last executing test programs: 1m7.272823414s ago: executing program 2 (id=615): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000", @ANYRES32, @ANYBLOB="73274fa848d922bc6b099709de566ea758ff857bc4ec48a70cd12ff787d7cfaf77c327ecf2a43452f598cc9bf764e2f9b18226c2bf3ccb8ab7da472375e2b05fdb68d0a6548a933ef637eab8b681cd46d307c54cdfbb8270dd6747625eb1bc901c633f2331f6745ee3d533a226c8ac5878dacc"], 0x254}}, 0x0) 1m7.272765654s ago: executing program 2 (id=616): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1m7.149332701s ago: executing program 2 (id=619): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) 1m7.067382026s ago: executing program 2 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 1m7.056674297s ago: executing program 2 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4002}], 0x1, 0x6) 1m6.976584921s ago: executing program 2 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x2012, 0xffffffffffffffff, 0x0) 1m6.911836755s ago: executing program 32 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x2012, 0xffffffffffffffff, 0x0) 1m5.361070546s ago: executing program 3 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)=ANY=[@ANYBLOB="0005"], 0x500}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 1m5.308995418s ago: executing program 3 (id=645): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="200000001200010800000000fddbdf250a0000004c00398004"], 0x20}}, 0x0) 1m5.308869619s ago: executing program 3 (id=646): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)) 1m5.29526282s ago: executing program 3 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8a901e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x80000, 0x0) 1m5.28613113s ago: executing program 3 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) unlink(&(0x7f0000000000)='./file0\x00') getdents64(r3, 0x0, 0x0) 1m5.192775666s ago: executing program 3 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x8, 0x0, &(0x7f0000000640)=[@increfs], 0x0, 0x0, 0x0}) 1m5.191808186s ago: executing program 33 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x2000000000000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000c00)={0x8, 0x0, &(0x7f0000000640)=[@increfs], 0x0, 0x0, 0x0}) 1m1.00331906s ago: executing program 1 (id=710): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r0, 0xae80, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="f390360f070f326635000800000f30640fc76a2b66b9800000c00f326635008800000f30f0193e00800f752cba2000edd3230f0766b9b109000066b8af6d66d066ba26d0007b0f30", 0x48}], 0x1, 0x71, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f00000006c0)) 1m0.948961173s ago: executing program 1 (id=711): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipv6_route\x00') lseek(r0, 0x1000000, 0x0) 1m0.948835293s ago: executing program 1 (id=712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x1c, 0x25, 0x9, 0x2, 0x25dfdbff, {0x2}, [@nested={0x8, 0x131, 0x0, 0x1, [@nested={0x4, 0x7b}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1m0.948706523s ago: executing program 1 (id=713): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 1m0.948652973s ago: executing program 1 (id=714): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="51f5", 0x2, 0x8000, 0x0, 0x0) 1m0.868879638s ago: executing program 1 (id=717): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x100002, 0x63, 0x2, 0xc4cf, 0x9, "14010000000000780000000008f8ff00", 0x1, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) 1m0.848250339s ago: executing program 34 (id=717): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x100002, 0x63, 0x2, 0xc4cf, 0x9, "14010000000000780000000008f8ff00", 0x1, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x8) 28.086287751s ago: executing program 0 (id=998): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r0, 0x8910, 0x0) 28.047488454s ago: executing program 0 (id=1000): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "2025a54b187ccd0d", "001a00000000072f34fb84a60189cc6b", "040200", "14c4c1a97bcaa8e4"}, 0x28) write$binfmt_script(r0, 0x0, 0x0) 28.046968174s ago: executing program 0 (id=1002): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) unlink(&(0x7f0000000000)='./file0\x00') getdents64(r3, 0x0, 0x0) 28.046681763s ago: executing program 0 (id=1003): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xc4, 0x60, 0xd5, [{{0x9, 0x4, 0x0, 0xf8, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x3, 0x42, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xdc, 0x4, 0x9, 0x10, 0x5}, 0x43, &(0x7f00000000c0)={0x5, 0xf, 0x43, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x2, 0xf000}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "05b945ce898f4d91c4c2e22e015ad2ac"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x4, 0xfe, 0x3, 0xd0}, @ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x4f, 0xf019, 0x5, [0xc00f]}, @ptm_cap={0x3}]}, 0x7, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x21, &(0x7f0000000400)=@string={0x21, 0x3, "cd7b2bd297dc03edf1f4c3c769a7ed1dc9c11d20c09486100931a74e0fc794"}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 27.980742227s ago: executing program 5 (id=1004): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2e, "437207c69bfceba56ac26c301e845c1497c855153000000002000000352a222ab8177a584edb3369165f1ca372ee"}}) 27.980485907s ago: executing program 5 (id=1005): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x7, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0xfffffffe, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 27.980393257s ago: executing program 5 (id=1006): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 27.980286187s ago: executing program 5 (id=1007): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 27.976695987s ago: executing program 5 (id=1008): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c2000040042801c0001800600060008060000100015"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 27.892378953s ago: executing program 5 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000040008801c000c800c000b800800"], 0x48}}, 0x0) 27.833657126s ago: executing program 35 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000040008801c000c800c000b800800"], 0x48}}, 0x0) 25.013990681s ago: executing program 0 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f0000000140)='./cgroup\x00') 24.909491107s ago: executing program 0 (id=1035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.802059389s ago: executing program 36 (id=1035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.08909749s ago: executing program 6 (id=1143): unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 8.967463777s ago: executing program 6 (id=1144): r0 = socket(0x2b, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0x40000d, 0x4) 8.967120747s ago: executing program 6 (id=1145): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x20, 0x3, 0x6, "c92b96220797"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x15, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.465664316s ago: executing program 6 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000640)='./file0\x00', 0x272) 8.454918497s ago: executing program 6 (id=1165): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904"], 0x0) 8.395886441s ago: executing program 6 (id=1166): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x88a0}, {r2, 0x86c0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 8.348073963s ago: executing program 37 (id=1166): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x88a0}, {r2, 0x86c0}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 5.870267428s ago: executing program 9 (id=1189): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029730000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000280)={0x0, 0x14, 0x22, "00aa1c719e0e7f1ef20c0ec7044f64b6afdc4332fca29e4cf7d264ebc161f1796266"}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x140, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x19, 0x2, "83dd"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x9}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 5.14999806s ago: executing program 4 (id=1199): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000500)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r1, 0x0}]) 5.036679757s ago: executing program 4 (id=1200): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x5, 0x0, &(0x7f0000000400)) 5.036517207s ago: executing program 4 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd2871000000000000010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.841670936s ago: executing program 4 (id=1205): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0xfffffffe) write$binfmt_format(r0, &(0x7f0000000080)='1\x00', 0x2) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 3.807959459s ago: executing program 4 (id=1206): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000003100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2.855118694s ago: executing program 9 (id=1212): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000180)="b0") 1.592742598s ago: executing program 8 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0xbfd1, 0x0) 772.866116ms ago: executing program 4 (id=1233): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1dc, &(0x7f00000012c0)={[{0x1d8, 0x4e00, "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"}]}) 772.483176ms ago: executing program 7 (id=1236): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) pwritev2(r0, &(0x7f0000000580)=[{&(0x7f00000004c0)="f4289a59f0f7eb", 0x7}, {&(0x7f0000000f80)="bf887f0266a6eb", 0x7}], 0x2, 0xa7cb, 0x80000000, 0xc) 730.366198ms ago: executing program 8 (id=1237): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x9, 0xfffffffc, 0xffffffff, 0x6}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000840)=""/242) 718.510689ms ago: executing program 8 (id=1238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x4, 0x4) 718.383008ms ago: executing program 7 (id=1239): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000001"], 0x60}, 0x1, 0x7}, 0x0) 698.90369ms ago: executing program 8 (id=1240): r0 = socket(0x400000000010, 0x3, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000280)={0x200000, 0x200800, 0x0, 0x10, 0x5989}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 652.839673ms ago: executing program 7 (id=1241): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 652.754513ms ago: executing program 8 (id=1242): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) 652.706063ms ago: executing program 8 (id=1243): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a"], 0x0) 587.734506ms ago: executing program 7 (id=1244): setresuid(0x0, 0x0, 0xee01) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x30420}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000340)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 576.666967ms ago: executing program 7 (id=1245): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x15, r0, 0x6a, 0x8) 524.87032ms ago: executing program 7 (id=1246): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa1d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x40, 0x23, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 94.016285ms