][ T3372] CR2: 000055557cedb4e8 CR3: 0000000129ce6000 CR4: 00000000003526b0 [ 320.806366][ T3372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 320.814392][ T3372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 320.822414][ T3372] Call Trace: [ 320.825713][ T3372] [ 320.828648][ T3372] shmem_rmdir+0x5f/0x90 [ 320.832942][ T3372] vfs_rmdir+0x3dd/0x560 [ 320.837207][ T3372] incfs_kill_sb+0x109/0x230 [ 320.841839][ T3372] deactivate_locked_super+0xd5/0x2a0 [ 320.847242][ T3372] deactivate_super+0xb8/0xe0 [ 320.852062][ T3372] cleanup_mnt+0x3f1/0x480 [ 320.856521][ T3372] __cleanup_mnt+0x1d/0x40 [ 320.861081][ T3372] task_work_run+0x1e0/0x250 [ 320.865706][ T3372] ? __cfi_task_work_run+0x10/0x10 [ 320.870881][ T3372] ? __x64_sys_umount+0x126/0x170 [ 320.875934][ T3372] ? __cfi___x64_sys_umount+0x10/0x10 [ 320.881369][ T3372] ? __kasan_check_read+0x15/0x20 [ 320.886423][ T3372] resume_user_mode_work+0x36/0x50 [ 320.891582][ T3372] syscall_exit_to_user_mode+0x64/0xb0 [ 320.897073][ T3372] do_syscall_64+0x64/0xf0 [ 320.901532][ T3372] ? clear_bhb_loop+0x50/0xa0 [ 320.906240][ T3372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 320.912207][ T3372] RIP: 0033:0x7ff3cb78fc57 [ 320.916648][ T3372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 320.936330][ T3372] RSP: 002b:00007ffe68cd98a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 320.944807][ T3372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff3cb78fc57 [ 320.953037][ T3372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe68cd9960 [ 320.961054][ T3372] RBP: 00007ffe68cd9960 R08: 0000000000000000 R09: 0000000000000000 [ 320.969083][ T3372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe68cda9f0 [ 320.977078][ T3372] R13: 00007ff3cb810925 R14: 000000000004e482 R15: 00007ffe68cdaa30 [ 320.985110][ T3372] [ 320.988326][ T3372] ---[ end trace 0000000000000000 ]--- [ 320.994068][ T3372] ================================================================== [ 320.994437][ T2171] cp2112 0003:10C4:EA90.008B: error setting SMBus config [ 321.002159][ T3372] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 321.002200][ T3372] Write of size 4 at addr 0000000000000168 by task syz-executor/3372 [ 321.010265][ T2171] cp2112 0003:10C4:EA90.008B: probe with driver cp2112 failed with error -71 [ 321.015492][ T3372] [ 321.015507][ T3372] CPU: 1 UID: 0 PID: 3372 Comm: syz-executor Tainted: G W 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 321.015547][ T3372] Tainted: [W]=WARN [ 321.015557][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.015577][ T3372] Call Trace: [ 321.015587][ T3372] [ 321.015601][ T3372] __dump_stack+0x21/0x30 [ 321.015638][ T3372] dump_stack_lvl+0x10c/0x190 [ 321.015670][ T3372] ? __cfi_dump_stack_lvl+0x10/0x10 [ 321.015703][ T3372] print_report+0x3d/0x70 [ 321.015727][ T3372] kasan_report+0x163/0x1a0 [ 321.015765][ T3372] ? ihold+0x24/0x70 [ 321.015803][ T3372] ? _raw_spin_unlock+0x45/0x60 [ 321.015842][ T3372] ? ihold+0x24/0x70 [ 321.015888][ T3372] kasan_check_range+0x299/0x2a0 [ 321.015927][ T3372] __kasan_check_write+0x18/0x20 [ 321.015959][ T3372] ihold+0x24/0x70 [ 321.015999][ T3372] vfs_rmdir+0x26a/0x560 [ 321.016026][ T3372] incfs_kill_sb+0x109/0x230 [ 321.016059][ T3372] deactivate_locked_super+0xd5/0x2a0 [ 321.016086][ T3372] deactivate_super+0xb8/0xe0 [ 321.016111][ T3372] cleanup_mnt+0x3f1/0x480 [ 321.016149][ T3372] __cleanup_mnt+0x1d/0x40 [ 321.016184][ T3372] task_work_run+0x1e0/0x250 [ 321.016212][ T3372] ? __cfi_task_work_run+0x10/0x10 [ 321.016238][ T3372] ? __x64_sys_umount+0x126/0x170 [ 321.016267][ T3372] ? __cfi___x64_sys_umount+0x10/0x10 [ 321.016298][ T3372] ? __kasan_check_read+0x15/0x20 [ 321.016328][ T3372] resume_user_mode_work+0x36/0x50 [ 321.016354][ T3372] syscall_exit_to_user_mode+0x64/0xb0 [ 321.016389][ T3372] do_syscall_64+0x64/0xf0 [ 321.016411][ T3372] ? clear_bhb_loop+0x50/0xa0 [ 321.016440][ T3372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.016469][ T3372] RIP: 0033:0x7ff3cb78fc57 [ 321.016492][ T3372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 321.016514][ T3372] RSP: 002b:00007ffe68cd98a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 321.016543][ T3372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff3cb78fc57 [ 321.016562][ T3372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe68cd9960 [ 321.016580][ T3372] RBP: 00007ffe68cd9960 R08: 0000000000000000 R09: 0000000000000000 [ 321.016598][ T3372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe68cda9f0 [ 321.016616][ T3372] R13: 00007ff3cb810925 R14: 000000000004e482 R15: 00007ffe68cdaa30 [ 321.016638][ T3372] [ 321.016648][ T3372] ================================================================== [ 321.026376][ T2171] usb 10-1: USB disconnect, device number 8 [ 321.043872][ T3372] Disabling lock debugging due to kernel taint [ 321.295904][ T3372] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 321.303746][ T3372] #PF: supervisor write access in kernel mode [ 321.309815][ T3372] #PF: error_code(0x0002) - not-present page [ 321.315825][ T3372] PGD 800000011b102067 P4D 800000011b102067 PUD 0 [ 321.322342][ T3372] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 321.328410][ T3372] CPU: 0 UID: 0 PID: 3372 Comm: syz-executor Tainted: G B W 6.12.30-syzkaller-g94ce385c22d5 #0 16e511e29439c8b2668c1520ec6e7e54ef5e5f6a [ 321.343514][ T3372] Tainted: [B]=BAD_PAGE, [W]=WARN [ 321.348527][ T3372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.358580][ T3372] RIP: 0010:ihold+0x2a/0x70 [ 321.363097][ T3372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 51 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 321.382788][ T3372] RSP: 0018:ffffc900015efca0 EFLAGS: 00010246 [ 321.388857][ T3372] RAX: ffff8881276bdf00 RBX: 0000000000000000 RCX: ffff8881276bdf00 [ 321.396826][ T3372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.404795][ T3372] RBP: ffffc900015efcb0 R08: ffffffff88958947 R09: 1ffffffff112b128 [ 321.412776][ T3372] R10: dffffc0000000000 R11: fffffbfff112b129 R12: ffff888139b85a84 [ 321.420745][ T3372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 321.428722][ T3372] FS: 000055557ceb8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 321.437657][ T3372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.444252][ T3372] CR2: 0000000000000168 CR3: 0000000129ce6000 CR4: 00000000003526b0 [ 321.452224][ T3372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.460195][ T3372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.468163][ T3372] Call Trace: [ 321.471437][ T3372] [ 321.474395][ T3372] vfs_rmdir+0x26a/0x560 [ 321.478659][ T3372] incfs_kill_sb+0x109/0x230 [ 321.483271][ T3372] deactivate_locked_super+0xd5/0x2a0 [ 321.488650][ T3372] deactivate_super+0xb8/0xe0 [ 321.493333][ T3372] cleanup_mnt+0x3f1/0x480 [ 321.497758][ T3372] __cleanup_mnt+0x1d/0x40 [ 321.502203][ T3372] task_work_run+0x1e0/0x250 [ 321.506794][ T3372] ? __cfi_task_work_run+0x10/0x10 [ 321.511904][ T3372] ? __x64_sys_umount+0x126/0x170 [ 321.516932][ T3372] ? __cfi___x64_sys_umount+0x10/0x10 [ 321.522309][ T3372] ? __kasan_check_read+0x15/0x20 [ 321.527333][ T3372] resume_user_mode_work+0x36/0x50 [ 321.532440][ T3372] syscall_exit_to_user_mode+0x64/0xb0 [ 321.537905][ T3372] do_syscall_64+0x64/0xf0 [ 321.542316][ T3372] ? clear_bhb_loop+0x50/0xa0 [ 321.546992][ T3372] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 321.552924][ T3372] RIP: 0033:0x7ff3cb78fc57 [ 321.557338][ T3372] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 321.576971][ T3372] RSP: 002b:00007ffe68cd98a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 321.585398][ T3372] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff3cb78fc57 [ 321.593368][ T3372] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe68cd9960 [ 321.601346][ T3372] RBP: 00007ffe68cd9960 R08: 0000000000000000 R09: 0000000000000000 [ 321.609931][ T3372] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe68cda9f0 [ 321.617955][ T3372] R13: 00007ff3cb810925 R14: 000000000004e482 R15: 00007ffe68cdaa30 [ 321.626031][ T3372] [ 321.629054][ T3372] Modules linked in: [ 321.632956][ T3372] CR2: 0000000000000168 [ 321.637136][ T3372] ---[ end trace 0000000000000000 ]--- [ 321.642600][ T3372] RIP: 0010:ihold+0x2a/0x70 [ 321.647135][ T3372] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 dd 51 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4c ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 ed [ 321.666831][ T3372] RSP: 0018:ffffc900015efca0 EFLAGS: 00010246 [ 321.672904][ T3372] RAX: ffff8881276bdf00 RBX: 0000000000000000 RCX: ffff8881276bdf00 [ 321.680891][ T3372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.688877][ T3372] RBP: ffffc900015efcb0 R08: ffffffff88958947 R09: 1ffffffff112b128 [ 321.696848][ T3372] R10: dffffc0000000000 R11: fffffbfff112b129 R12: ffff888139b85a84 [ 321.704818][ T3372] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 321.712784][ T3372] FS: 000055557ceb8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 321.721715][ T3372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.728299][ T3372] CR2: 0000000000000168 CR3: 0000000129ce6000 CR4: 00000000003526b0 [ 321.736371][ T3372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.744352][ T3372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.752333][ T3372] Kernel panic - not syncing: Fatal exception [ 321.758590][ T3372] Kernel Offset: disabled [ 321.762916][ T3372] Rebooting in 86400 seconds..