last executing test programs: 5.532308911s ago: executing program 2 (id=1223): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) clock_gettime(0x4, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@delsa={0xd8, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4d6, 0xa, 0x33}, [@address_filter={0x28, 0x1a, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0xa, 0x3, 0x2}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2b, 0x1a}}, @coaddr={0x14, 0xe, @in6=@empty}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@empty, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075d}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9000}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2d, 0x7}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @lastused={0xc, 0xf, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48054}, 0x80) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100008d18c008030473dad008000000010902120001000060000904ff00000af50b00702cd49dde149f492848117fa44451941e6578ad8b4d059bb2e1ba224998b61120a65676d5c4788d681cdf7d14793b251277746c13d85d2ae85848383db045d3baf1c8dc9b3b119bc01f2868e51fa3"], 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz1\x00', {0x8, 0x1, 0x5, 0x3}, 0x2d, [0x3ff, 0xdc0, 0xf, 0x7, 0xf404, 0x7, 0x2, 0x8, 0x6, 0x7f, 0x5, 0x7, 0x7ff, 0x1, 0x3, 0x0, 0xffffff2b, 0x40, 0x5, 0x8, 0x3, 0x5d19, 0x9, 0x1, 0x7, 0x2, 0xce, 0x2, 0x4, 0x2, 0x180000, 0x4, 0xfffffc01, 0xf4ee, 0x2, 0x0, 0x5, 0xf85, 0xfffffff8, 0x2, 0x10000, 0x5, 0x2, 0x4, 0x9, 0x5, 0xfffffff1, 0x3c990eb4, 0x7, 0x8, 0x7fffffff, 0x3, 0x200, 0x8, 0xff, 0xeb, 0x7, 0x2, 0x5, 0x8, 0x7, 0x3ff, 0xec9d, 0x6], [0x7, 0x80000000, 0x5, 0x3, 0x411, 0x8, 0xfffffffc, 0x0, 0x10000000, 0x80, 0x8000000, 0x0, 0x8, 0x2, 0x2, 0x721d475c, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0x6a3c, 0x644d, 0x4, 0x3, 0x3, 0x8, 0x2, 0x5, 0x7fffffff, 0x6, 0xffffffff, 0x200, 0x1000, 0x4, 0xfffffff7, 0x9, 0x2, 0x79a, 0xe6a3, 0x7ff, 0x10, 0x2, 0x9, 0x7b22, 0x9, 0x39c, 0xfffffffd, 0x8, 0x4, 0x564, 0x6, 0x4, 0xc, 0x2, 0x6, 0x7, 0x9abe, 0x6, 0x4, 0x8001, 0x3, 0xfffffff9, 0x8], [0x1, 0x4, 0x3, 0x5, 0x2, 0x3, 0x4d6fc27e, 0x1, 0xffffffff, 0x0, 0x10000, 0x626, 0x4, 0x4, 0x3, 0x2, 0x8, 0x2000000, 0x0, 0x71, 0x200, 0xffffff5b, 0x2, 0xa, 0x8, 0x828, 0x6, 0x5, 0x0, 0x67, 0x6, 0x80, 0x0, 0x1, 0x3, 0x7, 0x7f, 0x3, 0x400, 0xb, 0x8, 0x5, 0x80000000, 0x3, 0x4, 0x256, 0x4, 0xffffffff, 0xc, 0xfc7, 0x0, 0xc, 0x2, 0xffffffff, 0xa, 0xf28, 0xffff, 0x34, 0x6, 0xfff, 0x4e, 0x3, 0x4, 0x6], [0x71e1, 0x0, 0x6, 0x0, 0x6, 0x5, 0x67d0, 0x4, 0x9, 0x9, 0x1, 0x6, 0xc299145, 0x1, 0x6, 0xc, 0x7, 0x5, 0x6, 0x2879, 0xf, 0x7, 0x7f, 0x8, 0x2, 0x5, 0x7f, 0x9, 0x400, 0x80000001, 0x2, 0xc, 0x80000001, 0x7, 0x2, 0xe2a9, 0x5, 0x0, 0x3, 0x8, 0x5, 0x4, 0x400, 0xf, 0x3, 0x9, 0x2, 0x2, 0x8, 0x6, 0x922, 0x9, 0x6, 0x9, 0x2, 0x800, 0x6, 0x12, 0x5, 0xb, 0x3, 0x5, 0x0, 0x9]}, 0x45c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x4}) clock_getres(0x0, &(0x7f0000000180)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000100)={0x3, 0x0, [{0xa, 0xbeef, 0x7ff, 0x7ff, 0x10}, {0x80000008, 0x2, 0x10001, 0x23, 0x8}, {0x40000000, 0x9, 0x4d, 0x3, 0x8001}]}) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mprotect(&(0x7f0000af9000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 5.193609851s ago: executing program 0 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x74, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4bc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xeac4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0xc010) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x9, 0x2}]}, 0x10) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r6, 0xc0805841, &(0x7f0000000180)={0xf4000000, 0x2, 0xd, 0xf3f, 0x6}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.045802669s ago: executing program 0 (id=1229): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x180000) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x400000f2, 0x0, 0x3}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, 'a#\bY'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0xa5bdb994789878da, 0x24, {0x24, 0x9, "aef09b20b82b96eba0837f5296772420739568cdb6ba4d6db774ead7ec229315c686"}}, &(0x7f0000000140)={0x0, 0x3, 0x83, @string={0x83, 0x3, "358d350a1b254b32f78a0e4040b74ee71d0c4d038a1aacc42d625523c6f733977f8c5a668d59f48b08caf4aa9d0022e5f54ac15c6b6233e6963b05ac6f1fab5e6c58c8e2df4be294624807e0ab8cb0b859df970c4dd67602f31fcca789a5fcb7079faf07930c2e4063698c1b16c5ab0eba3c4e86f2b1ae1df7ef7b5d0dcf34311e"}}, &(0x7f00000000c0)={0x0, 0x22, 0x9, {[@main=@item_012={0x1, 0x0, 0xc, "d4"}, @main=@item_012={0x1, 0x0, 0x2, 'U'}, @global=@item_4={0x3, 0x1, 0x7, "a1b73feb"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x4f8}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x40, 0x15, 0xb8, "2a221b83d668a6acee37b4f10cca39989f3337b231bdc5aa14c53107120552cc6efe829c4f7ae878035375682aaacef0a147bc133f00a9e19f636b732489ee593d1e6fb22f2eaba496439b136695ae4b09f783aeb20089bb52635a227cf1c2e7ce5ae469e3dd4abb3576ccea7c20498fe0187f746b0106088a10e4ea3d50ef28b2927cf7de7d420c541c1dab1675372b17a5a3744be4977b2c0e1ad73ebf464a078711faa1f75e7a20863467830ce5d0b87734f3d3228a43"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x56}, &(0x7f00000003c0)={0x20, 0x1, 0x2b, "274c0f1de8137ad41f28bcb161916bc2c150bf743e6ca8beab281547d5607d9e391182ab267fcbb592fb46"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x80}}) r6 = syz_open_dev$MSR(&(0x7f0000000480), 0xccf, 0x0) r7 = syz_pidfd_open(0xffffffffffffffff, 0x0) splice(r6, &(0x7f00000004c0)=0x4, r7, &(0x7f0000000500)=0x7, 0x75e8, 0xf) 4.766505835s ago: executing program 2 (id=1231): prctl$PR_SET_TSC(0x1a, 0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000004c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x4}, {0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x28) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x9, 0x0) close_range(r2, r0, 0x2) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757816"], 0x65) syz_usb_connect(0x1, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="aacd676a0df3674abdd0cb969e1b04ec4b"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x12, r5, 0x98b53000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000180)={0x2, 0x4000}) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "1d637428f01c82d9", "743a0171dfdd7fb4f05b5f32503c0829", "0fe732d2", "3ab031584822b48b"}, 0x28) 4.276755433s ago: executing program 3 (id=1236): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x2004, 0x0, 0x4, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x27, {[@global=@item_4={0x3, 0x1, 0x7, "ad7f50e2"}, @global=@item_012={0x2, 0x1, 0x2, "a756"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "ae74f59d"}, @global=@item_4={0x3, 0x1, 0x9, "e031806f"}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x0, 0x2, 0x3}, @local=@item_4={0x3, 0x2, 0x7, 'c^,-'}]}}, 0x0}, 0x0) 3.176053257s ago: executing program 0 (id=1239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x6a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES8=r3, @ANYRESDEC=0x0], &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffff61, 0x0, 0x24}) 2.726708473s ago: executing program 3 (id=1241): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000404, &(0x7f0000001240)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101100, 0x80) getdents64(r0, &(0x7f00000001c0)=""/4113, 0x1011) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x10}) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0xf3, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x18, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x18}], 0x1}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_dump={0x26, 0x80000000}}) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 2.583438661s ago: executing program 3 (id=1243): r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100), &(0x7f0000000080)=0x60, 0x0) (async) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100), &(0x7f0000000080)=0x60, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init() (async) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) (async) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) creat(&(0x7f0000000100)='./file0\x00', 0x40) inotify_add_watch(r3, &(0x7f00000003c0)='./file0\x00', 0x4000140) close(0x3) (async) close(0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r2, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) sendmmsg$inet(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002180)="e7410a484d61fdf6a62f76f70200"/29, 0x1d}, {&(0x7f00000021c0)="ed86382640dc08f18174d877f8eb2dd4568aec1b967f981e03067cc217d12a8ba58ef7199a27eca8464ada65bbe41ba2fb0dba379826eef7d42e3b9a2ff5c3e7db510de8d743a351e970a910a5f04dbcb7c3b57e8e7d7608", 0x58}, {&(0x7f0000002240)="1d104c39f091323be0", 0x9}, {&(0x7f0000002280)="cdcb3b56c2f2e79ca687ad004be777f4c9feb37390043a4d2fdd852708b5dc41840c121387d87f565bd055b0190c0ec48732bf55ef09cc2b16e987ba95956eb6db2b9102f9a7cb27d41dcc1db56826025d112fbd944cda9eb6d7dc2f0b2150419b4594d2242771cbc90b22a9dd7b314db7c5df691cbdec518bd4027d1e13b0052e", 0x81}, {&(0x7f0000002340)="bb7be906", 0x4}, {&(0x7f0000002380)="9d1d5d1ef9a29656f9afa13558", 0xd}], 0x6, &(0x7f0000002440)}}], 0x1, 0x4000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x200, 0x0, 0x2, 0x3}, 0x20) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x5, 'L.'}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000240)={0x2c, &(0x7f0000002580)=ANY=[@ANYBLOB="000190000000900f173e9cbfd9613ccab0eedce27c706faad164e676f0cef3283f6fa555d1f716efd065442a672f421e1d4f5dfc0ea419bfe30dae25daa6a27c4d4d18c54696840c182fae252fe3dda77c32dd09684e683ba6bce7e879af1089bddaf9a9c07ab224c9ce5d38e430f14e37e0bb8e6c52554fee9ba3901553706b8cdd0e4775d77ff217524c5e17af86df1e74e500a5b3661e5438b0542197934c3511ba81ab1da7053169ecc8e6607b78e558c5dce4fb3ec20ac41db3c8c2c9b48d4b20c7bcfb44f2b8bd0766cdbf2e11ffed55b2702fb19159645385633d3cab537c5b4ae8b94ff678f61f63cf770eae98c3310f80c07ea5f3c95329fad9ff0426c0d4be5a4ad7bb9e2f775839c34675dc574633a371340710941977e84a1b2649850b1fdf704d005b8a8cf1f29700bb99ad63d5262d12c92f42707ce8e991556907ec4082acd0c61bb15e63aed7036453a055660c3e722749502abf"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x3}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x5, 0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xb, 0x2, "aeae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000002540)={0x4, &(0x7f0000002500)=[{0x10, 0x80, 0x8, 0x1}, {0x2, 0x8, 0x7, 0x4}, {0x40, 0x79, 0x3, 0xfffffbff}, {0xe, 0x9, 0x4, 0x6}]}, 0x10) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000002540)={0x4, &(0x7f0000002500)=[{0x10, 0x80, 0x8, 0x1}, {0x2, 0x8, 0x7, 0x4}, {0x40, 0x79, 0x3, 0xfffffbff}, {0xe, 0x9, 0x4, 0x6}]}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) readahead(r8, 0xa, 0x8) socket(0x10, 0x2, 0x0) (async) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 1.754025078s ago: executing program 2 (id=1245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0xb}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.676074563s ago: executing program 2 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x11, 0x2, 0x1) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a806d8be255", 0x10) setsockopt(r1, 0x107, 0x2, &(0x7f00000001c0)="fcff00000100060000071a80010061cc", 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fremovexattr(r2, &(0x7f00000033c0)=@random={'security.', '*-}-+\'k\x00'}) socket$packet(0x11, 0x0, 0x300) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000010c0)={0x0, 0x31, &(0x7f0000001080)={&(0x7f0000001040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4048800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0x27) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, r3, &(0x7f0000000200)={0x52d, 0xc00000000000000, 0x8, 0x9, 0x7, 0x6a9d, 0x6, 0x3, 0x4}) 1.675753143s ago: executing program 2 (id=1247): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.606370087s ago: executing program 1 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000000080)={0x1, 0x1, [{r3, 0x0, 0xfffffffffffef000, 0x2000}]}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x20, 0x9, 0xda, {0xda, 0x22, "f899c180e92eb2a6bcf9bec0e196bc38a637562a540d4579b15a1eb23d39befec46a969b889784b3c60462f0e33d1421af9f4fe5206f7e167d8f1849eeb7adc80b6a5fc9c3dee962dc4c69cc4db30e11d19a740d3805946d7f6d1d8be932f48cd5d9889d3c6ad3cfdc8de877a29c6f71b693fdf38c6a95f61858b335fda9c2154533d49ca491a281d34a5eb2db00d8849539100d928c35feba8fcac1d89c2b582cb8168aae1caa6f340a7334a477c8eea19e1920947e342ad7c3064e8f5490356db71f598121b447536c4781eff19741fdc1073ed8a59eb5"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfb372bdec758342f}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x0, 0x10, 0xb2, "4d07f0b58a0389ec6364c9ee557e7efaeed075b81be77cbc742dc6471c03ec8c3bd980193cb249b78d225931567622778a2ed0ee80c3ef718a13a5c6df4c042209e3d93c434beef1aa6e366fd6ed29d9c4d50e8771142f32f0025c12db99bd84d909a5c84ada6a096b95cb0cd8eb3642b73f36fcb62a6c919ef8c8cf8982a984a4515167894404187c371ec586e678075bcf0a60986c411e0ac8618d107b6af3a4bdb07dafb49b9a4dc3e1eb64c41de6a8b6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0xc0, 0x5, 0x6, "8722898715a4"}, &(0x7f00000005c0)={0x40, 0x5, 0x4, "972883e7"}}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000001c0)={0x1d, 0x8, 0x1, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2]}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0xc4) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRESHEX=r5], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r6, 0x1, 0x47, 0x0, &(0x7f0000000680)) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000008c400"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.084060067s ago: executing program 3 (id=1250): io_setup(0x1, &(0x7f00000016c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x13, 0x301, 0x0, 0x25dfdbfc, {0xc}}, 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x21, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @mcast1, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) 1.083593857s ago: executing program 1 (id=1251): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r2], 0x20}}, 0x40816) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 572.985287ms ago: executing program 1 (id=1252): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f00000005c0)={0xa, 0x4e21, 0x6, @loopback, 0x6}, 0x1c) keyctl$search(0xa, r0, &(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0) 561.802827ms ago: executing program 1 (id=1253): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x64482, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 504.02692ms ago: executing program 1 (id=1254): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 503.23456ms ago: executing program 1 (id=1255): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r1, 0x0, 0x80, 0x8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) quotactl_fd$Q_GETINFO(r7, 0xffffffff80000501, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0}) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000240)={0x2c, &(0x7f0000000340)={0x0, 0x1, 0x90, {0x90, 0xf, "173e9cbfd9613ccab0eedce27c706faad164e676f0cef3283f6fa555d1f716efd065442a672f421e1d4f5dfc0ea419bfe30dae25daa6a27c4d4d18c54696840c182fb9252fe3dda77c32dd09684e683ba6bce7e879af1089bddaf9a9c07ab224c9ce5d38e430f14e37e0bb8e6c52554fee9ba3901553706b8cdd0e4775d77ff217524c5e17af86df1e74e500a5b3"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000840)={0x84, &(0x7f0000000280)={0x20, 0x3}, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x5, 0x2}}, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xb, 0x2, "aeae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) 374.524977ms ago: executing program 2 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'lo\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'wg0\x00', 0x200}) syz_usb_connect(0x1, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x18, 0x6, 0x10, 0x40, [{{0x9, 0x4, 0xc7, 0xb, 0x0, 0x25, 0xb8, 0xd2}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0xf, &(0x7f0000001040)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x94, 0x8000}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 235.887816ms ago: executing program 3 (id=1257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'pim6reg\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x400e}}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x4005c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x30, 