ago: executing program 9 (id=1247): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000c08", 0x4e}], 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 84.714755ms ago: executing program 9 (id=1248): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32.904079ms ago: executing program 9 (id=1249): pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000300)="1c1942a201b430b301fc61ad9eb2e8d7affe30256efa76d4c96b07425b965e3df93c6461b4faca27b5a65ae89d2253cb57ebeb23185c13efc7a7593ad60e4e1c00965aac3a18be9e3787e4cf7828d0d80d44a7b55e5203d605d083a081a13705382889dac86519a49a6f74d556e8d5970c1a73cb6ed664d82c04f4eb3f1f529e80838bc8615d194ca6c9e29a1be06015", 0x90}], 0x1, 0x4, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 9 (id=1250): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x82, 0x10, 0x6, 0x0, 0x0, 0xc, 0x0, 0x4b, 0x2, 0x4, 0x2, 0x0, 0x0, 0x1, 0x9, 0x0, 0xf, 0x8, 0x0, '\x00', 0x7, 0xb4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): { watch } for pid=762 comm="syz.0.184" path="/63/file0" dev="tmpfs" ino=341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.194456][ T768] input: syz0 as /devices/virtual/input/input5 [ 32.335504][ T782] netlink: 'syz.0.191': attribute type 4 has an invalid length. [ 32.732406][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 32.883523][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.894759][ T45] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 32.905803][ T45] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.918844][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 32.928297][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 32.937853][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.947771][ T45] usb 4-1: config 0 descriptor?? [ 32.953087][ T794] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.040951][ T901] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.244618][ T916] tmpfs: Unknown parameter 'usrquota' [ 33.364583][ T45] wacom 0003:056A:00FB.0004: unbalanced delimiter at end of report description [ 33.374035][ T45] wacom 0003:056A:00FB.0004: parse failed [ 33.380016][ T45] wacom 0003:056A:00FB.0004: probe with driver wacom failed with error -22 [ 33.429448][ T929] ======================================================= [ 33.429448][ T929] WARNING: The mand mount option has been deprecated and [ 33.429448][ T929] and is ignored by this kernel. Remove the mand [ 33.429448][ T929] option from the mount to silence this warning. [ 33.429448][ T929] ======================================================= [ 33.582151][ T939] __nla_validate_parse: 6 callbacks suppressed [ 33.582168][ T939] netlink: 148 bytes leftover after parsing attributes in process `syz.1.262'. [ 33.710962][ T946] 9pnet_virtio: no channels available for device syz [ 33.972425][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.122453][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 34.128767][ T45] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.138740][ T45] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 34.148610][ T45] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.161957][ T45] usb 2-1: config 1 interface 0 has no altsetting 0 [ 34.169886][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.172439][ T332] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.178958][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.194451][ T45] usb 2-1: Product: syz [ 34.198646][ T45] usb 2-1: Manufacturer: syz [ 34.203247][ T45] usb 2-1: SerialNumber: syz [ 34.332423][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 34.338759][ T332] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.349795][ T332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.356556][ T332] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 34.365716][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.374425][ T332] usb 1-1: config 0 descriptor?? [ 34.411740][ T45] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 34.768973][ T950] usblp0:failed reading printer status (-32) [ 34.776159][ T45] usb 2-1: USB disconnect, device number 5 [ 34.783140][ T45] usblp0: removed [ 34.784954][ T332] usbhid 1-1:0.0: can't add hid device: -71 [ 34.795060][ T332] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 34.804271][ T332] usb 1-1: USB disconnect, device number 4 [ 35.511968][ T9] usb 4-1: USB disconnect, device number 5 [ 35.861486][ T1062] rust_binder: Error while translating object. [ 35.861511][ T1062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.867833][ T1062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 35.932396][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.998652][ T1086] tmpfs: Unsupported parameter 'mpol' [ 36.095785][ T9] usb 2-1: too many configurations: 238, using maximum allowed: 8 [ 36.113171][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.125188][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.141964][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.155839][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.165820][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.175683][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.189458][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.201280][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.212077][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.226355][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.236464][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.248035][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.262776][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.272717][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.282882][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.297085][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.308923][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.319773][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.334032][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.344116][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.354122][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.368060][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 36.377994][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 36.388095][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.402994][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 36.417415][ T9] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 36.426760][ T9] usb 2-1: Manufacturer: syz [ 36.431726][ T9] usb 2-1: SerialNumber: syz [ 36.643444][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 36.662932][ T9] usb 2-1: USB disconnect, device number 6 [ 36.670922][ T9] usblp0: removed [ 37.132460][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.175665][ T1123] netlink: 100 bytes leftover after parsing attributes in process `syz.1.343'. [ 37.272593][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 37.272609][ T36] audit: type=1326 audit(1768981076.569:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1105 comm="syz.0.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7fc00000 [ 37.305853][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.316862][ T9] usb 4-1: config 0 has no interfaces? [ 37.340075][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.356521][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.366099][ T9] usb 4-1: Manufacturer: syz [ 37.376976][ T9] usb 4-1: config 0 descriptor?? [ 37.461991][ T36] audit: type=1400 audit(1768981076.749:249): avc: denied { read write } for pid=1146 comm="syz.1.354" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.486544][ T36] audit: type=1400 audit(1768981076.749:250): avc: denied { open } for pid=1146 comm="syz.1.354" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.591407][ T387] usb 4-1: USB disconnect, device number 6 [ 37.611815][ T1160] tmpfs: Unknown parameter 'quota' [ 37.612411][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.632401][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.665692][ T36] audit: type=1400 audit(1768981076.959:251): avc: denied { mount } for pid=1165 comm="syz.1.363" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.688072][ T36] audit: type=1400 audit(1768981076.959:252): avc: denied { mounton } for pid=1165 comm="syz.1.363" path="/111/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 37.711223][ T36] audit: type=1400 audit(1768981076.999:253): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.772639][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 37.778987][ T45] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 37.790842][ T45] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 37.800176][ T45] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 37.808369][ T45] usb 1-1: Product: syz [ 37.812623][ T45] usb 1-1: Manufacturer: syz [ 37.817207][ T45] usb 1-1: SerialNumber: syz [ 37.822301][ T45] usb 1-1: config 0 descriptor?? [ 37.822461][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 37.829887][ T1141] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 37.840306][ T45] hub 1-1:0.0: bad descriptor, ignoring hub [ 37.840434][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 37.846265][ T45] hub 1-1:0.0: probe with driver hub failed with error -5 [ 37.854746][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 37.871817][ T9] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 37.881071][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 37.890351][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.012486][ T332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.106827][ T9] usb 3-1: USB disconnect, device number 5 [ 38.162516][ T45] usb 1-1: USB disconnect, device number 5 [ 38.162843][ T332] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 38.177837][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.189202][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.200353][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.207901][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.217289][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.228174][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.235521][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.244437][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.255319][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.262699][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.271580][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.282793][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.290155][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.299098][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.310044][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.317581][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.326505][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.337390][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.344702][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.353611][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.364498][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.371777][ T332] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 38.380711][ T332] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 38.391696][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 38.399911][ T332] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 38.409215][ T332] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 38.417674][ T332] usb 2-1: Product: syz [ 38.421926][ T332] usb 2-1: Manufacturer: syz [ 38.426563][ T332] usb 2-1: SerialNumber: syz [ 38.431965][ T332] usb 2-1: config 0 descriptor?? [ 38.553280][ T36] audit: type=1326 audit(1768981077.849:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 38.576672][ T36] audit: type=1326 audit(1768981077.849:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 38.600100][ T36] audit: type=1326 audit(1768981077.849:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 38.631665][ T36] audit: type=1326 audit(1768981077.849:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.0.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 38.645009][ T387] usb 2-1: USB disconnect, device number 7 [ 38.677034][ T1192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.374'. [ 38.926148][ T1212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 39.188833][ T1247] overlayfs: statfs failed on './file0' [ 39.207161][ T1263] 9pnet_virtio: no channels available for device syz [ 39.394682][ T1290] tmpfs: Unknown parameter 'usrquota' [ 39.462402][ T387] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.519055][ T1312] 9pnet_virtio: no channels available for device syz [ 39.552453][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.619022][ T387] usb 3-1: Using ep0 maxpacket: 8 [ 39.628494][ T387] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 39.638800][ T387] usb 3-1: config 0 has no interface number 0 [ 39.650419][ T387] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 39.661424][ T387] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 39.670490][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.679733][ T387] usb 3-1: config 0 descriptor?? [ 39.722396][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 39.730929][ T45] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 39.749393][ T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 39.768217][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 39.786560][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 39.798264][ T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.811668][ T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 39.821024][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.890684][ T45] usb 3-1: USB disconnect, device number 6 [ 40.512412][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.673916][ T45] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 40.683808][ T45] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 40.697145][ T45] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.706383][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.080041][ T1379] 9pnet_virtio: no channels available for device syz [ 41.096683][ T1382] rust_binder: Got transaction with invalid offset. [ 41.096780][ T1382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.103800][ T1382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 41.300955][ T1393] 9pnet_virtio: no channels available for device syz [ 41.572399][ T450] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.734450][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.745632][ T450] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 41.754792][ T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.765336][ T450] usb 3-1: config 0 descriptor?? [ 41.976760][ T450] usbhid 3-1:0.0: can't add hid device: -71 [ 41.982818][ T450] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 41.991486][ T450] usb 3-1: USB disconnect, device number 7 [ 42.044586][ T1400] tmpfs: Unsupported parameter 'mpol' [ 42.328582][ T45] usb 2-1: USB disconnect, device number 8 [ 42.372483][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 42.372500][ T36] audit: type=1400 audit(1768981081.659:276): avc: denied { create } for pid=1407 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 42.395777][ T1410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 42.412491][ T450] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.573541][ T450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.584528][ T450] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.597475][ T450] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.606837][ T450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.615474][ T450] usb 3-1: config 0 descriptor?? [ 43.023020][ T450] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 43.035108][ T450] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 43.288744][ T387] usb 4-1: USB disconnect, device number 7 [ 43.312403][ T45] usb 3-1: USB disconnect, device number 8 [ 43.727561][ T36] audit: type=1400 audit(1768981083.019:277): avc: denied { bind } for pid=1463 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.747700][ T36] audit: type=1400 audit(1768981083.019:278): avc: denied { name_bind } for pid=1463 comm="syz.1.485" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 43.768862][ T36] audit: type=1400 audit(1768981083.019:279): avc: denied { node_bind } for pid=1463 comm="syz.1.485" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 43.937970][ T36] audit: type=1400 audit(1768981083.229:280): avc: denied { write } for pid=1483 comm="syz.2.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.109174][ T36] audit: type=1400 audit(1768981083.399:281): avc: denied { listen } for pid=1499 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.128608][ T36] audit: type=1400 audit(1768981083.399:282): avc: denied { create } for pid=1499 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 44.170896][ T36] audit: type=1400 audit(1768981083.459:283): avc: denied { setopt } for pid=1503 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 44.212484][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.373568][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.386000][ T45] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 44.395325][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.404904][ T45] usb 3-1: config 0 descriptor?? [ 44.615646][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 44.621661][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.631502][ T45] usb 3-1: USB disconnect, device number 9 [ 44.659923][ T1544] netlink: 64 bytes leftover after parsing attributes in process `syz.3.522'. [ 44.874650][ T36] audit: type=1400 audit(1768981084.169:284): avc: denied { getopt } for pid=1567 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.002234][ T36] audit: type=1400 audit(1768981084.289:285): avc: denied { ioctl } for pid=1586 comm="syz.0.540" path="socket:[12502]" dev="sockfs" ino=12502 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.033127][ T1587] syzkaller0: entered allmulticast mode [ 45.082438][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.244052][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.255519][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.269104][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.278339][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.287149][ T45] usb 3-1: config 0 descriptor?? [ 45.332407][ T450] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 45.480251][ T1630] input: syz0 as /devices/virtual/input/input7 [ 45.483405][ T450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.497766][ T450] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 45.507317][ T450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.520011][ T450] usb 2-1: config 0 descriptor?? [ 45.700072][ T45] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 45.709462][ T45] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 45.928673][ T450] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 45.938272][ T450] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input9 [ 45.954375][ T45] usb 3-1: USB disconnect, device number 10 [ 46.005841][ T450] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 46.133947][ T45] usb 2-1: USB disconnect, device number 9 [ 46.392434][ T450] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 46.542393][ T450] usb 4-1: Using ep0 maxpacket: 32 [ 46.548736][ T450] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 46.557702][ T450] usb 4-1: config 0 has no interface number 0 [ 46.563866][ T450] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.574902][ T450] usb 4-1: config 0 interface 85 has no altsetting 0 [ 46.583184][ T450] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 46.592221][ T450] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.600248][ T450] usb 4-1: Product: syz [ 46.604475][ T450] usb 4-1: Manufacturer: syz [ 46.609149][ T450] usb 4-1: SerialNumber: syz [ 46.614900][ T450] usb 4-1: config 0 descriptor?? [ 46.942426][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.032406][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.093701][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 47.102950][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.111722][ T45] usb 1-1: config 0 descriptor?? [ 47.183840][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.192251][ T31] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023 [ 47.202410][ T31] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023 [ 47.212377][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 47.220551][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.229708][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.237725][ T31] usb 2-1: Product: syz [ 47.241877][ T31] usb 2-1: Manufacturer: syz [ 47.246519][ T31] usb 2-1: SerialNumber: syz [ 47.251985][ T1678] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 47.259402][ T1678] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 47.385594][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 47.385610][ T36] audit: type=1400 audit(1768981086.679:296): avc: denied { append } for pid=1683 comm="syz.2.579" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.385667][ T1684] random: crng reseeded on system resumption [ 47.391810][ T36] audit: type=1400 audit(1768981086.679:297): avc: denied { open } for pid=1683 comm="syz.2.579" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.444021][ T36] audit: type=1400 audit(1768981086.709:298): avc: denied { ioctl } for pid=1683 comm="syz.2.579" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.472364][ T31] usb 2-1: bad CDC descriptors [ 47.480802][ T31] usb 2-1: USB disconnect, device number 10 [ 47.491442][ T1686] netlink: 32 bytes leftover after parsing attributes in process `syz.2.580'. [ 47.512044][ T36] audit: type=1400 audit(1768981086.799:299): avc: denied { getopt } for pid=1687 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 48.144469][ T1708] tipc: Can't bind to reserved service type 1 [ 48.277267][ T1719] netlink: 9 bytes leftover after parsing attributes in process `syz.1.594'. [ 48.286438][ T1719] gretap0: entered promiscuous mode [ 48.642480][ T332] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 48.793961][ T332] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.802161][ T332] usb 3-1: not running at top speed; connect to a high speed hub [ 48.810666][ T332] usb 3-1: config 140 has an invalid interface number: 70 but max is 0 [ 48.819010][ T332] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 48.829401][ T332] usb 3-1: config 140 has no interface number 0 [ 48.835720][ T332] usb 3-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81 [ 48.847750][ T332] usb 3-1: config 140 interface 70 altsetting 6 endpoint 0x81 has invalid maxpacket 151, setting to 64 [ 48.858909][ T332] usb 3-1: config 140 interface 70 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.871984][ T332] usb 3-1: config 140 interface 70 has no altsetting 0 [ 48.880350][ T332] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5 [ 48.889444][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.897461][ T332] usb 3-1: Product: syz [ 48.901623][ T332] usb 3-1: Manufacturer: syz [ 48.906286][ T450] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 48.913883][ T332] usb 3-1: SerialNumber: syz [ 49.063527][ T450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.074576][ T450] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.084351][ T450] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 49.093543][ T450] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.102406][ T450] usb 2-1: config 0 descriptor?? [ 49.123494][ T332] usb 3-1: USB disconnect, device number 11 [ 49.169965][ T31] usb 4-1: USB disconnect, device number 8 [ 49.511712][ T450] hid-generic 0003:146B:0902.0008: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 49.622398][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 49.665538][ T1768] netlink: 300 bytes leftover after parsing attributes in process `syz.2.615'. [ 49.711133][ T45] usb 2-1: USB disconnect, device number 11 [ 49.727382][ T450] usb 1-1: USB disconnect, device number 6 [ 49.754089][ T36] audit: type=1400 audit(1768981089.049:300): avc: denied { read } for pid=1773 comm="syz.0.618" path="socket:[13241]" dev="sockfs" ino=13241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.777302][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 49.777991][ T36] audit: type=1400 audit(1768981089.069:301): avc: denied { mount } for pid=1775 comm="syz.2.619" name="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 49.783913][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 49.805599][ T36] audit: type=1400 audit(1768981089.069:302): avc: denied { search } for pid=1775 comm="syz.2.619" name="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.813941][ T31] usb 4-1: config 1 has no interface number 0 [ 49.840692][ T36] audit: type=1400 audit(1768981089.069:303): avc: denied { read } for pid=1775 comm="syz.2.619" name="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.843639][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 49.863402][ T36] audit: type=1400 audit(1768981089.069:304): avc: denied { open } for pid=1775 comm="syz.2.619" path="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 49.878206][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 49.911622][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 49.925240][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 49.936212][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.946744][ T31] usb 4-1: Product: syz [ 49.950958][ T31] usb 4-1: Manufacturer: syz [ 49.960735][ T31] usb 4-1: SerialNumber: syz [ 49.966784][ T1759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.974221][ T1759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.003155][ T46] bridge_slave_1: left allmulticast mode [ 50.008898][ T46] bridge_slave_1: left promiscuous mode [ 50.014622][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.022474][ T46] bridge_slave_0: left allmulticast mode [ 50.032037][ T46] bridge_slave_0: left promiscuous mode [ 50.042210][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.082269][ T1790] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.628' sets config #0 [ 50.091724][ T1790] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.628' sets config #1 [ 50.145082][ T46] tipc: Left network mode [ 50.150875][ T46] veth1_macvtap: left promiscuous mode [ 50.152642][ T36] audit: type=1400 audit(1768981089.449:305): avc: denied { mounton } for pid=1797 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 50.156745][ T46] veth0_vlan: left promiscuous mode [ 50.248448][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.255944][ T1797] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.265888][ T1797] bridge_slave_0: entered allmulticast mode [ 50.272675][ T1797] bridge_slave_0: entered promiscuous mode [ 50.279960][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.287886][ T1797] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.295089][ T1797] bridge_slave_1: entered allmulticast mode [ 50.301366][ T1797] bridge_slave_1: entered promiscuous mode [ 50.350011][ T1797] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.357201][ T1797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.364541][ T1797] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.371606][ T1797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.382445][ T387] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.385235][ T1759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.401374][ T1759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 50.428945][ T1797] veth0_vlan: entered promiscuous mode [ 50.440675][ T1797] veth1_macvtap: entered promiscuous mode [ 50.542495][ T387] usb 1-1: Using ep0 maxpacket: 32 [ 50.548948][ T387] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 50.557463][ T387] usb 1-1: config 0 has no interface number 0 [ 50.563645][ T387] usb 1-1: config 0 interface 231 has no altsetting 0 [ 50.571759][ T387] usb 1-1: New USB device found, idVendor=1fb9, idProduct=0303, bcdDevice=97.8b [ 50.581100][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.589190][ T387] usb 1-1: Product: syz [ 50.593431][ T387] usb 1-1: Manufacturer: syz [ 50.598022][ T387] usb 1-1: SerialNumber: syz [ 50.603471][ T387] usb 1-1: config 0 descriptor?? [ 50.612447][ T332] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 50.752441][ T450] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.772922][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 50.779170][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.790473][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.800648][ T332] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 50.809770][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.813004][ T387] usb 1-1: USB disconnect, device number 7 [ 50.824297][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 50.836276][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 50.848598][ T332] usb 2-1: config 0 descriptor?? [ 50.854466][ T31] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 96:ad:70:f2:ef:5a [ 50.912519][ T450] usb 5-1: Using ep0 maxpacket: 16 [ 50.918778][ T450] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 50.931107][ T450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 50.946649][ T450] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 50.957026][ T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.965696][ T450] usb 5-1: Product: syz [ 50.970028][ T450] usb 5-1: Manufacturer: syz [ 50.974982][ T450] usb 5-1: SerialNumber: syz [ 50.982998][ T450] usb 5-1: config 0 descriptor?? [ 51.057569][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 51.057640][ T387] usb 4-1: USB disconnect, device number 9 [ 51.065982][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 51.072663][ T387] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 51.083531][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 51.098939][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 51.107158][ T149] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 51.115201][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 51.123447][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 51.131614][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 51.140185][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 51.149005][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 51.157863][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 51.167393][ T387] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 51.175611][ T387] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 51.183769][ T387] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 51.191906][ T387] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 51.252793][ T387] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 51.262227][ T387] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 51.271766][ T387] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 51.273688][ T332] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 51.292023][ T332] hid-generic 0003:0403:6030.0009: unknown main item tag 0x0 [ 51.305873][ T332] hid-generic 0003:0403:6030.0009: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 51.485504][ T450] usb 2-1: USB disconnect, device number 12 [ 51.642497][ T332] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.726176][ T293] bridge_slave_1: left allmulticast mode [ 51.731955][ T293] bridge_slave_1: left promiscuous mode [ 51.737666][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.745309][ T293] bridge_slave_0: left allmulticast mode [ 51.750969][ T293] bridge_slave_0: left promiscuous mode [ 51.756777][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.792380][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 51.800257][ T332] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 51.809674][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.818628][ T332] usb 1-1: Product: syz [ 51.823723][ T332] usb 1-1: Manufacturer: syz [ 51.828340][ T332] usb 1-1: SerialNumber: syz [ 51.838008][ T332] usb 1-1: config 0 descriptor?? [ 51.873521][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.880755][ T1873] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.888005][ T1873] bridge_slave_0: entered allmulticast mode [ 51.894560][ T1873] bridge_slave_0: entered promiscuous mode [ 51.901393][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.908530][ T1873] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.915767][ T1873] bridge_slave_1: entered allmulticast mode [ 51.922073][ T1873] bridge_slave_1: entered promiscuous mode [ 51.929386][ T293] veth1_macvtap: left promiscuous mode [ 51.934985][ T293] veth0_vlan: left promiscuous mode [ 52.041455][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.048976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.064338][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.071397][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.097331][ T1873] veth0_vlan: entered promiscuous mode [ 52.107921][ T1873] veth1_macvtap: entered promiscuous mode [ 52.135640][ T1892] ªªªªªª: renamed from vlan0 (while UP) [ 52.492496][ T387] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.663759][ T387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.673820][ T387] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 52.682946][ T387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.691491][ T387] usb 6-1: config 0 descriptor?? [ 52.772456][ T450] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.922424][ T450] usb 2-1: Using ep0 maxpacket: 8 [ 52.929919][ T450] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 52.939087][ T450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.947145][ T450] usb 2-1: Product: syz [ 52.951308][ T450] usb 2-1: Manufacturer: syz [ 52.956355][ T450] usb 2-1: SerialNumber: syz [ 52.961620][ T450] usb 2-1: config 0 descriptor?? [ 53.100322][ T387] lg-g15 0003:046D:C222.000A: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 53.300068][ T387] usb 6-1: USB disconnect, device number 2 [ 53.492007][ T450] usb 5-1: USB disconnect, device number 2 [ 53.832397][ T450] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.983650][ T450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.995067][ T450] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.004153][ T450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.013552][ T450] usb 5-1: config 0 descriptor?? [ 54.221648][ T450] usbhid 5-1:0.0: can't add hid device: -71 [ 54.227749][ T450] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 54.236946][ T450] usb 5-1: USB disconnect, device number 3 [ 54.304367][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 54.304381][ T36] audit: type=1400 audit(1768981093.599:326): avc: denied { ioctl } for pid=1963 comm="syz.5.680" path="socket:[15657]" dev="sockfs" ino=15657 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.409872][ T387] usb 1-1: USB disconnect, device number 8 [ 54.421968][ T36] audit: type=1400 audit(1768981093.709:327): avc: denied { getopt } for pid=1968 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.662442][ T450] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.752492][ T387] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.813736][ T450] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.824797][ T450] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.837830][ T450] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.847043][ T450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.856020][ T450] usb 5-1: config 0 descriptor?? [ 54.902457][ T387] usb 1-1: Using ep0 maxpacket: 32 [ 54.908702][ T387] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.920451][ T387] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 54.930160][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.938342][ T387] usb 1-1: Product: syz [ 54.942739][ T387] usb 1-1: Manufacturer: syz [ 54.947361][ T387] usb 1-1: SerialNumber: syz [ 54.956331][ T387] usb 1-1: config 0 descriptor?? [ 55.168050][ T387] usb 1-1: USB disconnect, device number 9 [ 55.263618][ T450] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 55.277103][ T450] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 55.551567][ T450] usb 2-1: USB disconnect, device number 13 [ 55.619300][ T1995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.666941][ T332] usb 5-1: USB disconnect, device number 4 [ 55.707282][ T2004] capability: warning: `syz.0.696' uses 32-bit capabilities (legacy support in use) [ 55.721819][ T36] audit: type=1400 audit(1768981095.009:328): avc: denied { bind } for pid=2003 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.759967][ T2012] tipc: Started in network mode [ 55.765046][ T2012] tipc: Node identity a2c29e78f582, cluster identity 4711 [ 55.769856][ T2006] kvm: pic: non byte write [ 55.772902][ T2012] tipc: Enabled bearer , priority 0 [ 55.791788][ T2012] syzkaller0: MTU too low for tipc bearer [ 55.798125][ T2012] tipc: Disabling bearer [ 55.852204][ T36] audit: type=1400 audit(1768981095.139:329): avc: denied { bind } for pid=2016 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.935494][ T2030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 56.039314][ T46] bridge_slave_1: left allmulticast mode [ 56.052429][ T46] bridge_slave_1: left promiscuous mode [ 56.058698][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.066850][ T46] bridge_slave_0: left allmulticast mode [ 56.072909][ T46] bridge_slave_0: left promiscuous mode [ 56.078660][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.142803][ T1750] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 56.193561][ T46] veth1_macvtap: left promiscuous mode [ 56.199214][ T46] veth0_vlan: left promiscuous mode [ 56.302403][ T1750] usb 1-1: Using ep0 maxpacket: 16 [ 56.309448][ T1750] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 56.328468][ T1750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 56.344054][ T1750] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 56.346440][ T2066] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.353549][ T1750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.361079][ T2066] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.373568][ T1750] usb 1-1: Product: syz [ 56.376054][ T2066] bridge_slave_0: entered allmulticast mode [ 56.380002][ T1750] usb 1-1: Manufacturer: syz [ 56.386521][ T2066] bridge_slave_0: entered promiscuous mode [ 56.390941][ T1750] usb 1-1: SerialNumber: syz [ 56.397277][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.408580][ T2066] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.409732][ T1750] usb 1-1: config 0 descriptor?? [ 56.415728][ T2066] bridge_slave_1: entered allmulticast mode [ 56.427498][ T2066] bridge_slave_1: entered promiscuous mode [ 56.465105][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.472242][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.479594][ T2066] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.486694][ T2066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.502585][ T450] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 56.525983][ T2066] veth0_vlan: entered promiscuous mode [ 56.538913][ T2066] veth1_macvtap: entered promiscuous mode [ 56.559010][ T36] audit: type=1400 audit(1768981095.849:330): avc: denied { mount } for pid=2086 comm="syz.4.730" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 56.652441][ T450] usb 6-1: Using ep0 maxpacket: 16 [ 56.658963][ T450] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.669201][ T450] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.679557][ T450] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.688810][ T450] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.696981][ T450] usb 6-1: Product: syz [ 56.701216][ T450] usb 6-1: Manufacturer: syz [ 56.706189][ T450] usb 6-1: SerialNumber: syz [ 56.832488][ T332] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.842511][ T387] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.915349][ T450] usb 6-1: 0:2 : does not exist [ 56.923809][ T450] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 56.934861][ T450] usb 6-1: USB disconnect, device number 3 [ 56.942900][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.993752][ T332] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 56.993752][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.993788][ T387] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.002996][ T332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.015189][ T387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.025681][ T332] usb 7-1: config 0 descriptor?? [ 57.038658][ T387] usb 5-1: config 0 descriptor?? [ 57.255277][ T387] usbhid 5-1:0.0: can't add hid device: -71 [ 57.261515][ T387] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 57.271693][ T387] usb 5-1: USB disconnect, device number 5 [ 57.592014][ T36] audit: type=1400 audit(1768981096.879:331): avc: denied { accept } for pid=2102 comm="syz.5.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.692489][ T332] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.843594][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.854792][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.867744][ T332] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.877024][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.885901][ T332] usb 5-1: config 0 descriptor?? [ 58.294277][ T332] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 58.303760][ T332] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 58.698031][ T332] usb 5-1: USB disconnect, device number 6 [ 58.852440][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.907667][ T388] usb 1-1: USB disconnect, device number 10 [ 58.924926][ T36] audit: type=1400 audit(1768981098.219:332): avc: denied { read } for pid=2127 comm="syz.0.744" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.948230][ T36] audit: type=1400 audit(1768981098.219:333): avc: denied { open } for pid=2127 comm="syz.0.744" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.972094][ T36] audit: type=1400 audit(1768981098.219:334): avc: denied { ioctl } for pid=2127 comm="syz.0.744" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.997232][ T36] audit: type=1400 audit(1768981098.279:335): avc: denied { mounton } for pid=2129 comm="syz.0.745" path="/proc/547/task" dev="proc" ino=16254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 59.003612][ T31] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 59.028801][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.037536][ T31] usb 6-1: config 0 descriptor?? [ 59.611190][ T388] usb 7-1: USB disconnect, device number 2 [ 59.645430][ T31] usb 6-1: Cannot set autoneg [ 59.652698][ T31] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 59.668373][ T31] usb 6-1: USB disconnect, device number 4 [ 60.389867][ T2189] kvm: pic: non byte write [ 60.652407][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.742389][ T332] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.802406][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 60.809626][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 60.820851][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.827519][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 60.836669][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.845319][ T10] usb 5-1: config 0 descriptor?? [ 60.912386][ T332] usb 7-1: Using ep0 maxpacket: 32 [ 60.918702][ T332] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.929645][ T332] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.940549][ T332] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 60.949712][ T332] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 60.958150][ T332] usb 7-1: Product: syz [ 60.962364][ T332] usb 7-1: Manufacturer: syz [ 60.969397][ T332] hub 7-1:4.0: USB hub found [ 61.170571][ T332] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 61.472458][ T332] usb 7-1: USB disconnect, device number 3 [ 61.604651][ T10] hid-generic 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 61.642444][ T388] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 61.792393][ T388] usb 6-1: Using ep0 maxpacket: 16 [ 61.798667][ T388] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 61.807556][ T388] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.818022][ T388] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.828413][ T388] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.837551][ T388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.845609][ T388] usb 6-1: Product: syz [ 61.849772][ T388] usb 6-1: Manufacturer: syz [ 61.854398][ T388] usb 6-1: SerialNumber: syz [ 