0xf, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @generic, @nested={0x14, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @generic="c3fecbc0"]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x20000085) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) statx(r5, &(0x7f0000000040)='./file0\x00', 0x6000, 0x80, &(0x7f0000000080)) 148.077681ms ago: executing program 0 (id=1258): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48080, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000013c0)=0x7f) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x2000009, 0x255, 0x1000009, 0xfffffffb, 0xa, "972d595029c59b1506000000000000004c8672"}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x3c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) syz_open_procfs(r3, &(0x7f00000002c0)='maps\x00') ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0xd, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3ff87d5812ff010000000000000f35000000b50000000200", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff070008000100e4162e43ac61b7ad3300e8ffffffffffffff00", [0x6, 0xfffffdfffffffffe]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c01, r0) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x80800) 102.109983ms ago: executing program 3 (id=1259): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32], 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 60.567056ms ago: executing program 0 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="1d"}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc0000, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 0s ago: executing program 0 (id=1261): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x9, 0x4e23, 0x8, 0xa, 0xa0, 0xc0, 0x2, 0x0, r4}, {0x2, 0xfffffffffffffffc, 0x1000, 0x74, 0x80000000008, 0x1, 0x8000000000000000, 0x9}, {0x0, 0x6, 0xc3, 0x5}, 0xfffffff9, 0x6e6bc0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x3507, 0x0, 0x3, 0x1, 0xf80, 0x80000, 0xdaf1}}, 0xe8) sendto$inet6(r1, 0x0, 0x0, 0x20004015, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0xa80}, 0x1c) r5 = fcntl$dupfd(r1, 0x406, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT=r7]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001600)=ANY=[], 0x2c}}, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x38) sendmsg$IPSET_CMD_DEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000a06010200000000000000000700000434000880100007800a001100ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040005) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x54}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xad, 0xff, 0x9, 0x4, 0xf68, 0x9, 0x401, 0x0, 0x8, 0xea59, 0x0, 0x7, 0x3, 0xcfb, 0x919, 0x5]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc1) close(0x3) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)=ANY=[@ANYRES8=r5], 0x0) kernel console output (not intermixed with test programs): o=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.906574][ T2387] FAULT_INJECTION: forcing a failure. [ 100.906574][ T2387] name failslab, interval 1, probability 0, space 0, times 0 [ 100.919231][ T2387] CPU: 0 UID: 0 PID: 2387 Comm: syz.0.646 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 100.919263][ T2387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 100.919275][ T2387] Call Trace: [ 100.919280][ T2387] [ 100.919286][ T2387] __dump_stack+0x21/0x30 [ 100.919305][ T2387] dump_stack_lvl+0x140/0x1c0 [ 100.919317][ T2387] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.919333][ T2387] dump_stack+0x19/0x20 [ 100.919345][ T2387] should_fail_ex+0x3d7/0x530 [ 100.919356][ T2387] should_failslab+0xac/0x100 [ 100.919371][ T2387] kmem_cache_alloc_noprof+0x42/0x410 [ 100.919383][ T2387] ? fuse_request_alloc+0x43/0x1f0 [ 100.919396][ T2387] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 100.919413][ T2387] fuse_request_alloc+0x43/0x1f0 [ 100.919424][ T2387] ? fuse_get_req+0x440/0xaf0 [ 100.919437][ T2387] fuse_get_req+0x459/0xaf0 [ 100.919448][ T2387] ? fuse_alloc_forget+0x5b/0xf0 [ 100.919462][ T2387] ? fuse_request_alloc+0x1f0/0x1f0 [ 100.919475][ T2387] ? __cfi_autoremove_wake_function+0x10/0x10 [ 100.919491][ T2387] __fuse_simple_request+0x293/0x1b10 [ 100.919505][ T2387] ? __cfi___fuse_simple_request+0x10/0x10 [ 100.919517][ T2387] ? stack_depot_save+0x12/0x20 [ 100.919529][ T2387] ? kasan_save_alloc_info+0x40/0x50 [ 100.919539][ T2387] ? __kasan_kmalloc+0x96/0xb0 [ 100.919552][ T2387] ? __kmalloc_cache_noprof+0x23c/0x470 [ 100.919565][ T2387] ? fuse_alloc_forget+0x5b/0xf0 [ 100.919578][ T2387] fuse_lookup_name+0x337/0xa60 [ 100.919592][ T2387] ? __kasan_check_write+0x18/0x20 [ 100.919604][ T2387] ? __cfi_fuse_lookup_name+0x10/0x10 [ 100.919619][ T2387] ? mutex_lock+0x97/0x1d0 [ 100.919629][ T2387] ? __cfi_mutex_lock+0x10/0x10 [ 100.919639][ T2387] ? __kernel_text_address+0x11/0x40 [ 100.919651][ T2387] fuse_lookup+0x3e8/0x1ba0 [ 100.919661][ T2387] ? __cfi_fuse_lookup+0x10/0x10 [ 100.919671][ T2387] ? fuse_dentry_init+0x5f/0x130 [ 100.919684][ T2387] ? __d_alloc+0x4ab/0x8e0 [ 100.919695][ T2387] ? d_alloc+0x4c/0x1c0 [ 100.919704][ T2387] ? lookup_one_qstr_excl+0xcf/0x280 [ 100.919721][ T2387] ? kasan_save_alloc_info+0x40/0x50 [ 100.919731][ T2387] ? __kasan_kmalloc+0x96/0xb0 [ 100.919745][ T2387] ? __kmalloc_cache_noprof+0x23c/0x470 [ 100.919757][ T2387] ? __kasan_slab_alloc+0x73/0x90 [ 100.919777][ T2387] ? fuse_dentry_init+0x5f/0x130 [ 100.919798][ T2387] ? __kasan_check_write+0x18/0x20 [ 100.919816][ T2387] ? _raw_spin_lock+0x92/0x120 [ 100.919835][ T2387] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.919848][ T2387] ? __d_alloc+0x522/0x8e0 [ 100.919859][ T2387] ? d_alloc+0x174/0x1c0 [ 100.919869][ T2387] lookup_one_qstr_excl+0x12c/0x280 [ 100.919883][ T2387] do_unlinkat+0x1e1/0x5a0 [ 100.919892][ T2387] ? __cfi_do_unlinkat+0x10/0x10 [ 100.919902][ T2387] ? getname_flags+0x208/0x700 [ 100.919915][ T2387] __x64_sys_unlinkat+0xda/0xf0 [ 100.919925][ T2387] x64_sys_call+0x2974/0x2ee0 [ 100.919938][ T2387] do_syscall_64+0x57/0xf0 [ 100.919951][ T2387] ? clear_bhb_loop+0x50/0xa0 [ 100.919966][ T2387] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.919980][ T2387] RIP: 0033:0x7f21cf99bf79 [ 100.919990][ T2387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.919999][ T2387] RSP: 002b:00007f21d080d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 100.920010][ T2387] RAX: ffffffffffffffda RBX: 00007f21cfc15fa0 RCX: 00007f21cf99bf79 [ 100.920018][ T2387] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 100.920025][ T2387] RBP: 00007f21d080d090 R08: 0000000000000000 R09: 0000000000000000 [ 100.920031][ T2387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.920038][ T2387] R13: 00007f21cfc16038 R14: 00007f21cfc15fa0 R15: 00007ffd29ef2f08 [ 100.920046][ T2387] [ 101.344710][ T2395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.353262][ T2395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.392903][ T2406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.401436][ T2406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.410367][ T36] audit: type=1400 audit(1770748973.802:676): avc: denied { lock } for pid=2405 comm="syz.3.652" path="socket:[17176]" dev="sockfs" ino=17176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 101.444510][ T2408] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 101.492782][ T31] usb 3-1: USB disconnect, device number 59 [ 101.952349][ T2423] overlayfs: failed to clone upperpath [ 101.982277][ T31] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 102.133409][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 102.144364][ T31] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 102.146548][ T2440] FAULT_INJECTION: forcing a failure. [ 102.146548][ T2440] name failslab, interval 1, probability 0, space 0, times 0 [ 102.153440][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.166626][ T2440] CPU: 0 UID: 0 PID: 2440 Comm: syz.3.663 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 102.166664][ T2440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 102.166675][ T2440] Call Trace: [ 102.166682][ T2440] [ 102.166689][ T2440] __dump_stack+0x21/0x30 [ 102.166716][ T2440] dump_stack_lvl+0x140/0x1c0 [ 102.166735][ T2440] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.166757][ T2440] dump_stack+0x19/0x20 [ 102.166775][ T2440] should_fail_ex+0x3d7/0x530 [ 102.166794][ T2440] should_failslab+0xac/0x100 [ 102.166816][ T2440] __kmalloc_cache_noprof+0x41/0x470 [ 102.166836][ T2440] ? fuse_alloc_inode+0x107/0x2c0 [ 102.166861][ T2440] ? __cfi_fuse_alloc_inode+0x10/0x10 [ 102.166884][ T2440] fuse_alloc_inode+0x107/0x2c0 [ 102.166906][ T2440] ? alloc_inode+0x63/0x270 [ 102.166927][ T2440] ? __cfi_fuse_inode_eq+0x10/0x10 [ 102.166949][ T2440] ? __cfi_fuse_alloc_inode+0x10/0x10 [ 102.166971][ T2440] alloc_inode+0x7a/0x270 [ 102.166992][ T2440] ? __cfi_fuse_inode_set+0x10/0x10 [ 102.167013][ T2440] ? __cfi_fuse_inode_eq+0x10/0x10 [ 102.167034][ T2440] iget5_locked+0x53/0xb0 [ 102.167055][ T2440] ? __cfi_fuse_inode_set+0x10/0x10 [ 102.167083][ T2440] fuse_iget+0x3fe/0xc30 [ 102.167105][ T2440] ? __cfi_fuse_iget+0x10/0x10 [ 102.167127][ T2440] fuse_lookup_name+0x7f1/0xa60 [ 102.167151][ T2440] ? __cfi_fuse_lookup_name+0x10/0x10 [ 102.167176][ T2440] ? mutex_lock+0x97/0x1d0 [ 102.167193][ T2440] ? __cfi_mutex_lock+0x10/0x10 [ 102.167210][ T2440] ? __kernel_text_address+0x11/0x40 [ 102.167232][ T2440] fuse_lookup+0x3e8/0x1ba0 [ 102.167249][ T2440] ? __cfi_fuse_lookup+0x10/0x10 [ 102.167266][ T2440] ? fuse_dentry_init+0x5f/0x130 [ 102.167288][ T2440] ? __d_alloc+0x4ab/0x8e0 [ 102.167305][ T2440] ? d_alloc+0x4c/0x1c0 [ 102.167322][ T2440] ? lookup_one_qstr_excl+0xcf/0x280 [ 102.167351][ T2440] ? kasan_save_alloc_info+0x40/0x50 [ 102.167368][ T2440] ? __kasan_kmalloc+0x96/0xb0 [ 102.167390][ T2440] ? __kmalloc_cache_noprof+0x23c/0x470 [ 102.167410][ T2440] ? __kasan_slab_alloc+0x73/0x90 [ 102.167431][ T2440] ? fuse_dentry_init+0x5f/0x130 [ 102.167453][ T2440] ? __kasan_check_write+0x18/0x20 [ 102.167472][ T2440] ? _raw_spin_lock+0x92/0x120 [ 102.167493][ T2440] ? __cfi__raw_spin_lock+0x10/0x10 [ 102.167514][ T2440] ? __d_alloc+0x522/0x8e0 [ 102.167533][ T2440] ? d_alloc+0x174/0x1c0 [ 102.167550][ T2440] lookup_one_qstr_excl+0x12c/0x280 [ 102.167571][ T2440] do_unlinkat+0x1e1/0x5a0 [ 102.167595][ T2440] ? __cfi_do_unlinkat+0x10/0x10 [ 102.167612][ T2440] ? getname_flags+0x208/0x700 [ 102.167633][ T2440] __x64_sys_unlinkat+0xda/0xf0 [ 102.167656][ T2440] x64_sys_call+0x2974/0x2ee0 [ 102.167678][ T2440] do_syscall_64+0x57/0xf0 [ 102.167700][ T2440] ? clear_bhb_loop+0x50/0xa0 [ 102.167723][ T2440] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.167745][ T2440] RIP: 0033:0x7f5dbe39bf79 [ 102.167759][ T2440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.167773][ T2440] RSP: 002b:00007f5dbf21a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 102.167792][ T2440] RAX: ffffffffffffffda RBX: 00007f5dbe615fa0 RCX: 00007f5dbe39bf79 [ 102.167805][ T2440] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 102.167817][ T2440] RBP: 00007f5dbf21a090 R08: 0000000000000000 R09: 0000000000000000 [ 102.167829][ T2440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.167839][ T2440] R13: 00007f5dbe616038 R14: 00007f5dbe615fa0 R15: 00007ffe842c8d58 [ 102.167854][ T2440] [ 102.495495][ T2444] overlay: Unknown parameter '' [ 102.505475][ T31] usb 1-1: config 0 descriptor?? [ 102.530878][ T2415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 102.580876][ T2454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.590140][ T2454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.853881][ T2456] fuse: Unknown parameter 'vxfs' [ 102.943558][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 102.943574][ T36] audit: type=1400 audit(1770748975.342:682): avc: denied { bpf } for pid=2414 comm="syz.0.655" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 102.971284][ T31] a4tech 0003:09DA:001A.0013: item fetching failed at offset 1/5 [ 102.979297][ T31] a4tech 0003:09DA:001A.0013: parse failed [ 102.985164][ T31] a4tech 0003:09DA:001A.0013: probe with driver a4tech failed with error -22 [ 103.068144][ T2475] 9pnet_fd: Insufficient options for proto=fd [ 103.181013][ T2415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.190047][ T2415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.199089][ T330] usb 1-1: USB disconnect, device number 43 [ 103.367183][ T36] audit: type=1400 audit(1770748975.762:683): avc: denied { watch } for pid=2487 comm="syz.3.679" path="/154/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 103.402220][ T2491] tipc: Enabling of bearer rejected, failed to enable media [ 103.422456][ T31] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 103.448466][ T36] audit: type=1400 audit(1770748975.842:684): avc: denied { watch_reads } for pid=2494 comm="syz.3.681" path="/156/file0" dev="tmpfs" ino=889 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.449048][ T2495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.480321][ T2495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.573393][ T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 103.582539][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.591014][ T31] usb 3-1: config 0 descriptor?? [ 103.666229][ T36] audit: type=1326 audit(1770748976.062:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.689513][ T36] audit: type=1326 audit(1770748976.062:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.712839][ T36] audit: type=1326 audit(1770748976.062:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.742649][ T36] audit: type=1326 audit(1770748976.062:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.765960][ T36] audit: type=1326 audit(1770748976.062:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.789182][ T36] audit: type=1326 audit(1770748976.062:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.812585][ T36] audit: type=1326 audit(1770748976.062:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2501 comm="syz.1.