61.917539][ T2212] kvm: pic: non byte write [ 61.964172][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 61.964189][ T36] audit: type=1400 audit(1768981101.259:337): avc: denied { append } for pid=2214 comm="syz.6.780" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.062867][ T388] usb 6-1: 0:2 : does not exist [ 62.073256][ T388] usb 6-1: USB disconnect, device number 5 [ 62.386448][ T2235] kvm: pic: non byte write [ 62.822439][ T332] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 62.942414][ T388] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 62.982387][ T332] usb 6-1: Using ep0 maxpacket: 32 [ 62.988701][ T332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.998966][ T332] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 63.007870][ T332] usb 6-1: config 0 interface 0 has no altsetting 0 [ 63.015873][ T332] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 63.024946][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.033004][ T332] usb 6-1: Product: syz [ 63.037164][ T332] usb 6-1: Manufacturer: syz [ 63.041740][ T332] usb 6-1: SerialNumber: syz [ 63.047022][ T332] usb 6-1: config 0 descriptor?? [ 63.053005][ T332] usb 6-1: selecting invalid altsetting 0 [ 63.104810][ T388] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 63.113885][ T388] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.121867][ T388] usb 7-1: Product: syz [ 63.126058][ T388] usb 7-1: Manufacturer: syz [ 63.130703][ T388] usb 7-1: SerialNumber: syz [ 63.136151][ T388] usb 7-1: config 0 descriptor?? [ 63.211190][ T2246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 63.254850][ T332] usb 6-1: USB disconnect, device number 6 [ 63.285083][ T36] audit: type=1326 audit(1768981358.577:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.308607][ T36] audit: type=1326 audit(1768981358.577:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.331962][ T36] audit: type=1326 audit(1768981358.577:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.356021][ T36] audit: type=1326 audit(1768981358.577:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.379532][ T36] audit: type=1326 audit(1768981358.577:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.402903][ T36] audit: type=1326 audit(1768981358.577:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2250 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e499acb9 code=0x7ffc0000 [ 63.430412][ T10] usb 5-1: USB disconnect, device number 7 [ 63.732414][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.882420][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 63.888581][ T10] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 63.899662][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 63.906571][ T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 63.915626][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.924301][ T10] usb 5-1: config 0 descriptor?? [ 64.010282][ T2270] kvm: pic: non byte write [ 64.683486][ T10] hid-generic 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 64.691083][ T10] hid-generic 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 64.698516][ T10] hid-generic 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 64.705942][ T10] hid-generic 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 64.713363][ T10] hid-generic 0003:1B1C:1C09.000E: unknown main item tag 0x0 [ 64.721425][ T10] hid-generic 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 65.112442][ T388] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 65.262396][ T388] usb 6-1: Using ep0 maxpacket: 16 [ 65.268632][ T388] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 65.277699][ T388] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.287944][ T388] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.298418][ T388] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.307513][ T388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.315570][ T388] usb 6-1: Product: syz [ 65.319750][ T388] usb 6-1: Manufacturer: syz [ 65.324375][ T388] usb 6-1: SerialNumber: syz [ 65.718068][ T332] usb 7-1: USB disconnect, device number 4 [ 65.731937][ T388] usb 6-1: 0:2 : does not exist [ 66.336463][ T388] usb 6-1: USB disconnect, device number 7 [ 66.345155][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.445717][ T31] usb 5-1: USB disconnect, device number 8 [ 66.782412][ T332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 66.812392][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 66.852606][ T2306] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 66.932388][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 66.946829][ T332] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 66.955176][ T332] usb 1-1: config 0 has no interface number 0 [ 66.961334][ T332] usb 1-1: config 0 interface 12 has no altsetting 0 [ 66.969605][ T31] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 66.972501][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.978231][ T31] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 66.994176][ T332] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 66.994570][ T31] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 67.008782][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.014073][ T31] usb 5-1: config 220 has no interface number 2 [ 67.028193][ T31] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 67.031933][ T332] usb 1-1: Product: syz [ 67.038411][ T31] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 67.050131][ T332] usb 1-1: Manufacturer: syz [ 67.060561][ T332] usb 1-1: SerialNumber: syz [ 67.066664][ T31] usb 5-1: config 220 interface 0 has no altsetting 0 [ 67.067590][ T332] usb 1-1: config 0 descriptor?? [ 67.078767][ T31] usb 5-1: config 220 interface 76 has no altsetting 0 [ 67.085731][ T31] usb 5-1: config 220 interface 1 has no altsetting 0 [ 67.094156][ T31] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 67.103298][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.111283][ T31] usb 5-1: Product: syz [ 67.115561][ T31] usb 5-1: Manufacturer: syz [ 67.120150][ T31] usb 5-1: SerialNumber: syz [ 67.153519][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 67.164889][ T10] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 67.174009][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.182853][ T10] usb 7-1: config 0 descriptor?? [ 67.329495][ T31] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 67.336065][ T31] usb 5-1: No valid video chain found. [ 67.341595][ T31] usb 5-1: selecting invalid altsetting 0 [ 67.351721][ T31] usb 5-1: USB disconnect, device number 9 [ 67.591734][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.599720][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.607246][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.614680][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.622164][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.629619][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.637052][ T10] hid-generic 0003:060B:700A.000F: unknown main item tag 0x0 [ 67.645120][ T10] hid-generic 0003:060B:700A.000F: hidraw0: USB HID v10.00 Device [HID 060b:700a] on usb-dummy_hcd.6-1/input0 [ 67.793936][ T10] usb 7-1: USB disconnect, device number 5 [ 67.981003][ T36] audit: type=1400 audit(1768981363.267:344): avc: denied { read } for pid=2322 comm="syz.4.821" path="socket:[17313]" dev="sockfs" ino=17313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.314958][ T36] audit: type=1326 audit(1768981363.607:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.338330][ T36] audit: type=1326 audit(1768981363.607:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.361662][ T36] audit: type=1326 audit(1768981363.607:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.384915][ T36] audit: type=1326 audit(1768981363.607:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.408165][ T36] audit: type=1326 audit(1768981363.607:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.431381][ T36] audit: type=1326 audit(1768981363.607:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.454597][ T36] audit: type=1326 audit(1768981363.607:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.477800][ T36] audit: type=1326 audit(1768981363.607:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 68.501010][ T36] audit: type=1326 audit(1768981363.607:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2326 comm="syz.6.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25f079acb9 code=0x7ff00000 [ 69.072398][ T388] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 69.225015][ T388] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 69.234153][ T388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.242143][ T388] usb 5-1: Product: syz [ 69.246354][ T388] usb 5-1: Manufacturer: syz [ 69.250951][ T388] usb 5-1: SerialNumber: syz [ 69.256822][ T388] usb 5-1: config 0 descriptor?? [ 69.477085][ T2346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.828'. [ 69.549258][ T10] usb 1-1: USB disconnect, device number 11 [ 69.572137][ T2361] rust_binder: 83: no such ref 0 [ 69.577385][ T2361] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 69.586939][ T2361] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 69.603740][ T2365] overlayfs: failed to resolve './file1': -2 [ 69.892434][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 70.043623][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 70.054639][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 70.063785][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.072315][ T10] usb 1-1: config 0 descriptor?? [ 70.077641][ T2363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 70.199772][ T2375] overlayfs: failed to clone upperpath [ 70.216349][ T2377] netlink: 64 bytes leftover after parsing attributes in process `syz.5.841'. [ 70.472397][ T332] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.490486][ T10] apple 0003:05AC:0241.0010: collection stack underflow [ 70.501512][ T10] apple 0003:05AC:0241.0010: item 0 0 0 12 parsing failed [ 70.508954][ T10] apple 0003:05AC:0241.0010: parse failed [ 70.514754][ T10] apple 0003:05AC:0241.0010: probe with driver apple failed with error -22 [ 70.623546][ T332] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 70.632788][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.641578][ T332] usb 6-1: config 0 descriptor?? [ 70.689411][ T332] usb 1-1: USB disconnect, device number 12 [ 70.732414][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 70.883442][ T45] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 70.893221][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.901727][ T45] usb 7-1: config 0 descriptor?? [ 71.201353][ T2388] rust_binder: 606: no such ref 0 [ 71.206618][ T2388] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 71.213897][ T2388] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 71.850298][ T31] usb 5-1: USB disconnect, device number 10 [ 72.318001][ T2409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:618 [ 73.165800][ T2414] random: crng reseeded on system resumption [ 73.165802][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 73.165816][ T36] audit: type=1400 audit(1768981368.457:431): avc: denied { write } for pid=2413 comm="syz.0.853" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.242019][ T332] usb 6-1: USB disconnect, device number 8 [ 73.276352][ T2420] syz.0.854 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 73.410613][ T2425] rust_binder: got new transaction with bad transaction stack [ 73.410638][ T2425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 73.502641][ T388] usb 7-1: USB disconnect, device number 6 [ 73.582434][ T332] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 73.644197][ T2434] netlink: 16 bytes leftover after parsing attributes in process `syz.6.861'. [ 73.665680][ T45] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 73.733718][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.744666][ T332] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.754489][ T332] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.767593][ T332] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.776678][ T332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.785256][ T332] usb 6-1: config 0 descriptor?? [ 73.822473][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 73.828870][ T45] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 73.837607][ T45] usb 1-1: config 0 has no interface number 0 [ 73.843780][ T45] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 73.855179][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 73.864300][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.872768][ T45] usb 1-1: Product: syz [ 73.877006][ T45] usb 1-1: Manufacturer: syz [ 73.881587][ T45] usb 1-1: SerialNumber: syz [ 73.886940][ T45] usb 1-1: config 0 descriptor?? [ 73.892276][ T2427] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.042382][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.101970][ T2427] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 74.192371][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 74.194895][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.200277][ T31] usb 7-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 74.205090][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.214475][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.221716][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.229886][ T31] usb 7-1: Product: syz [ 74.237146][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.241513][ T31] usb 7-1: Manufacturer: syz [ 74.248701][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.253392][ T31] usb 7-1: SerialNumber: syz [ 74.260930][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.272835][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.280244][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.287751][ T332] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 74.295543][ T332] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 74.308392][ T332] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 74.453354][ T31] usb 6-1: USB disconnect, device number 9 [ 75.030439][ T2448] rust_binder: Error while translating object. [ 75.030487][ T2448] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 75.037158][ T2448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:83 [ 75.382393][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.402395][ T332] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 75.543383][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.553456][ T332] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x2 has an invalid bInterval 254, changing to 11 [ 75.554386][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.565598][ T332] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.575665][ T31] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 75.581949][ T332] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 75.591053][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.600312][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.609267][ T31] usb 6-1: config 0 descriptor?? [ 75.622064][ T332] usb 5-1: config 0 descriptor?? [ 76.023928][ T31] arvo 0003:1E7D:30D4.0012: item fetching failed at offset 5/7 [ 76.031796][ T31] arvo 0003:1E7D:30D4.0012: parse failed [ 76.035470][ T332] wacom 0003:056A:0094.0013: Using device in hidraw-only mode [ 76.037750][ T31] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -22 [ 76.046295][ T332] wacom 0003:056A:0094.0013: hidraw0: USB HID v0.01 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 76.232385][ T31] usb 6-1: USB disconnect, device number 10 [ 76.245445][ T332] usb 5-1: USB disconnect, device number 11 [ 76.326489][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 76.336793][ T45] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 76.347307][ T45] asix 1-1:0.188: probe with driver asix failed with error -71 [ 76.355853][ T45] usb 1-1: USB disconnect, device number 13 [ 76.822498][ T45] usb 7-1: USB disconnect, device number 7 [ 77.082397][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 77.102392][ T388] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 77.243626][ T31] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 77.252899][ T388] usb 6-1: Using ep0 maxpacket: 32 [ 77.258113][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.267005][ T388] usb 6-1: too many configurations: 35, using maximum allowed: 8 [ 77.275885][ T31] usb 1-1: config 0 descriptor?? [ 77.283406][ T388] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 77.299293][ T388] usb 6-1: can't read configurations, error -61 [ 77.442428][ T388] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 77.592380][ T388] usb 6-1: Using ep0 maxpacket: 32 [ 77.602053][ T388] usb 6-1: too many configurations: 35, using maximum allowed: 8 [ 77.622866][ T388] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 77.632099][ T388] usb 6-1: can't read configurations, error -61 [ 77.639976][ T388] usb usb6-port1: attempt power cycle [ 77.902451][ T450] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 77.992507][ T388] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 78.012954][ T388] usb 6-1: Using ep0 maxpacket: 32 [ 78.018589][ T388] usb 6-1: too many configurations: 35, using maximum allowed: 8 [ 78.027855][ T388] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 78.035663][ T388] usb 6-1: can't read configurations, error -61 [ 78.052388][ T450] usb 5-1: Using ep0 maxpacket: 32 [ 78.059923][ T450] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 78.068521][ T450] usb 5-1: config 0 has no interface number 0 [ 78.076195][ T450] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 78.085421][ T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.093611][ T450] usb 5-1: Product: syz [ 78.097876][ T450] usb 5-1: Manufacturer: syz [ 78.103318][ T332] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.111213][ T450] usb 5-1: SerialNumber: syz [ 78.117164][ T450] usb 5-1: config 0 descriptor?? [ 78.123466][ T450] smsc95xx v2.0.0 [ 78.182462][ T388] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 78.202786][ T388] usb 6-1: Using ep0 maxpacket: 32 [ 78.208491][ T388] usb 6-1: too many configurations: 35, using maximum allowed: 8 [ 78.217616][ T388] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 78.225272][ T388] usb 6-1: can't read configurations, error -61 [ 78.231949][ T388] usb usb6-port1: unable to enumerate USB device [ 78.273575][ T332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.284878][ T332] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.296265][ T332] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.305415][ T332] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 78.313566][ T332] usb 7-1: Manufacturer: syz [ 78.319948][ T332] usb 7-1: config 0 descriptor?? [ 78.525438][ T450] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 78.536869][ T450] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 79.339575][ T332] uclogic 0003:256C:006D.0014: v1 frame probing failed: -71 [ 79.346969][ T332] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 79.354537][ T332] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 79.364642][ T450] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 79.375498][ T332] usb 7-1: USB disconnect, device number 8 [ 79.382253][ T450] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 79.392010][ T450] usb 5-1: USB disconnect, device number 12 [ 79.862515][ T332] usb 1-1: USB disconnect, device number 14 [ 80.302409][ T332] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 80.452380][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 80.458809][ T332] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.470294][ T332] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.483637][ T332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 80.490340][ T332] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 80.499787][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.509744][ T332] usb 1-1: config 0 descriptor?? [ 80.645733][ T2514] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 80.672414][ T2514] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 80.736310][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.750513][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.757612][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.769744][ T36] audit: type=1400 audit(1768981376.057:432): avc: denied { mount } for pid=2523 comm="syz.6.897" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.772317][ T2524] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.820241][ T36] audit: type=1400 audit(1768981376.107:433): avc: denied { unmount } for pid=2066 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.851777][ T36] audit: type=1400 audit(1768981376.137:434): avc: denied { block_suspend } for pid=2521 comm="syz.5.896" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.929014][ T332] hid-generic 0003:044E:121E.0015: unknown main item tag 0x1 [ 80.936615][ T332] hid-generic 0003:044E:121E.0015: unknown main item tag 0x2 [ 80.944829][ T332] hid-generic 0003:044E:121E.0015: hidraw0: USB HID v0.01 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0 [ 81.033791][ T2538] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 81.041125][ T2538] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 81.052724][ T450] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 81.130120][ T10] usb 1-1: USB disconnect, device number 15 [ 81.212419][ T450] usb 5-1: Using ep0 maxpacket: 32 [ 81.218870][ T450] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 81.227153][ T450] usb 5-1: config 0 has no interface number 0 [ 81.233543][ T450] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.244930][ T450] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 81.254133][ T450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.262112][ T450] usb 5-1: Product: syz [ 81.266286][ T450] usb 5-1: Manufacturer: syz [ 81.270965][ T450] usb 5-1: SerialNumber: syz [ 81.276196][ T450] usb 5-1: config 0 descriptor?? [ 81.362433][ T332] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 81.512407][ T332] usb 6-1: Using ep0 maxpacket: 8 [ 81.519881][ T332] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 81.528988][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.537191][ T332] usb 6-1: Product: syz [ 