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f665b99bf79 code=0x7ffc0000 [ 103.972291][ T412] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 104.122897][ T412] usb 1-1: Using ep0 maxpacket: 16 [ 104.131299][ T412] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.139422][ T412] usb 1-1: config 0 has no interface number 0 [ 104.145699][ T412] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.156610][ T412] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.166398][ T412] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 104.175720][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.184740][ T412] usb 1-1: config 0 descriptor?? [ 104.594394][ T412] holtek_mouse 0003:04D9:A081.0014: item fetching failed at offset 5/8 [ 104.602894][ T412] holtek_mouse 0003:04D9:A081.0014: hid parse failed: -22 [ 104.610061][ T412] holtek_mouse 0003:04D9:A081.0014: probe with driver holtek_mouse failed with error -22 [ 104.820269][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.829479][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.843173][ T672] usb 1-1: USB disconnect, device number 44 [ 106.138045][ T31] usb 3-1: Cannot set autoneg [ 106.144907][ T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 106.159743][ T31] usb 3-1: USB disconnect, device number 60 [ 106.168427][ T2575] rust_binder: Write failure EFAULT in pid:458 [ 106.189074][ T2582] veth0_virt_wifi: entered allmulticast mode [ 106.202074][ T2582] veth0_virt_wifi: left allmulticast mode [ 106.492293][ T31] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 106.653377][ T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.661396][ T31] usb 3-1: config 0 has no interface number 0 [ 106.667520][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.678402][ T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.688159][ T31] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 106.697232][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.705698][ T31] usb 3-1: config 0 descriptor?? [ 107.113806][ T2580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.122467][ T2580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.132597][ T31] prodikeys 0003:041E:2801.0015: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 107.144433][ T31] hid_prodikeys: hid-prodikeys: failed to find output report [ 107.144433][ T31] [ 107.322284][ T412] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 107.332602][ T2580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.341134][ T2580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.352004][ T9] usb 3-1: USB disconnect, device number 61 [ 107.452629][ T412] usb 1-1: device descriptor read/64, error -71 [ 107.692304][ T412] usb 1-1: device descriptor read/64, error -71 [ 107.782287][ T9] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 107.932388][ T412] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 107.941008][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 107.949274][ T9] usb 3-1: config 0 has no interface number 0 [ 107.955452][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 107.964692][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 107.974100][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.982502][ T9] usb 3-1: Product: syz [ 107.986931][ T9] usb 3-1: Manufacturer: syz [ 107.991538][ T9] usb 3-1: SerialNumber: syz [ 107.997118][ T9] usb 3-1: config 0 descriptor?? [ 108.005098][ T2639] netlink: 104 bytes leftover after parsing attributes in process `syz.1.726'. [ 108.092234][ T412] usb 1-1: device descriptor read/64, error -71 [ 108.332222][ T412] usb 1-1: device descriptor read/64, error -71 [ 108.442384][ T412] usb usb1-port1: attempt power cycle [ 108.607808][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 108.620345][ T9] usb 3-1: USB disconnect, device number 62 [ 108.749044][ T2646] cgroup: fork rejected by pids controller in /syz3 [ 108.749550][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 108.749565][ T36] audit: type=1400 audit(1770748981.142:720): avc: denied { create } for pid=2647 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 108.781792][ T36] audit: type=1400 audit(1770748981.172:721): avc: denied { accept } for pid=2644 comm="syz.3.728" path="socket:[17934]" dev="sockfs" ino=17934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.811834][ T412] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 108.843960][ T412] usb 1-1: device descriptor read/8, error -71 [ 108.885811][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'. [ 108.903705][ T31] usb 4-1: USB disconnect, device number 38 [ 108.975453][ T412] usb 1-1: device descriptor read/8, error -71 [ 108.992271][ T36] audit: type=1400 audit(1770748981.382:722): avc: denied { mounton } for pid=2665 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 109.019739][ T293] bridge_slave_1: left allmulticast mode [ 109.025501][ T293] bridge_slave_1: left promiscuous mode [ 109.031159][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.038867][ T293] bridge_slave_0: left allmulticast mode [ 109.044621][ T293] bridge_slave_0: left promiscuous mode [ 109.050395][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.151827][ T36] audit: type=1400 audit(1770748981.542:723): avc: denied { shutdown } for pid=2669 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.171007][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.178588][ T2665] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.185952][ T2665] bridge_slave_0: entered allmulticast mode [ 109.192538][ T2665] bridge_slave_0: entered promiscuous mode [ 109.198987][ T293] tipc: Left network mode [ 109.199150][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.210385][ T2665] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.217566][ T2665] bridge_slave_1: entered allmulticast mode [ 109.223559][ T412] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 109.231588][ T2665] bridge_slave_1: entered promiscuous mode [ 109.238534][ T293] veth1_macvtap: left promiscuous mode [ 109.244251][ T293] veth0_vlan: left promiscuous mode [ 109.248348][ T2680] devpts: called with bogus options [ 109.253453][ T412] usb 1-1: device descriptor read/8, error -71 [ 109.369111][ T36] audit: type=1400 audit(1770748981.762:724): avc: denied { ioctl } for pid=2679 comm="syz.1.740" path="socket:[19126]" dev="sockfs" ino=19126 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.400408][ T2665] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.407543][ T2665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.414943][ T2665] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.421974][ T2665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.430454][ T412] usb 1-1: device descriptor read/8, error -71 [ 109.453780][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.461127][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.479844][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.486928][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.494720][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.501815][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.520293][ T2665] veth0_vlan: entered promiscuous mode [ 109.530904][ T2665] veth1_macvtap: entered promiscuous mode [ 109.549373][ T36] audit: type=1400 audit(1770748981.942:725): avc: denied { mounton } for pid=2665 comm="syz-executor" path="/root/syzkaller.LdJg6D/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 109.575059][ T412] usb usb1-port1: unable to enumerate USB device [ 109.576342][ T36] audit: type=1400 audit(1770748981.942:726): avc: denied { mounton } for pid=2665 comm="syz-executor" path="/root/syzkaller.LdJg6D/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 109.609282][ T36] audit: type=1400 audit(1770748981.972:727): avc: denied { mounton } for pid=2665 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 109.637433][ T2696] fuse: Bad value for 'user_id' [ 109.642593][ T2696] fuse: Bad value for 'user_id' [ 109.648168][ T2696] netlink: 393 bytes leftover after parsing attributes in process `syz.3.742'. [ 109.732298][ T31] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 109.862287][ T31] usb 3-1: device descriptor read/64, error -71 [ 109.929721][ T36] audit: type=1400 audit(1770748982.323:728): avc: denied { wake_alarm } for pid=2711 comm="syz.1.747" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.002268][ T672] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 110.044058][ T2715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 110.102311][ T31] usb 3-1: device descriptor read/64, error -71 [ 110.132290][ T672] usb 4-1: device descriptor read/64, error -71 [ 110.342248][ T31] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 110.372447][ T672] usb 4-1: device descriptor read/64, error -71 [ 110.472240][ T31] usb 3-1: device descriptor read/64, error -71 [ 110.612292][ T672] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 110.712267][ T31] usb 3-1: device descriptor read/64, error -71 [ 110.742234][ T672] usb 4-1: device descriptor read/64, error -71 [ 110.808497][ T36] audit: type=1400 audit(1770748983.203:729): avc: denied { create } for pid=2719 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.828208][ T31] usb usb3-port1: attempt power cycle [ 110.992252][ T672] usb 4-1: device descriptor read/64, error -71 [ 111.102471][ T672] usb usb4-port1: attempt power cycle [ 111.172280][ T31] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 111.193216][ T31] usb 3-1: device descriptor read/8, error -71 [ 111.323330][ T31] usb 3-1: device descriptor read/8, error -71 [ 111.352359][ T2729] overlayfs: failed to clone upperpath [ 111.442249][ T672] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 111.463278][ T672] usb 4-1: device descriptor read/8, error -71 [ 111.562259][ T31] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 111.583306][ T31] usb 3-1: device descriptor read/8, error -71 [ 111.593478][ T672] usb 4-1: device descriptor read/8, error -71 [ 111.713366][ T31] usb 3-1: device descriptor read/8, error -71 [ 111.822383][ T31] usb usb3-port1: unable to enumerate USB device [ 111.832314][ T672] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 111.853332][ T672] usb 4-1: device descriptor read/8, error -71 [ 111.939455][ T2751] can: request_module (can-proto-5) failed. [ 111.993455][ T672] usb 4-1: device descriptor read/8, error -71 [ 112.102332][ T672] usb usb4-port1: unable to enumerate USB device [ 112.507307][ T2763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.765'. [ 112.878182][ T2777] syzkaller0: entered promiscuous mode [ 112.883818][ T2777] syzkaller0: entered allmulticast mode [ 112.892355][ T389] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 113.042265][ T389] usb 3-1: Using ep0 maxpacket: 16 [ 113.048655][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.059699][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.069480][ T389] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 113.078574][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.087212][ T389] usb 3-1: config 0 descriptor?? [ 113.172790][ T412] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 113.203324][ T2807] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 113.224800][ T2809] netlink: 'syz.0.781': attribute type 27 has an invalid length. [ 113.322600][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 113.328988][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.340352][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.350279][ T412] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.363708][ T412] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.373155][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.381936][ T412] usb 4-1: config 0 descriptor?? [ 113.544539][ T389] usbhid 3-1:0.0: can't add hid device: -71 [ 113.550564][ T389] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.552226][ T387] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 113.559758][ T389] usb 3-1: USB disconnect, device number 67 [ 113.713299][ T387] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 113.723517][ T387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.732596][ T387] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.748763][ T387] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.757871][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.765952][ T387] usb 1-1: Product: syz [ 113.770194][ T387] usb 1-1: Manufacturer: syz [ 113.774979][ T387] usb 1-1: SerialNumber: syz [ 113.791075][ T412] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 113.799241][ T412] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 113.810840][ T412] microsoft 0003:045E:07DA.0016: no inputs found [ 113.817778][ T412] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 113.935830][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 113.935845][ T36] audit: type=1400 audit(1770748986.333:731): avc: denied { connect } for pid=2818 comm="syz.1.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.983714][ T387] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 113.990564][ T387] cdc_ncm 1-1:1.0: bind() failure [ 113.993883][ T389] usb 4-1: USB disconnect, device number 43 [ 113.999554][ T387] usb 1-1: USB disconnect, device number 49 [ 114.362317][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 114.495498][ T2832] 9pnet_fd: p9_fd_create_tcp (2832): problem binding to privport [ 114.512532][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 114.518840][ T31] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.527082][ T31] usb 3-1: config 0 has no interface number 0 [ 114.533270][ T31] usb 3-1: config 0 interface 184 has no altsetting 0 [ 114.541677][ T31] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.550809][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.558870][ T31] usb 3-1: Product: syz [ 114.563084][ T31] usb 3-1: Manufacturer: syz [ 114.567695][ T31] usb 3-1: SerialNumber: syz [ 114.573322][ T31] usb 3-1: config 0 descriptor?? [ 114.579603][ T31] smsc75xx v1.0.0 [ 114.612981][ T36] audit: type=1326 audit(1770748987.013:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2841 comm="syz.3.792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3175b9bf79 code=0x0 [ 114.742393][ T387] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 114.892491][ T387] usb 1-1: Using ep0 maxpacket: 8 [ 114.898969][ T387] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.907642][ T387] usb 1-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 114.920654][ T387] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.934435][ T387] usb 1-1: string descriptor 0 read error: -22 [ 114.940639][ T387] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.949702][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.163251][ T412] usb 1-1: USB disconnect, device number 50 [ 115.181327][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 115.192320][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.574867][ T36] audit: type=1400 audit(1770748987.973:733): avc: denied { ioctl } for pid=2848 comm="syz.3.795" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 115.602748][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 115.613803][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 115.623484][ T31] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 115.633103][ T31] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 115.642456][ T31] usb 3-1: USB disconnect, device number 68 [ 115.674129][ T2855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.797'. [ 115.695335][ T2855] netlink: 'syz.0.797': attribute type 27 has an invalid length. [ 115.705527][ T2855] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.722259][ T412] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 115.882241][ T412] usb 4-1: Using ep0 maxpacket: 8 [ 115.888602][ T412] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 115.898972][ T412] usb 4-1: config 2 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.911993][ T412] usb 4-1: config 2 interface 0 has no altsetting 0 [ 115.920213][ T412] usb 4-1: New USB device found, idVendor=04e2, idProduct=7e12, bcdDevice=ca.a8 [ 115.929412][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.937533][ T412] usb 4-1: Product: syz [ 115.941712][ T412] usb 4-1: Manufacturer: syz [ 115.946392][ T412] usb 4-1: SerialNumber: syz [ 115.972251][ T672] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 116.072801][ T36] audit: type=1400 audit(1770748988.473:734): avc: denied { bind } for pid=2860 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.073166][ T2861] netlink: 'syz.1.800': attribute type 10 has an invalid length. [ 116.121164][ T2863] kernel profiling enabled (shift: 63) [ 116.126746][ T2863] profiling shift: 63 too large [ 116.132972][ T36] audit: type=1400 audit(1770748988.533:735): avc: denied { setopt } for pid=2862 comm="syz.2.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 116.152719][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.159213][ T412] usb 4-1: USB disconnect, device number 44 [ 116.170089][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.180053][ T672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.193032][ T672] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.202259][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.211187][ T672] usb 1-1: config 0 descriptor?? [ 116.254526][ T36] audit: type=1400 audit(1770748988.653:736): avc: denied { lock } for pid=2871 comm="syz.1.804" path="socket:[19862]" dev="sockfs" ino=19862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.675491][ T672] usbhid 1-1:0.0: can't add hid device: -71 [ 116.685964][ T672] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.696770][ T672] usb 1-1: USB disconnect, device number 51 [ 116.942262][ T389] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 116.992226][ T672] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 117.093444][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.104419][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.115032][ T389] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.124183][ T389] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 117.133345][ T389] usb 4-1: Manufacturer: syz [ 117.138505][ T389] usb 4-1: config 0 descriptor?? [ 117.152264][ T672] usb 1-1: Using ep0 maxpacket: 16 [ 117.158422][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.169342][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.179196][ T672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.192016][ T672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.201082][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.209376][ T31] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 117.217671][ T672] usb 1-1: config 0 descriptor?? [ 117.372233][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 117.379205][ T31] usb 3-1: config 16 has an invalid interface number: 60 but max is 0 [ 117.387552][ T31] usb 3-1: config 16 has no interface number 0 [ 117.393833][ T31] usb 3-1: config 16 interface 60 has no altsetting 0 [ 117.401955][ T31] usb 3-1: New USB device found, idVendor=045e, idProduct=0475, bcdDevice=77.d1 [ 117.411060][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.419099][ T31] usb 3-1: Product: syz [ 117.423338][ T31] usb 3-1: Manufacturer: syz [ 117.424172][ T2879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.427950][ T31] usb 3-1: SerialNumber: syz [ 117.437321][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.443110][ T2879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.450257][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.665880][ T31] usb 3-1: USB disconnect, device number 69 [ 117.672927][ T672] usbhid 1-1:0.0: can't add hid device: -71 [ 117.678884][ T672] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 117.688365][ T672] usb 1-1: USB disconnect, device number 52 [ 117.770988][ T389] uclogic 0003:256C:006D.0017: failed retrieving Huion firmware version: -71 [ 117.779937][ T389] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 117.787506][ T389] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71 [ 117.797725][ T389] usb 4-1: USB disconnect, device number 45 [ 118.151210][ T36] audit: type=1400 audit(1770748990.543:737): avc: denied { read } for pid=2896 comm="syz.1.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.182523][ T36] audit: type=1400 audit(1770748990.573:738): avc: denied { create } for pid=2898 comm="syz.2.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.422321][ T412] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 118.584798][ T412] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 118.594097][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.602084][ T412] usb 3-1: Product: syz [ 118.606253][ T412] usb 3-1: Manufacturer: syz [ 118.610842][ T412] usb 3-1: SerialNumber: syz [ 118.615839][ T36] audit: type=1400 audit(1770748991.013:739): avc: denied { shutdown } for pid=2904 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.619689][ T412] usb 3-1: config 0 descriptor?? [ 118.641746][ T412] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 118.649638][ T412] usb 3-1: Detected FT4232HP [ 118.841712][ T412] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 118.849659][ T412] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 118.873945][ T672] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 119.033446][ T672] usb 4-1: config 1 has an invalid interface number: 188 but max is 0 [ 119.041662][ T672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.050239][ T412] usb 3-1: USB disconnect, device number 70 [ 119.051786][ T672] usb 4-1: config 1 has no interface number 0 [ 119.062279][ T412] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 119.064081][ T672] usb 4-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.075440][ T412] ftdi_sio 3-1:0.0: device disconnected [ 119.086339][ T672] usb 4-1: config 1 interface 188 has no altsetting 0 [ 119.100141][ T672] usb 4-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 119.109227][ T672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.117286][ T672] usb 4-1: Product: syz [ 119.121440][ T672] usb 4-1: Manufacturer: syz [ 119.126084][ T672] usb 4-1: SerialNumber: syz [ 119.132531][ T672] usb 4-1: cannot find UAC_HEADER [ 119.139100][ T672] snd-usb-audio 4-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 119.153320][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 119.633875][ T2938] rust_binder: Write failure EFAULT in pid:511 [ 119.685959][ T2941] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 119.692201][ T2941] rust_binder: Read failure Err(EFAULT) in pid:542 [ 120.051221][ T36] audit: type=1326 audit(1770748992.443:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2933 comm="syz.1.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665b99bf79 code=0x7fc00000 [ 120.251273][ T2962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2962 comm=syz.1.832 [ 120.680243][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 120.722271][ T412] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 120.753746][ T36] audit: type=1400 audit(1770748993.153:741): avc: denied { append } for pid=2980 comm="syz.0.839" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.778056][ T36] audit: type=1400 audit(1770748993.153:742): avc: denied { ioctl } for pid=2980 comm="syz.0.839" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 120.892238][ T412] usb 3-1: Using ep0 maxpacket: 32 [ 120.898588][ T412] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.909661][ T412] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.920671][ T412] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 120.929782][ T412] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 120.938140][ T412] usb 3-1: Product: syz [ 120.942322][ T412] usb 3-1: Manufacturer: syz [ 120.949127][ T412] hub 3-1:4.0: USB hub found [ 121.153931][ T412] hub 3-1:4.0: 2 ports detected [ 121.216537][ T31] usb 4-1: USB disconnect, device number 46 [ 121.362844][ T2969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.371578][ T2969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.812230][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 121.972229][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 121.978438][ T31] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 121.986916][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.997192][ T31] usb 4-1: config 0 has no interface number 0 [ 122.003330][ T31] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 122.015098][ T31] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 122.026814][ T31] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 122.037728][ T31] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 122.047580][ T31] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.060798][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 122.069969][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.078915][ T31] usb 4-1: config 0 descriptor?? [ 122.083935][ T672] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 122.091885][ T3020] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 122.233302][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.243509][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.253138][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.263270][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.272988][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.283104][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.292758][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.302896][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.312418][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.322531][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.331407][ T672] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 0.00 [ 122.340538][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.453442][ T412] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 122.459919][ T412] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 122.522247][ T3038] netlink: 'syz.1.858': attribute type 29 has an invalid length. [ 122.522756][ T3039] fuseblk: Bad value for 'user_id' [ 122.530884][ T3038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 122.535348][ T3039] fuseblk: Bad value for 'user_id' [ 122.545219][ T36] audit: type=1400 audit(1770748994.943:743): avc: denied { listen } for pid=3037 comm="syz.1.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 122.549650][ T3039] fuseblk: Bad value for 'user_id' [ 122.574802][ T3039] fuseblk: Bad value for 'user_id' [ 122.575070][ T3030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.589865][ T3030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.650393][ T3057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'. [ 122.665494][ T672] usb 1-1: string descriptor 0 read error: -71 [ 122.677423][ T672] usb 1-1: USB disconnect, device number 53 [ 123.185167][ T36] audit: type=1400 audit(1770748995.583:744): avc: denied { mounton } for pid=3070 comm="syz.0.867" path="/182/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 123.462236][ T672] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 123.505462][ T36] audit: type=1400 audit(1770748995.903:745): avc: denied { read } for pid=3093 comm="syz.2.874" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.528811][ T36] audit: type=1400 audit(1770748995.903:746): avc: denied { open } for pid=3093 comm="syz.2.874" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.552859][ T36] audit: type=1400 audit(1770748995.903:747): avc: denied { ioctl } for pid=3093 comm="syz.2.874" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.602356][ T412] usb 3-1: USB disconnect, device number 71 [ 123.633278][ T672] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.645627][ T672] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.658495][ T672] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.665175][ T672] usb 1-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 123.674359][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.682969][ T672] usb 1-1: config 0 descriptor?? [ 123.753824][ T3106] netlink: 'syz.2.878': attribute type 12 has an invalid length. [ 123.767446][ T36] audit: type=1400 audit(1770748996.163:748): avc: denied { create } for pid=3107 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 123.839984][ T36] audit: type=1400 audit(1770748996.233:749): avc: denied { listen } for pid=3125 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.152697][ T672] betop 0003:8380:1850.0018: item fetching failed at offset 0/2 [ 124.160543][ T672] betop 0003:8380:1850.0018: parse failed [ 124.166483][ T672] betop 0003:8380:1850.0018: probe with driver betop failed with error -22 [ 124.354203][ T672] usb 1-1: USB disconnect, device number 54 [ 124.579851][ T672] usb 4-1: USB disconnect, device number 47 [ 124.614003][ T3137] rust_binder: Write failure EFAULT in pid:535 [ 124.740556][ T3145] netlink: 1 bytes leftover after parsing attributes in process `syz.2.890'. [ 124.882817][ T672] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 125.033460][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.044424][ T672] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 125.053715][ T672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.062302][ T672] usb 4-1: config 0 descriptor?? [ 125.152263][ T412] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 125.303343][ T412] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.313854][ T412] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.322964][ T412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.330950][ T412] usb 1-1: SerialNumber: syz [ 125.338267][ T412] cdc_acm 1-1:1.0: skipping garbage [ 125.343756][ T412] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 125.471347][ T672] lenovo 0003:17EF:60A3.0019: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 125.538122][ T9] usb 1-1: USB disconnect, device number 55 [ 125.671365][ T387] usb 4-1: USB disconnect, device number 48 [ 125.762297][ T412] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 125.913553][ T412] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 125.921737][ T412] usb 3-1: config 0 has no interface number 0 [ 125.927987][ T412] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 125.938987][ T412] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.950380][ T412] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 125.959477][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.967483][ T412] usb 3-1: Product: syz [ 125.971647][ T412] usb 3-1: Manufacturer: syz [ 125.976360][ T412] usb 3-1: SerialNumber: syz [ 125.981417][ T412] usb 3-1: config 0 descriptor?? [ 125.986757][ T3158] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 125.994644][ T412] usb-storage 3-1:0.20: USB Mass Storage device detected [ 126.002642][ T412] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 126.105105][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 126.105123][ T36] audit: type=1400 audit(1770748998.503:751): avc: denied { create } for pid=3164 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 126.196507][ T412] scsi host1: usb-storage 3-1:0.20 [ 126.205476][ T36] audit: type=1400 audit(1770748998.593:752): avc: denied { watch watch_reads } for pid=3171 comm="syz.0.899" path="/190/file0" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.249152][ T36] audit: type=1400 audit(1770748998.643:753): avc: denied { mounton } for pid=3178 comm="syz.3.901" path="/21/file0" dev="incremental-fs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.281976][ T3181] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 126.395725][ T672] usb 3-1: USB disconnect, device number 72 [ 126.522257][ T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 126.612270][ T412] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 126.672225][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 126.678641][ T31] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 126.686868][ T31] usb 1-1: config 0 has no interface number 0 [ 126.693008][ T31] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 126.704193][ T31] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 126.714139][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=8202, bcdDevice=f4.55 [ 126.723196][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.732057][ T31] usb 1-1: config 0 descriptor?? [ 126.742003][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.148/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.762269][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 126.768597][ T412] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 126.777004][ T412] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 126.785693][ T412] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 126.796410][ T412] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 126.805516][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.813733][ T412] usb 4-1: Product: syz [ 126.817925][ T412] usb 4-1: Manufacturer: syz [ 126.822545][ T412] usb 4-1: SerialNumber: syz [ 126.827714][ T412] usb 4-1: config 0 descriptor?? [ 126.833795][ T412] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 126.938972][ T387] usb 1-1: USB disconnect, device number 56 [ 127.034060][ T3191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3191 comm=syz.1.905 [ 127.040137][ T3179] incfs: iterate_incfs_dir / -22 [ 127.051503][ T3179] incfs: iterate_incfs_dir / -22 [ 127.059197][ T9] usb 4-1: USB disconnect, device number 49 [ 127.182324][ T412] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 127.333285][ T412] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 127.344163][ T412] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.354428][ T412] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 127.367409][ T412] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 127.376492][ T412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.385278][ T412] usb 3-1: config 0 descriptor?? [ 127.712213][ T31] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 127.793932][ T3213] sit0: entered promiscuous mode [ 127.794736][ T412] wacom 0003:056A:00B2.001A: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 127.800335][ T3213] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 127.812485][ T412] wacom 0003:056A:00B2.001A: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.2-1/input0 [ 127.816123][ T3213] netlink: 'syz.3.913': attribute type 3 has an invalid length. [ 127.832425][ T412] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B2.001A/input/input27 [ 127.858408][ T36] audit: type=1400 audit(1770749000.253:754): avc: denied { write } for pid=3212 comm="syz.3.913" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 127.893380][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.904431][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 127.910226][ T3213] netlink: 'syz.3.913': attribute type 27 has an invalid length. [ 127.915720][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 127.926097][ T3213] sit0: left promiscuous mode [ 127.934864][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.954509][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.971496][ T3199] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.998477][ T31] usb 3-1: USB disconnect, device number 73 [ 128.097886][ T3218] overlayfs: failed to clone upperpath [ 128.097886][ T3219] overlayfs: failed to clone upperpath [ 128.110059][ T3218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 128.119332][ T3219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 128.146068][ T3223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.916'. [ 128.185607][ T389] usb 1-1: USB disconnect, device number 57 [ 128.202258][ T412] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 128.363487][ T412] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.371766][ T412] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.382196][ T412] usb 4-1: config 220 has no interface number 2 [ 128.388543][ T412] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.401915][ T412] usb 4-1: config 220 interface 0 has no altsetting 0 [ 128.408714][ T412] usb 4-1: config 220 interface 76 has no altsetting 0 [ 128.415706][ T412] usb 4-1: config 220 interface 1 has no altsetting 0 [ 128.423969][ T412] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.433268][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.441243][ T412] usb 4-1: Product: syz [ 128.445716][ T412] usb 4-1: Manufacturer: syz [ 128.450311][ T412] usb 4-1: SerialNumber: syz [ 128.562067][ T36] audit: type=1400 audit(1770749000.953:755): avc: denied { write } for pid=3226 comm="syz.2.917" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 128.659021][ T412] usb 4-1: selecting invalid altsetting 0 [ 128.664924][ T412] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 128.671380][ T412] usb 4-1: No valid video chain found. [ 128.684412][ T412] usb 4-1: USB disconnect, device number 50 [ 129.002290][ T387] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 129.153403][ T387] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.164496][ T387] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.179063][ T387] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.191563][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.200003][ T387] usb 1-1: Product: syz [ 129.204251][ T387] usb 1-1: Manufacturer: syz [ 129.208848][ T387] usb 1-1: SerialNumber: syz [ 129.284738][ T3242] netlink: 'syz.3.922': attribute type 58 has an invalid length. [ 129.292793][ T3242] netlink: 'syz.3.922': attribute type 58 has an invalid length. [ 129.300669][ T3242] netlink: 'syz.3.922': attribute type 58 has an invalid length. [ 129.308569][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.321004][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.333644][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.346090][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.358505][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.371140][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.383501][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.396064][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.408598][ T3242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3242 comm=syz.3.922 [ 129.415613][ T3232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.429539][ T3232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.438363][ T387] cdc_ncm 1-1:1.0: bind() failure [ 129.444188][ T387] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 129.450958][ T387] cdc_ncm 1-1:1.1: bind() failure [ 129.457006][ T387] usb 1-1: USB disconnect, device number 58 [ 129.552960][ T389] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 129.702270][ T389] usb 4-1: Using ep0 maxpacket: 8 [ 129.708567][ T389] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.716861][ T389] usb 4-1: config 179 has no interface number 0 [ 129.723157][ T330] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 129.731105][ T389] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.742752][ T389] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.754100][ T389] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.765291][ T389] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 129.776719][ T389] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.790593][ T389] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.799879][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.808743][ T3244] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 129.892228][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 129.898241][ T330] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.906585][ T330] usb 3-1: config 179 has no interface number 0 [ 129.912916][ T330] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 129.924204][ T330] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 129.935651][ T330] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.946954][ T330] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.957393][ T330] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.967317][ T36] audit: type=1400 audit(1770749002.353:756): avc: denied { getopt } for pid=3250 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.971028][ T330] usb 3-1: config 179 interface 65 has no altsetting 0 [ 129.997210][ T330] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 130.006332][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.019030][ T330] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input30 [ 130.192283][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 130.216311][ T3247] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 130.220098][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.225635][ T3247] netlink: 17 bytes leftover after parsing attributes in process `syz.2.923'. [ 130.232552][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.250803][ T330] usb 4-1: USB disconnect, device number 51 [ 130.251165][ T387] usb 3-1: USB disconnect, device number 74 [ 130.263751][ T387] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.322242][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.562290][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.585660][ T3258] futex_wake_op: syz.1.928 tries to shift op by 144; fix this program [ 130.611206][ T3266] veth1_to_hsr: entered promiscuous mode [ 130.617350][ T3266] veth1_to_hsr: left promiscuous mode [ 130.744211][ T3290] overlayfs: failed to resolve './file0': -2 [ 130.802233][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 130.828150][ T3305] >: renamed from veth0_vlan (while UP) [ 130.932256][ T9] usb 1-1: device descriptor read/64, error -71 [ 131.072243][ T389] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 131.092239][ T330] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 131.172258][ T9] usb 1-1: device descriptor read/64, error -71 [ 131.223482][ T389] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 131.231791][ T389] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 131.242142][ T389] usb 3-1: config 220 has no interface number 2 [ 131.248431][ T389] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 131.261588][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 131.266683][ T389] usb 3-1: config 220 interface 0 has no altsetting 0 [ 131.273530][ T389] usb 3-1: config 220 interface 76 has no altsetting 0 [ 131.280657][ T389] usb 3-1: config 220 interface 1 has no altsetting 0 [ 131.288060][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.292334][ T9] usb usb1-port1: attempt power cycle [ 131.299093][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.314262][ T330] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 131.323344][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.331728][ T389] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 131.340811][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.348884][ T389] usb 3-1: Product: syz [ 131.353420][ T330] usb 4-1: config 0 descriptor?? [ 131.358438][ T389] usb 3-1: Manufacturer: syz [ 131.363099][ T389] usb 3-1: SerialNumber: syz [ 131.461226][ T3327] netlink: 80 bytes leftover after parsing attributes in process `syz.1.943'. [ 131.478864][ T36] audit: type=1400 audit(1770749003.873:757): avc: denied { read } for pid=3328 comm="syz.1.944" path="socket:[21979]" dev="sockfs" ino=21979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.642266][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 131.663358][ T9] usb 1-1: device descriptor read/8, error -71 [ 131.770528][ T330] wacom 0003:056A:0059.001B: unbalanced collection at end of report description [ 131.779851][ T330] wacom 0003:056A:0059.001B: parse failed [ 131.785640][ T330] wacom 0003:056A:0059.001B: probe with driver wacom failed with error -22 [ 131.803294][ T9] usb 1-1: device descriptor read/8, error -71 [ 132.042244][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 132.063327][ T9] usb 1-1: device descriptor read/8, error -71 [ 132.193343][ T9] usb 1-1: device descriptor read/8, error -71 [ 132.302505][ T9] usb usb1-port1: unable to enumerate USB device [ 132.687699][ T3347] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 132.687791][ T36] audit: type=1400 audit(1770749005.083:758): avc: denied { accept } for pid=3346 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 132.698528][ T3347] netlink: 'syz.1.949': attribute type 21 has an invalid length. [ 132.722560][ T3347] netlink: 388 bytes leftover after parsing attributes in process `syz.1.949'. [ 132.980077][ T36] audit: type=1400 audit(1770749005.373:759): avc: denied { ioctl } for pid=3351 comm="syz.0.951" path="socket:[22102]" dev="sockfs" ino=22102 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.149490][ T3358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 133.173779][ T3360] syzkaller0: entered promiscuous mode [ 133.179315][ T3360] syzkaller0: entered allmulticast mode [ 133.432227][ T330] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 133.582210][ T330] usb 1-1: Using ep0 maxpacket: 16 [ 133.588757][ T330] usb 1-1: config 5 has an invalid interface number: 206 but max is 0 [ 133.597092][ T330] usb 1-1: config 5 has no interface number 0 [ 133.603219][ T330] usb 1-1: config 5 interface 206 has no altsetting 0 [ 133.611360][ T330] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=60.44 [ 133.620450][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.628476][ T330] usb 1-1: Product: syz [ 133.632747][ T330] usb 1-1: Manufacturer: syz [ 133.637355][ T330] usb 1-1: SerialNumber: syz [ 133.790597][ T389] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 133.797116][ T389] usb 3-1: No valid video chain found. [ 133.802651][ T389] usb 3-1: selecting invalid altsetting 0 [ 133.810924][ T389] usb 3-1: USB disconnect, device number 75 [ 133.844976][ T330] usb_ehset_test 1-1:5.206: probe with driver usb_ehset_test failed with error -32 [ 133.857492][ T330] usb 1-1: USB disconnect, device number 63 [ 133.866694][ T387] usb 4-1: USB disconnect, device number 52 [ 133.892569][ T3402] netlink: 'syz.1.963': attribute type 32 has an invalid length. [ 133.900398][ T3402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 134.102351][ T389] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 134.202260][ T387] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 134.232212][ T389] usb 3-1: device descriptor read/64, error -71 [ 134.352312][ T387] usb 4-1: Using ep0 maxpacket: 16 [ 134.358709][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.369634][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.379414][ T387] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 134.388485][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.397184][ T387] usb 4-1: config 0 descriptor?? [ 134.425356][ T3406] netlink: 172 bytes leftover after parsing attributes in process `syz.1.964'. [ 134.472241][ T389] usb 3-1: device descriptor read/64, error -71 [ 134.692322][ T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 134.712215][ T389] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 134.805977][ T387] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 134.842277][ T389] usb 3-1: device descriptor read/64, error -71 [ 134.843483][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.859604][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.869365][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.882189][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.891206][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.899828][ T9] usb 1-1: config 0 descriptor?? [ 135.009262][ T387] usb 4-1: USB disconnect, device number 53 [ 135.082358][ T389] usb 3-1: device descriptor read/64, error -71 [ 135.192360][ T389] usb usb3-port1: attempt power cycle [ 135.309222][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 135.315578][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 135.325854][ T9] usb 1-1: USB disconnect, device number 64 [ 135.532234][ T389] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 135.563407][ T389] usb 3-1: device descriptor read/8, error -71 [ 135.599091][ T36] audit: type=1400 audit(1770749007.993:760): avc: denied { sqpoll } for pid=3434 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.693227][ T389] usb 3-1: device descriptor read/8, error -71 [ 135.834869][ T3450] overlayfs: failed to resolve './bus': -2 [ 135.932234][ T389] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 135.953525][ T389] usb 3-1: device descriptor read/8, error -71 [ 136.082278][ T330] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 136.090786][ T389] usb 3-1: device descriptor read/8, error -71 [ 136.202678][ T389] usb usb3-port1: unable to enumerate USB device [ 136.233432][ T330] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 136.243800][ T330] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.252784][ T330] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 136.261833][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.271437][ T330] usb 1-1: config 0 descriptor?? [ 136.488224][ T36] audit: type=1400 audit(1770749008.883:761): avc: denied { validate_trans } for pid=3466 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 136.722246][ T330] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 136.873338][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.884386][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.894140][ T330] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 136.903408][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.911956][ T330] usb 4-1: config 0 descriptor?? [ 137.192235][ T389] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 137.319351][ T330] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x2 [ 137.326386][ T330] savu 0003:1E7D:2D5A.001D: unknown main item tag 0x0 [ 137.334138][ T330] savu 0003:1E7D:2D5A.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 137.353459][ T389] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.365157][ T389] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.376269][ T389] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 137.387552][ T389] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 137.396625][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.406003][ T3471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.524442][ T3467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.533162][ T3467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.535273][ T330] usb 1-1: USB disconnect, device number 65 [ 137.749670][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 137.779917][ T3503] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 137.787762][ T3503] netlink: 'syz.0.996': attribute type 2 has an invalid length. [ 137.791537][ T3505] overlayfs: missing 'lowerdir' [ 137.814780][ T389] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 137.827705][ T389] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input32 [ 137.843355][ T389] usb 3-1: USB disconnect, device number 80 [ 137.849318][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 138.052256][ T389] usb 4-1: USB disconnect, device number 54 [ 138.061381][ T36] audit: type=1400 audit(1770749010.453:762): avc: denied { listen } for pid=3520 comm="syz.3.1001" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.081965][ T36] audit: type=1400 audit(1770749010.473:763): avc: denied { map } for pid=3522 comm="syz.3.1002" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.109266][ T36] audit: type=1400 audit(1770749010.503:764): avc: denied { call } for pid=3522 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.109290][ T3524] rust_binder: Error in use_page_slow: ESRCH [ 138.109305][ T3524] rust_binder: use_range failure ESRCH [ 138.134403][ T3524] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 138.139879][ T3524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 138.147858][ T3524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:133 [ 138.358427][ T36] audit: type=1400 audit(1770749010.753:765): avc: denied { write } for pid=3529 comm="syz.0.1005" name="file0" dev="tmpfs" ino=1176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 138.390059][ T36] audit: type=1400 audit(1770749010.753:766): avc: denied { create } for pid=3531 comm="syz.2.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 138.592232][ T389] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 138.722223][ T389] usb 3-1: device descriptor read/64, error -71 [ 138.923671][ T3543] selinux_netlink_send: 53 callbacks suppressed [ 138.923689][ T3543] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1 sclass=netlink_xfrm_socket pid=3543 comm=syz.3.1010 [ 138.962250][ T389] usb 3-1: device descriptor read/64, error -71 [ 139.014379][ T3544] input: syz1 as /devices/virtual/input/input33 [ 139.202255][ T389] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 139.308313][ T3549] netlink: 'syz.0.1012': attribute type 4 has an invalid length. [ 139.332260][ T389] usb 3-1: device descriptor read/64, error -71 [ 139.572305][ T389] usb 3-1: device descriptor read/64, error -71 [ 139.682324][ T389] usb usb3-port1: attempt power cycle [ 139.813984][ T3562] rust_binder: Write failure EFAULT in pid:144 [ 139.819819][ T3562] SELinux: failed to load policy [ 140.002727][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.011395][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.022232][ T389] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 140.043218][ T389] usb 3-1: device descriptor read/8, error -71 [ 140.173718][ T389] usb 3-1: device descriptor read/8, error -71 [ 140.207637][ T36] audit: type=1400 audit(1770749012.603:767): avc: denied { map } for pid=3578 comm="syz.1.1021" path="pipe:[2930]" dev="pipefs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 140.232230][ T672] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 140.383357][ T672] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 140.394340][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.404113][ T672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 140.417119][ T389] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 140.424676][ T672] usb 1-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 140.433815][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.442579][ T672] usb 1-1: config 0 descriptor?? [ 140.453349][ T389] usb 3-1: device descriptor read/8, error -71 [ 140.583357][ T389] usb 3-1: device descriptor read/8, error -71 [ 140.692326][ T389] usb usb3-port1: unable to enumerate USB device [ 140.766119][ T3583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 141.053820][ T672] usbhid 1-1:0.0: can't add hid device: -71 [ 141.061826][ T672] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.074088][ T672] usb 1-1: USB disconnect, device number 66 [ 141.562212][ T412] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 141.712244][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 141.718451][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.729355][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.739111][ T412] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.751941][ T412] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.760993][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.769518][ T412] usb 4-1: config 0 descriptor?? [ 141.782229][ T672] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 141.802250][ T434] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 141.952227][ T434] usb 1-1: Using ep0 maxpacket: 16 [ 141.958587][ T434] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 141.966891][ T434] usb 1-1: config 0 has no interface number 0 [ 141.973017][ T434] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.982998][ T434] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 141.991065][ T412] usbhid 4-1:0.0: can't add hid device: -71 [ 141.999477][ T412] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.006246][ T434] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 142.008787][ T412] usb 4-1: USB disconnect, device number 55 [ 142.022558][ T434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.035677][ T434] usb 1-1: Product: syz [ 142.039898][ T434] usb 1-1: Manufacturer: syz [ 142.045026][ T434] usb 1-1: SerialNumber: syz [ 142.050301][ T434] usb 1-1: config 0 descriptor?? [ 142.055589][ T3619] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.062993][ T3619] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.237214][ T3636] netlink: 'syz.1.1040': attribute type 4 has an invalid length. [ 142.259869][ T36] audit: type=1400 audit(1770749014.653:768): avc: denied { getopt } for pid=3637 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.279448][ T3619] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.287358][ T3619] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.354464][ T36] audit: type=1400 audit(1770749014.753:769): avc: denied { getattr } for pid=3644 comm="syz.2.1043" path="cgroup:[4026532387]" dev="nsfs" ino=4026532387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.496882][ T434] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 142.507134][ T434] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 142.529228][ T434] asix 1-1:0.251: probe with driver asix failed with error -32 [ 142.538461][ T434] usb 1-1: USB disconnect, device number 67 [ 142.588601][ T36] audit: type=1400 audit(1770749014.983:770): avc: denied { read } for pid=3673 comm="syz.0.1052" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.612372][ T36] audit: type=1400 audit(1770749014.983:771): avc: denied { open } for pid=3673 comm="syz.0.1052" path="/222/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.637276][ T36] audit: type=1400 audit(1770749014.983:772): avc: denied { ioctl } for pid=3673 comm="syz.0.1052" path="/222/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.922279][ T434] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 142.957491][ T36] audit: type=1326 audit(1770749015.353:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.3.1055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3175b9bf79 code=0x0 [ 143.153683][ T3696] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 143.161936][ T3696] overlayfs: missing 'lowerdir' [ 143.167935][ T434] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.179069][ T434] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 143.188123][ T434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.196668][ T434] usb 1-1: config 0 descriptor?? [ 143.404383][ T434] usbhid 1-1:0.0: can't add hid device: -71 [ 143.410663][ T434] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 143.413245][ T3698] tmpfs: Unknown parameter 'uid<00000000000000049663' [ 143.420614][ T672] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 143.433445][ T434] usb 1-1: USB disconnect, device number 68 [ 143.498711][ T3703] can0: slcan on ptm0. [ 143.592479][ T672] usb 4-1: Using ep0 maxpacket: 8 [ 143.599256][ T672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.609515][ T672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.620641][ T672] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 143.629861][ T672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.637915][ T672] usb 4-1: Product: syz [ 143.642990][ T672] usb 4-1: Manufacturer: syz [ 143.647749][ T672] usb 4-1: SerialNumber: syz [ 143.656225][ T672] usb 4-1: config 0 descriptor?? [ 143.864969][ T387] usb 4-1: USB disconnect, device number 56 [ 144.152300][ T672] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 144.302220][ T672] usb 1-1: Using ep0 maxpacket: 32 [ 144.308573][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.319780][ T3702] can0 (unregistered): slcan off ptm0. [ 144.319915][ T672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.344266][ T672] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.357890][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.372593][ T672] usb 1-1: config 0 descriptor?? [ 144.389848][ T672] hub 1-1:0.0: USB hub found [ 144.590816][ T3732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.592248][ T434] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 144.599775][ T3732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.617851][ T672] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 144.626876][ T672] usbhid 1-1:0.0: can't add hid device: -71 [ 144.632853][ T672] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 144.642208][ T412] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 144.653009][ T672] usb 1-1: USB disconnect, device number 69 [ 144.732304][ T434] usb 3-1: device descriptor read/64, error -71 [ 144.792331][ T412] usb 4-1: Invalid ep0 maxpacket: 64 [ 144.922216][ T412] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 144.972227][ T434] usb 3-1: device descriptor read/64, error -71 [ 145.072239][ T412] usb 4-1: Invalid ep0 maxpacket: 64 [ 145.077691][ T412] usb usb4-port1: attempt power cycle [ 145.135173][ T36] audit: type=1400 audit(1770749017.533:774): avc: denied { write } for pid=3780 comm="syz.0.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.215114][ T36] audit: type=1400 audit(1770749017.613:775): avc: denied { setopt } for pid=3784 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 145.235238][ T434] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 145.236199][ T36] audit: type=1400 audit(1770749017.613:776): avc: denied { getopt } for pid=3784 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.251355][ T3787] EXT4-fs: dax option not supported [ 145.372292][ T434] usb 3-1: device descriptor read/64, error -71 [ 145.422261][ T412] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 145.442611][ T412] usb 4-1: Invalid ep0 maxpacket: 64 [ 145.542261][ T672] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 145.572286][ T412] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 145.592593][ T412] usb 4-1: Invalid ep0 maxpacket: 64 [ 145.598192][ T412] usb usb4-port1: unable to enumerate USB device [ 145.612223][ T434] usb 3-1: device descriptor read/64, error -71 [ 145.693433][ T672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.703649][ T672] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.713340][ T672] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.722598][ T434] usb usb3-port1: attempt power cycle [ 145.728047][ T672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.736432][ T672] usb 1-1: SerialNumber: syz [ 145.944364][ T672] usb 1-1: 0:2 : does not exist [ 145.950998][ T672] usb 1-1: USB disconnect, device number 70 [ 145.959843][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 146.072277][ T434] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 146.093447][ T434] usb 3-1: device descriptor read/8, error -71 [ 146.184295][ T36] audit: type=1400 audit(1770749018.583:777): avc: denied { create } for pid=3828 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 146.209795][ T3831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1092'. [ 146.226044][ T434] usb 3-1: device descriptor read/8, error -71 [ 146.240298][ T3836] overlayfs: failed to clone upperpath [ 146.472309][ T434] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 146.493254][ T434] usb 3-1: device descriptor read/8, error -71 [ 146.623341][ T434] usb 3-1: device descriptor read/8, error -71 [ 146.732332][ T434] usb usb3-port1: unable to enumerate USB device [ 147.421178][ T689] Bluetooth: hci0: sending frame failed (-49) [ 147.427534][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 147.494289][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 147.494307][ T36] audit: type=1400 audit(1770749019.893:781): avc: denied { relabelfrom } for pid=3864 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.520919][ T36] audit: type=1400 audit(1770749019.893:782): avc: denied { relabelto } for pid=3864 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 147.521573][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 147.541220][ T36] audit: type=1400 audit(1770749019.913:783): avc: denied { mount } for pid=3864 comm="syz.3.1105" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.571770][ T36] audit: type=1400 audit(1770749019.913:784): avc: denied { remount } for pid=3864 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.616972][ T36] audit: type=1400 audit(1770749020.013:785): avc: denied { unmount } for pid=2665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 147.637696][ T36] audit: type=1400 audit(1770749020.033:786): avc: denied { append } for pid=3874 comm="syz.3.1108" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 147.669447][ T36] audit: type=1400 audit(1770749020.063:787): avc: denied { mounton } for pid=3876 comm="syz.0.1109" path="/236/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 147.697464][ T36] audit: type=1400 audit(1770749020.093:788): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.722215][ T36] audit: type=1400 audit(1770749020.093:789): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 147.744509][ T3881] tipc: Started in network mode [ 147.749482][ T3881] tipc: Node identity fe800000000000000000000000000016, cluster identity 3 [ 147.753757][ T36] audit: type=1400 audit(1770749020.153:790): avc: denied { write } for pid=3878 comm="syz.3.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.758858][ T3881] tipc: Enabled bearer , priority 10 [ 147.794688][ T3884] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1112'. [ 147.812232][ T387] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 147.962225][ T387] usb 3-1: Using ep0 maxpacket: 8 [ 147.968304][ T387] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 147.979141][ T387] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.988819][ T387] usb 3-1: config 1 interface 1 has no altsetting 0 [ 147.996836][ T387] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.005932][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.013959][ T387] usb 3-1: Product: syz [ 148.018121][ T387] usb 3-1: Manufacturer: syz [ 148.022738][ T387] usb 3-1: SerialNumber: syz [ 148.062220][ T434] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 148.130039][ T3896] bond_slave_1: entered promiscuous mode [ 148.213467][ T434] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.223669][ T434] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 148.231518][ T387] usb 3-1: 2:1 : sample bitwidth 202 in over sample bytes 1 [ 148.233453][ T434] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.240375][ T387] usb 3-1: 2:1 : invalid channels 0 [ 148.248916][ T434] usb 1-1: config 0 descriptor?? [ 148.257897][ T387] usb 3-1: USB disconnect, device number 90 [ 148.265525][ T434] usb 1-1: bad CDC descriptors [ 148.269411][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.465889][ T3887] overlayfs: overlapping lowerdir path [ 148.473172][ T387] usb 1-1: USB disconnect, device number 71 [ 148.792200][ T412] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 148.872233][ T387] tipc: Node number set to 4269801494 [ 148.943279][ T412] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 148.954947][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.966054][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 148.977436][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 148.988710][ T412] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 148.997993][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.006192][ T412] usb 4-1: Product: syz [ 149.010434][ T412] usb 4-1: Manufacturer: syz [ 149.016772][ T412] usb 4-1: SerialNumber: syz [ 149.022518][ T412] usb 4-1: config 0 descriptor?? [ 149.027739][ T3923] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.042213][ T434] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 149.193278][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.204330][ T434] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.214238][ T434] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.223324][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.235949][ T434] usb 3-1: config 0 descriptor?? [ 149.240021][ T412] usb 4-1: USB disconnect, device number 61 [ 149.272213][ T672] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 149.402221][ T672] usb 1-1: device descriptor read/64, error -71 [ 149.642217][ T672] usb 1-1: device descriptor read/64, error -71 [ 149.747046][ T3966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3966 comm=syz.3.1141 [ 149.892201][ T672] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 150.002251][ T412] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 150.022207][ T672] usb 1-1: device descriptor read/64, error -71 [ 150.152209][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 150.158626][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.169622][ T412] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.179406][ T412] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.192680][ T412] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 150.201762][ T412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.210439][ T412] usb 4-1: config 0 descriptor?? [ 150.254971][ T3971] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 150.262885][ T672] usb 1-1: device descriptor read/64, error -71 [ 150.262887][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1143'. [ 150.382321][ T672] usb usb1-port1: attempt power cycle [ 150.419201][ T412] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.001F/input/input34 [ 150.435886][ T412] appleir 0003:05AC:8241.001F: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 150.505924][ T434] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001E/input/input35 [ 150.518722][ T434] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001E/input/input36 [ 150.531373][ T434] uclogic 0003:256C:006D.001E: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 150.618456][ T434] usb 4-1: USB disconnect, device number 62 [ 150.732240][ T672] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 150.753180][ T672] usb 1-1: device descriptor read/8, error -71 [ 150.883182][ T672] usb 1-1: device descriptor read/8, error -71 [ 151.023455][ T3997] tipc: Enabling of bearer rejected, failed to enable media [ 151.132230][ T672] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 151.153418][ T672] usb 1-1: device descriptor read/8, error -71 [ 151.283246][ T672] usb 1-1: device descriptor read/8, error -71 [ 151.362297][ T412] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 151.392313][ T672] usb usb1-port1: unable to enumerate USB device [ 151.513580][ T412] usb 4-1: unable to get BOS descriptor or descriptor too short [ 151.522033][ T412] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 151.530165][ T412] usb 4-1: config 7 has no interface number 0 [ 151.541020][ T412] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 151.550165][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.558199][ T412] usb 4-1: Product: 㯑 [ 151.766370][ T4009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.775189][ T4009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.809115][ T330] usb 3-1: USB disconnect, device number 91 [ 152.089849][ T4020] x_tables: duplicate underflow at hook 4 [ 152.095842][ T4020] x_tables: duplicate underflow at hook 4 [ 152.101734][ T4020] x_tables: duplicate underflow at hook 4 [ 152.107701][ T4020] x_tables: duplicate underflow at hook 4 [ 152.113651][ T4020] x_tables: duplicate underflow at hook 4 [ 152.119419][ T4020] x_tables: duplicate underflow at hook 4 [ 152.125297][ T4020] x_tables: duplicate underflow at hook 4 [ 152.131074][ T4020] x_tables: duplicate underflow at hook 4 [ 152.137053][ T4020] x_tables: duplicate underflow at hook 4 [ 152.142908][ T4020] x_tables: duplicate underflow at hook 4 [ 152.161727][ T4025] overlayfs: failed to clone upperpath [ 152.228176][ T4044] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 152.236272][ T4044] netlink: 'syz.1.1164': attribute type 4 has an invalid length. [ 152.866970][ T4072] fuseblk: Bad value for 'user_id' [ 152.872226][ T4072] fuseblk: Bad value for 'user_id' [ 152.937605][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 152.937620][ T36] audit: type=1400 audit(1770749025.333:795): avc: denied { create } for pid=4076 comm="syz.0.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 153.202194][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 153.222211][ T672] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 153.353438][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 153.360103][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00 [ 153.369225][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.378859][ T9] usb 1-1: config 0 descriptor?? [ 153.382185][ T672] usb 3-1: Using ep0 maxpacket: 32 [ 153.384976][ T4091] tipc: Trying to set illegal importance in message [ 153.390187][ T672] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 153.399679][ T4091] fuse: Bad value for 'group_id' [ 153.405265][ T672] usb 3-1: config 0 has no interface number 0 [ 153.409104][ T4091] fuse: Bad value for 'group_id' [ 153.415077][ T672] usb 3-1: config 0 interface 184 has no altsetting 0 [ 153.425268][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 153.428414][ T672] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 153.444842][ T672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.453118][ T672] usb 3-1: Product: syz [ 153.457436][ T672] usb 3-1: Manufacturer: syz [ 153.462062][ T672] usb 3-1: SerialNumber: syz [ 153.470949][ T672] usb 3-1: config 0 descriptor?? [ 153.476759][ T672] smsc75xx v1.0.0 [ 153.792375][ T9] wacom 0003:056A:032A.0020: unknown main item tag 0x0 [ 153.799477][ T9] wacom 0003:056A:032A.0020: unknown main item tag 0x0 [ 153.806476][ T9] wacom 0003:056A:032A.0020: unknown main item tag 0x0 [ 153.815021][ T9] wacom 0003:056A:032A.0020: hidraw0: USB HID vff.ff Device [HID 056a:032a] on usb-dummy_hcd.0-1/input0 [ 153.994210][ T387] usb 1-1: USB disconnect, device number 76 [ 154.078601][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 154.089726][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 154.099356][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 154.110350][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 154.120162][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 154.130669][ T672] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 154.140185][ T672] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 154.142889][ T412] usb 4-1: USB disconnect, device number 63 [ 154.492297][ T412] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 154.642198][ T412] usb 4-1: Using ep0 maxpacket: 16 [ 154.648427][ T412] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 154.657286][ T412] usb 4-1: config 1 has no interface number 0 [ 154.663825][ T412] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 154.674096][ T412] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 154.684566][ T412] usb 4-1: config 1 interface 105 has no altsetting 0 [ 154.689837][ T36] audit: type=1326 audit(1770749027.083:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.1.1192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f665b99bf79 code=0x0 [ 154.693491][ T412] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 154.723359][ T412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.731347][ T412] usb 4-1: Product: syz [ 154.735526][ T412] usb 4-1: Manufacturer: syz [ 154.740156][ T412] usb 4-1: SerialNumber: syz [ 154.747668][ T4117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.756181][ T4117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 154.812029][ T36] audit: type=1400 audit(1770749027.203:797): avc: denied { accept } for pid=4131 comm="syz.1.1192" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.812204][ T434] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 154.832723][ T36] audit: type=1326 audit(1770749027.233:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4131 comm="syz.1.1192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f665b99bf79 code=0x0 [ 154.982210][ T434] usb 1-1: Using ep0 maxpacket: 32 [ 154.988511][ T434] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 154.996649][ T434] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.006792][ T434] usb 1-1: config 0 has no interface number 0 [ 155.009987][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.012923][ T434] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 155.012957][ T434] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.012981][ T434] usb 1-1: config 0 interface 85 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 155.013004][ T434] usb 1-1: config 0 interface 85 has no altsetting 0 [ 155.014573][ T434] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 155.023220][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.032314][ T434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.087494][ T434] usb 1-1: Product: syz [ 155.091650][ T434] usb 1-1: Manufacturer: syz [ 155.096368][ T434] usb 1-1: SerialNumber: syz [ 155.101628][ T434] usb 1-1: config 0 descriptor?? [ 155.170093][ T4117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.178747][ T4117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.186981][ T4117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.194258][ T4117] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.672327][ T434] usb 1-1: USB disconnect, device number 77 [ 155.803696][ T412] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 155.816340][ T412] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b2:fd:1b:72:43:8b [ 156.024401][ T434] usb 4-1: USB disconnect, device number 64 [ 156.024404][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 156.024452][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 156.032961][ T434] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 156.038930][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 156.065973][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 156.074067][ T149] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 156.074503][ T672] usb 3-1: USB disconnect, device number 92 [ 156.082004][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 156.108991][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 156.128848][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 156.137503][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 156.146577][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 156.155215][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 156.169824][ T434] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 156.177883][ T434] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 156.186157][ T434] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 156.194321][ T434] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 156.247082][ T434] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 156.256440][ T4174] tipc: Started in network mode [ 156.256455][ T4174] tipc: Node identity , cluster identity 4711 [ 156.256466][ T4174] tipc: Failed to obtain node identity [ 156.256477][ T4174] tipc: Enabling of bearer rejected, failed to enable media [ 156.268937][ T434] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 156.312943][ T434] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 156.548123][ T4194] random: crng reseeded on system resumption [ 156.548421][ T36] audit: type=1400 audit(1770749028.943:799): avc: denied { read write } for pid=4193 comm="syz.3.1202" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.578220][ T36] audit: type=1400 audit(1770749028.943:800): avc: denied { ioctl open } for pid=4193 comm="syz.3.1202" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.632295][ T387] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 156.645021][ T412] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 156.792249][ T387] usb 3-1: Using ep0 maxpacket: 16 [ 156.798466][ T387] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 156.809334][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.819156][ T387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 156.832228][ T387] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 156.841377][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.850023][ T412] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 156.862515][ T387] usb 3-1: config 0 descriptor?? [ 156.867573][ T412] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.877714][ T412] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 156.891168][ T387] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 156.899877][ T412] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 156.908971][ T412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.916971][ T412] usb 1-1: Product: syz [ 156.921130][ T412] usb 1-1: Manufacturer: syz [ 156.925792][ T412] usb 1-1: SerialNumber: syz [ 156.930946][ T412] usb 1-1: config 0 descriptor?? [ 156.936663][ T412] usb-storage 1-1:0.0: USB Mass Storage device detected [ 156.944432][ T412] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 157.144333][ T412] usb 3-1: USB disconnect, device number 93 [ 157.343628][ T4192] random: crng reseeded on system resumption [ 157.372178][ T412] usb 1-1: USB disconnect, device number 78 [ 157.956810][ T36] audit: type=1400 audit(2000000000.689:801): avc: denied { remount } for pid=4241 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 157.972297][ T4242] kvm: kvm [4241]: vcpu2, guest rIP: 0x912d Unhandled WRMSR(0xc1) = 0x400 [ 157.985753][ T4242] kvm: kvm [4241]: vcpu2, guest rIP: 0x912d Unhandled WRMSR(0xc2) = 0x400 [ 157.996305][ T4242] kvm: kvm [4241]: vcpu2, guest rIP: 0x912d Unhandled WRMSR(0x11e) = 0x400 [ 158.007308][ T4242] kvm: kvm [4241]: vcpu2, guest rIP: 0x912d Unhandled WRMSR(0x186) = 0x400 [ 158.016404][ T4242] kvm: kvm [4241]: vcpu2, guest rIP: 0x912d Unhandled WRMSR(0x187) = 0x400 [ 158.732928][ T4274] syz.1.1226(4274): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 158.746748][ T4274] tipc: Started in network mode [ 158.751636][ T4274] tipc: Node identity 2e0040002eff, cluster identity 4711 [ 158.758815][ T4274] tipc: Enabling of bearer rejected, failed to enable media [ 158.775481][ T36] audit: type=1400 audit(2000000001.509:802): avc: denied { accept } for pid=4275 comm="syz.1.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 158.795450][ T36] audit: type=1400 audit(2000000001.509:803): avc: denied { setattr } for pid=4275 comm="syz.1.1227" name="NETLINK" dev="sockfs" ino=27206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.819208][ T412] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 158.967173][ T4278] rust_binder: 791: no such ref 1 [ 158.972318][ T412] usb 3-1: Using ep0 maxpacket: 8 [ 158.972590][ T4278] rust_binder: Error in use_page_slow: ESRCH [ 158.977544][ T4278] rust_binder: use_range failure ESRCH [ 158.978774][ T412] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 158.983893][ T4278] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 158.989204][ T412] usb 3-1: config 0 has no interface number 0 [ 158.997799][ T4278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 159.005276][ T412] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice= 8.d0 [ 159.011583][ T4278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:791 [ 159.020624][ T412] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.050356][ T412] usb 3-1: config 0 descriptor?? [ 159.060575][ T412] usb 3-1: NDI device with a latency value of 1 [ 159.302228][ T31] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 159.311274][ T412] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 159.319506][ T412] ftdi_sio ttyUSB0: unknown device type: 0x8d0 [ 159.332329][ T412] usb 3-1: USB disconnect, device number 94 [ 159.340499][ T412] ftdi_sio 3-1:0.255: device disconnected [ 159.350037][ T4285] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 159.358771][ T4285] SELinux: failed to load policy [ 159.453236][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.464208][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.474756][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.483842][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 159.491834][ T31] usb 1-1: Manufacturer: syz [ 159.497204][ T31] usb 1-1: config 0 descriptor?? [ 159.672230][ T412] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 159.802936][ T412] usb 3-1: device descriptor read/64, error -71 [ 160.052360][ T412] usb 3-1: device descriptor read/64, error -71 [ 160.062216][ T434] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 160.212208][ T434] usb 4-1: Using ep0 maxpacket: 16 [ 160.218469][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.229395][ T434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.239170][ T434] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 160.251976][ T434] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.261073][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.269782][ T434] usb 4-1: config 0 descriptor?? [ 160.292310][ T412] usb 3-1: new low-speed USB device number 96 using dummy_hcd [ 160.373266][ T31] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 160.385149][ T31] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 160.393487][ T31] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 160.401612][ T31] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 160.409180][ T31] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 160.419641][ T31] usb 1-1: USB disconnect, device number 79 [ 160.432265][ T412] usb 3-1: device descriptor read/64, error -71 [ 160.672222][ T412] usb 3-1: device descriptor read/64, error -71 [ 160.679983][ T434] microsoft 0003:045E:07DA.0022: invalid report_size -498040915 [ 160.687713][ T434] microsoft 0003:045E:07DA.0022: item 0 4 1 7 parsing failed [ 160.695457][ T434] microsoft 0003:045E:07DA.0022: parse failed [ 160.701540][ T434] microsoft 0003:045E:07DA.0022: probe with driver microsoft failed with error -22 [ 160.783453][ T412] usb usb3-port1: attempt power cycle [ 160.881454][ T434] usb 4-1: USB disconnect, device number 65 [ 161.122277][ T412] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 161.143356][ T412] usb 3-1: device descriptor read/8, error -71 [ 161.152247][ T387] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 161.273561][ T412] usb 3-1: device descriptor read/8, error -71 [ 161.282216][ T387] usb 1-1: device descriptor read/64, error -71 [ 161.392289][ T36] audit: type=1400 audit(2000000004.119:804): avc: denied { mounton } for pid=4326 comm="syz.3.1241" path="/87/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.393341][ T4327] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.415059][ T4328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.422866][ T36] audit: type=1400 audit(2000000004.129:805): avc: denied { read } for pid=4326 comm="syz.3.1241" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.448370][ T4327] overlayfs: failed to set uuid (87/file1, err=-1); falling back to uuid=null. [ 161.453240][ T36] audit: type=1400 audit(2000000004.159:806): avc: denied { open } for pid=4326 comm="syz.3.1241" path="/87/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.484009][ T36] audit: type=1400 audit(2000000004.159:807): avc: denied { search } for pid=4326 comm="syz.3.1241" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.506315][ T36] audit: type=1400 audit(2000000004.159:808): avc: denied { read } for pid=4326 comm="syz.3.1241" name="saved_tgids" dev="tracefs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 161.529044][ T36] audit: type=1400 audit(2000000004.159:809): avc: denied { getattr } for pid=4326 comm="syz.3.1241" name="saved_tgids" dev="tracefs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 161.529070][ T412] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 161.562209][ T387] usb 1-1: device descriptor read/64, error -71 [ 161.573854][ T412] usb 3-1: device descriptor read/8, error -71 [ 161.703272][ T412] usb 3-1: device descriptor read/8, error -71 [ 161.802243][ T408] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 161.809922][ T387] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 161.817725][ T412] usb usb3-port1: unable to enumerate USB device [ 161.952282][ T387] usb 1-1: device descriptor read/64, error -71 [ 161.972228][ T408] usb 4-1: Using ep0 maxpacket: 16 [ 161.978417][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.989657][ T408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.999783][ T408] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 162.008862][ T408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.017466][ T408] usb 4-1: config 0 descriptor?? [ 162.192200][ T387] usb 1-1: device descriptor read/64, error -71 [ 162.302326][ T387] usb usb1-port1: attempt power cycle [ 162.624723][ T408] usbhid 4-1:0.0: can't add hid device: -32 [ 162.630704][ T408] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 162.642228][ T387] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 162.663552][ T387] usb 1-1: device descriptor read/8, error -71 [ 162.752308][ T412] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 162.793363][ T387] usb 1-1: device descriptor read/8, error -71 [ 162.903407][ T412] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 162.911702][ T412] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 162.920668][ T412] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 162.930957][ T412] usb 3-1: config 220 has no interface number 2 [ 162.937252][ T412] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 162.950401][ T412] usb 3-1: config 220 interface 0 has no altsetting 0 [ 162.957180][ T412] usb 3-1: config 220 interface 76 has no altsetting 0 [ 162.964059][ T412] usb 3-1: config 220 interface 1 has no altsetting 0 [ 162.972315][ T412] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 162.981409][ T412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.989342][ T672] usb 4-1: USB disconnect, device number 66 [ 162.989600][ T412] usb 3-1: Product: syz [ 162.999514][ T412] usb 3-1: Manufacturer: syz [ 163.005346][ T412] usb 3-1: SerialNumber: syz [ 163.042228][ T387] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 163.063180][ T387] usb 1-1: device descriptor read/8, error -71 [ 163.193201][ T387] usb 1-1: device descriptor read/8, error -71 [ 163.217661][ T412] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 163.227413][ T412] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 163.233977][ T412] usb 3-1: No valid video chain found. [ 163.239604][ T412] usb 3-1: selecting invalid altsetting 0 [ 163.249079][ T412] usb 3-1: USB disconnect, device number 99 [ 163.302362][ T387] usb usb1-port1: unable to enumerate USB device [ 163.746200][ T36] audit: type=1400 audit(2000000006.479:810): avc: denied { attach_queue } for pid=4364 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.883758][ T4367] netlink: 'syz.3.1257': attribute type 63 has an invalid length. [ 163.891651][ T4367] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1257'. [ 163.900593][ T4367] gretap0: entered allmulticast mode [ 163.906065][ T4367] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.934173][ T4369] loop7: detected capacity change from 0 to 8 [ 163.985210][ T66] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 163.994416][ T66] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.002349][ T4369] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 164.011549][ T672] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 164.019270][ T4369] Buffer I/O error on dev loop7, logical block 0, async page read [ 164.027249][ T4369] loop7: unable to read partition table [ 164.033414][ T4369] loop_reread_partitions: partition scan of loop7 ( Cj̖P=ý?}X) failed (rc=-5) [ 164.084118][ T3150] ------------[ cut here ]------------ [ 164.089607][ T3150] WARNING: CPU: 1 PID: 3150 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 164.099040][ T3150] Modules linked in: [ 164.102979][ T3150] CPU: 1 UID: 0 PID: 3150 Comm: syz.0.891 Not tainted syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 164.114457][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.124544][ T3150] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 164.130178][ T3150] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 164.149861][ T3150] RSP: 0018:ffffc9000dd0f748 EFLAGS: 00010293 [ 164.156073][ T3150] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888110371300 [ 164.164098][ T3150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.172080][ T3150] RBP: ffffc9000dd0f770 R08: ffff88811de180bf R09: 1ffff11023bc3017 [ 164.180112][ T3150] R10: dffffc0000000000 R11: ffffed1023bc3018 R12: 0000000000000000 [ 164.188143][ T3150] R13: dffffc0000000000 R14: ffff88811de18020 R15: ffff888113437000 [ 164.196159][ T3150] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 164.205127][ T3150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.211712][ T3150] CR2: 0000200000001000 CR3: 000000010e3f0000 CR4: 00000000003526b0 [ 164.219719][ T3150] DR0: 0000000000000070 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.227732][ T3150] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 164.235727][ T3150] Call Trace: [ 164.239002][ T3150] [ 164.241927][ T3150] ovl_do_remove+0x81b/0xda0 [ 164.246545][ T3150] ? ovl_set_redirect+0x780/0x780 [ 164.251567][ T3150] ? down_write+0xee/0x2b0 [ 164.252200][ T387] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 164.256088][ T3150] ? __cfi_down_write+0x10/0x10 [ 164.268452][ T3150] ovl_rmdir+0x1e/0x30 [ 164.272545][ T3150] vfs_rmdir+0x3e3/0x560 [ 164.276801][ T3150] incfs_kill_sb+0x109/0x230 [ 164.281383][ T3150] deactivate_locked_super+0xd5/0x2a0 [ 164.286779][ T3150] deactivate_super+0xb8/0xe0 [ 164.291454][ T3150] cleanup_mnt+0x406/0x4a0 [ 164.295889][ T3150] __cleanup_mnt+0x1d/0x40 [ 164.300332][ T3150] task_work_run+0x1e5/0x260 [ 164.304943][ T3150] ? __cfi_task_work_run+0x10/0x10 [ 164.310055][ T3150] ? free_nsproxy+0x223/0x290 [ 164.314763][ T3150] do_exit+0x9e3/0x2650 [ 164.318920][ T3150] ? __cfi_do_exit+0x10/0x10 [ 164.323530][ T3150] ? __kasan_check_write+0x18/0x20 [ 164.328661][ T3150] ? _raw_spin_lock_irq+0x93/0x120 [ 164.333802][ T3150] ? __kasan_check_read+0x15/0x20 [ 164.338827][ T3150] ? cgroup_update_frozen+0x160/0x970 [ 164.344322][ T3150] do_group_exit+0x229/0x2f0 [ 164.348922][ T3150] ? cgroup_leave_frozen+0x16b/0x2b0 [ 164.354272][ T3150] get_signal+0x1398/0x14e0 [ 164.358788][ T3150] arch_do_signal_or_restart+0xbc/0x760 [ 164.364385][ T3150] ? common_nsleep+0x93/0xb0 [ 164.368990][ T3150] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 164.375211][ T3150] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 164.380946][ T3150] ? __kasan_check_read+0x15/0x20 [ 164.385999][ T3150] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 164.392079][ T3150] syscall_exit_to_user_mode+0x57/0xb0 [ 164.397574][ T3150] do_syscall_64+0x63/0xf0 [ 164.401997][ T3150] ? clear_bhb_loop+0x50/0xa0 [ 164.402222][ T387] usb 4-1: device descriptor read/64, error -71 [ 164.406724][ T3150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.418852][ T3150] RIP: 0033:0x7f21cf95c84e [ 164.423287][ T3150] Code: Unable to access opcode bytes at 0x7f21cf95c824. [ 164.430305][ T3150] RSP: 002b:00007f21d080cf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 164.438824][ T3150] RAX: fffffffffffffdfc RBX: 00007f21d080d6c0 RCX: 00007f21cf95c84e [ 164.446828][ T3150] RDX: 00007f21d080cfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.454832][ T3150] RBP: 00007f21cfa327e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.462843][ T3150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.470805][ T3150] R13: 00007f21cfc16038 R14: 00007f21cfc15fa0 R15: 00007ffd29ef2f08 [ 164.478802][ T3150] [ 164.481826][ T3150] ---[ end trace 0000000000000000 ]--- [ 164.487603][ T3150] ------------[ cut here ]------------ [ 164.493133][ T3150] WARNING: CPU: 0 PID: 3150 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 164.502545][ T3150] Modules linked in: [ 164.506483][ T3150] CPU: 0 UID: 0 PID: 3150 Comm: syz.0.891 Tainted: G W syzkaller #0 4ae5b12b683c07c90cf68c53485f2a5719abf10e [ 164.519442][ T3150] Tainted: [W]=WARN [ 164.523271][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.533348][ T3150] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 164.539009][ T3150] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 5e 8b 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c 33 59 03 cc e8 f6 bf 3f ff <0f> 0b e9 3e ff ff ff e8 ea bf 3f ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 164.558920][ T3150] RSP: 0018:ffffc9000dd0f748 EFLAGS: 00010293 [ 164.565015][ T3150] RAX: ffffffff8247dd1a RBX: 0000000000000000 RCX: ffff888110371300 [ 164.573025][ T3150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.580992][ T3150] RBP: ffffc9000dd0f770 R08: ffff88811de180bf R09: 1ffff11023bc3017 [ 164.588989][ T3150] R10: dffffc0000000000 R11: ffffed1023bc3018 R12: 0000000000000000 [ 164.594029][ T672] usb 3-1: config 24 has an invalid interface number: 199 but max is 0 [ 164.596993][ T3150] R13: dffffc0000000000 R14: ffff88811de18020 R15: ffff888113437000 [ 164.605545][ T672] usb 3-1: config 24 has no interface number 0 [ 164.613261][ T3150] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 164.613285][ T3150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.619780][ T672] usb 3-1: config 24 interface 199 has no altsetting 0 [ 164.628407][ T3150] CR2: 000055555ef11908 CR3: 000000010c768000 CR4: 00000000003526b0 [ 164.628432][ T3150] DR0: 0000000000000070 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.637400][ T672] usb 3-1: string descriptor 0 read error: -22 [ 164.641844][ T3150] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 164.641865][ T3150] Call Trace: [ 164.641874][ T3150] [ 164.650286][ T672] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 164.657856][ T3150] ovl_do_remove+0x81b/0xda0 [ 164.664370][ T672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.671981][ T3150] ? ovl_set_redirect+0x780/0x780 [ 164.705270][ T3150] ? down_write+0xee/0x2b0 [ 164.709720][ T3150] ? __cfi_down_write+0x10/0x10 [ 164.714608][ T3150] ovl_rmdir+0x1e/0x30 [ 164.718678][ T3150] vfs_rmdir+0x3e3/0x560 [ 164.722938][ T3150] incfs_kill_sb+0x1a0/0x230 [ 164.727530][ T3150] deactivate_locked_super+0xd5/0x2a0 [ 164.732928][ T3150] deactivate_super+0xb8/0xe0 [ 164.737621][ T3150] cleanup_mnt+0x406/0x4a0 [ 164.742036][ T3150] __cleanup_mnt+0x1d/0x40 [ 164.746478][ T3150] task_work_run+0x1e5/0x260 [ 164.751069][ T3150] ? __cfi_task_work_run+0x10/0x10 [ 164.756203][ T3150] ? free_nsproxy+0x223/0x290 [ 164.760910][ T3150] do_exit+0x9e3/0x2650 [ 164.765095][ T3150] ? __cfi_do_exit+0x10/0x10 [ 164.769682][ T3150] ? __kasan_check_write+0x18/0x20 [ 164.774824][ T3150] ? _raw_spin_lock_irq+0x93/0x120 [ 164.779943][ T3150] ? __kasan_check_read+0x15/0x20 [ 164.785014][ T3150] ? cgroup_update_frozen+0x160/0x970 [ 164.790389][ T3150] do_group_exit+0x229/0x2f0 [ 164.795017][ T3150] ? cgroup_leave_frozen+0x16b/0x2b0 [ 164.800307][ T3150] get_signal+0x1398/0x14e0 [ 164.804902][ T3150] arch_do_signal_or_restart+0xbc/0x760 [ 164.810461][ T3150] ? common_nsleep+0x93/0xb0 [ 164.815080][ T3150] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 164.821244][ T3150] ? __se_sys_clock_nanosleep+0x31e/0x3b0 [ 164.826997][ T3150] ? __kasan_check_read+0x15/0x20 [ 164.832097][ T3150] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 164.838459][ T3150] syscall_exit_to_user_mode+0x57/0xb0 [ 164.843999][ T3150] do_syscall_64+0x63/0xf0 [ 164.848455][ T3150] ? clear_bhb_loop+0x50/0xa0 [ 164.853211][ T3150] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 164.859124][ T3150] RIP: 0033:0x7f21cf95c84e [ 164.863644][ T3150] Code: Unable to access opcode bytes at 0x7f21cf95c824. [ 164.870667][ T3150] RSP: 002b:00007f21d080cf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 164.879280][ T3150] RAX: fffffffffffffdfc RBX: 00007f21d080d6c0 RCX: 00007f21cf95c84e [ 164.887299][ T3150] RDX: 00007f21d080cfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.889177][ T672] usb 3-1: USB disconnect, device number 100 [ 164.895331][ T3150] RBP: 00007f21cfa327e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.895351][ T3150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.895362][ T3150] R13: 00007f21cfc16038 R14: 00007f21cfc15fa0 R15: 00007ffd29ef2f08 [ 164.925836][ T3150] [ 164.928846][ T3150] ---[ end trace 0000000000000000 ]--- [ 165.062284][ T387] usb 4-1: device descriptor read/64, error -71 [ 165.302240][ T387] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 165.432207][ T387] usb 4-1: device descriptor read/64, error -71 [ 165.672230][ T387] usb 4-1: device descriptor read/64, error -71 [ 165.782337][ T387] usb usb4-port1: attempt power cycle [ 166.132229][ T387] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 166.153278][ T387] usb 4-1: device descriptor read/8, error -71 [ 166.283261][ T387] usb 4-1: device descriptor read/8, error -71 [ 166.522212][ T387] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 166.552902][ T387] usb 4-1: device descriptor read/8, error -71 [ 166.683304][ T387] usb 4-1: device descriptor read/8, error -71 [ 166.802204][ T387] usb usb4-port1: unable to enumerate USB device