81.541340][ T332] usb 6-1: Manufacturer: syz [ 81.545970][ T332] usb 6-1: SerialNumber: syz [ 81.551174][ T332] usb 6-1: config 0 descriptor?? [ 81.912421][ T332] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 82.064721][ T332] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 82.073912][ T332] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.081921][ T332] usb 7-1: Product: syz [ 82.086139][ T332] usb 7-1: Manufacturer: syz [ 82.090737][ T332] usb 7-1: SerialNumber: syz [ 82.096031][ T332] usb 7-1: config 0 descriptor?? [ 82.822430][ T332] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 82.972404][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 82.978648][ T332] usb 1-1: config 5 has an invalid interface number: 15 but max is 0 [ 82.986874][ T332] usb 1-1: config 5 has no interface number 0 [ 82.993000][ T332] usb 1-1: config 5 interface 15 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 83.004597][ T332] usb 1-1: config 5 interface 15 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.014611][ T332] usb 1-1: config 5 interface 15 has no altsetting 0 [ 83.022778][ T332] usb 1-1: New USB device found, idVendor=2013, idProduct=025f, bcdDevice=74.eb [ 83.031839][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.040234][ T332] usb 1-1: Product: syz [ 83.044430][ T332] usb 1-1: Manufacturer: syz [ 83.049126][ T332] usb 1-1: SerialNumber: syz [ 83.054667][ T2561] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.267560][ T332] usb 1-1: USB disconnect, device number 16 [ 83.824810][ T450] usb 5-1: USB disconnect, device number 13 [ 83.839797][ T2571] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 83.847467][ T2571] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 83.971902][ T2580] rust_binder: 666: no such ref 0 [ 84.130494][ T31] usb 6-1: USB disconnect, device number 15 [ 84.152764][ T2588] overlayfs: missing 'lowerdir' [ 84.174269][ T36] audit: type=1400 audit(1768981379.467:435): avc: denied { mount } for pid=2589 comm="syz.5.918" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 84.302404][ T450] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 84.437068][ T2609] overlayfs: missing 'lowerdir' [ 84.453441][ T450] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.463765][ T450] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 84.477207][ T450] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.486640][ T450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.495864][ T450] usb 5-1: config 0 descriptor?? [ 84.503813][ T450] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 84.690709][ T450] usb 7-1: USB disconnect, device number 9 [ 84.840673][ T2634] overlayfs: missing 'lowerdir' [ 85.482799][ T2646] rust_binder: Error while translating object. [ 85.482922][ T2646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 85.489190][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:678 [ 85.992425][ T450] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 86.112385][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 86.163420][ T450] usb 1-1: config 8 has an invalid interface number: 85 but max is 0 [ 86.171622][ T450] usb 1-1: config 8 has no interface number 0 [ 86.177968][ T450] usb 1-1: config 8 interface 85 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 86.189025][ T450] usb 1-1: config 8 interface 85 has no altsetting 0 [ 86.195882][ T450] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=88.34 [ 86.205075][ T450] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.217183][ T2667] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 86.262381][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 86.268727][ T31] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 86.277260][ T31] usb 6-1: config 0 has no interface number 0 [ 86.283645][ T31] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.294012][ T31] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.304642][ T31] usb 6-1: config 0 interface 41 has no altsetting 0 [ 86.313113][ T31] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 86.322467][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.330646][ T31] usb 6-1: Product: syz [ 86.335461][ T31] usb 6-1: Manufacturer: syz [ 86.340174][ T31] usb 6-1: SerialNumber: syz [ 86.346223][ T31] usb 6-1: config 0 descriptor?? [ 86.351600][ T2673] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 86.359176][ T2673] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 86.426667][ T450] usb 1-1: string descriptor 0 read error: -71 [ 86.434468][ T450] usb 1-1: USB disconnect, device number 17 [ 86.568144][ T2673] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 86.575797][ T2673] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 86.882898][ T45] usb 5-1: USB disconnect, device number 14 [ 86.926283][ T2684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.957'. [ 86.984322][ T31] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 87.385011][ T31] dm9601 6-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 87.395651][ T31] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 87.408084][ T31] usb 6-1: USB disconnect, device number 16 [ 87.532403][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 87.692397][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 87.700645][ T10] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 87.709702][ T10] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 87.718465][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 87.728764][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 87.738092][ T10] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 87.746719][ T10] usb 5-1: Product: syz [ 87.750933][ T10] usb 5-1: Manufacturer: syz [ 87.756207][ T10] usb 5-1: config 0 descriptor?? [ 87.762183][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 87.770210][ T10] usb 5-1: Detected FT2232C/D [ 87.863148][ T36] audit: type=1400 audit(1768981383.157:436): avc: denied { create } for pid=2712 comm="syz.6.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.917693][ T2719] gre0: entered allmulticast mode [ 87.929597][ T2716] gre0: left allmulticast mode [ 87.941319][ T2723] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 87.948806][ T2723] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 87.968784][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 87.968955][ T2728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.978070][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.335662][ T45] usb 5-1: USB disconnect, device number 15 [ 88.382202][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.443013][ T45] ftdi_sio 5-1:0.0: device disconnected [ 88.543404][ T36] audit: type=1400 audit(1768981383.837:437): avc: denied { watch } for pid=2765 comm="syz.6.991" path="/86/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 88.733255][ T2768] input: syz1 as /devices/virtual/input/input12 [ 88.951174][ T2795] input: syz0 as /devices/virtual/input/input13 [ 88.982123][ T36] audit: type=1400 audit(1768981384.267:438): avc: denied { unmount } for pid=1873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.069102][ T46] bridge_slave_1: left allmulticast mode [ 89.075000][ T46] bridge_slave_1: left promiscuous mode [ 89.080757][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.089174][ T46] bridge_slave_0: left allmulticast mode [ 89.095281][ T46] bridge_slave_0: left promiscuous mode [ 89.100915][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.152409][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 89.206253][ T46] veth1_macvtap: left promiscuous mode [ 89.211846][ T46] veth0_vlan: left promiscuous mode [ 89.247136][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.254391][ T2803] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.261515][ T2803] bridge_slave_0: entered allmulticast mode [ 89.268162][ T2803] bridge_slave_0: entered promiscuous mode [ 89.274507][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.281543][ T2803] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.288871][ T2803] bridge_slave_1: entered allmulticast mode [ 89.295142][ T2803] bridge_slave_1: entered promiscuous mode [ 89.312406][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 89.318681][ T45] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.326995][ T45] usb 1-1: config 0 has no interface number 0 [ 89.334726][ T45] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 89.344286][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.352615][ T45] usb 1-1: Product: syz [ 89.356797][ T45] usb 1-1: Manufacturer: syz [ 89.361399][ T45] usb 1-1: SerialNumber: syz [ 89.362709][ T2803] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.372871][ T45] usb 1-1: config 0 descriptor?? [ 89.373060][ T2803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.385245][ T2803] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.392300][ T2803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.411210][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.418845][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.428648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.435736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.445073][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.452129][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.476972][ T2803] veth0_vlan: entered promiscuous mode [ 89.487680][ T2803] veth1_macvtap: entered promiscuous mode [ 89.505891][ T36] audit: type=1400 audit(1768981384.797:439): avc: denied { mount } for pid=2803 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 89.537779][ T2814] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1010'. [ 89.586270][ T2791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.594968][ T2791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.768032][ T36] audit: type=1400 audit(1768981385.037:440): avc: denied { ioctl } for pid=2829 comm="syz.4.1017" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.816742][ T36] audit: type=1400 audit(1768981385.097:441): avc: denied { ioctl } for pid=2834 comm="syz.6.1019" path="socket:[21067]" dev="sockfs" ino=21067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.062441][ T45] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 91.212404][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 91.218854][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.229035][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 91.239352][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.248627][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.256850][ T45] usb 5-1: Product: syz [ 91.261060][ T45] usb 5-1: Manufacturer: syz [ 91.265777][ T45] usb 5-1: SerialNumber: syz [ 91.474058][ T45] usb 5-1: 0:2 : does not exist [ 91.479028][ T45] usb 5-1: unit 9 not found! [ 91.485399][ T45] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 91.494838][ T45] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 91.504181][ T45] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 91.514678][ T45] usb 5-1: USB disconnect, device number 16 [ 91.942247][ T45] usb 1-1: USB disconnect, device number 18 [ 92.019057][ T36] audit: type=1400 audit(1768981387.307:442): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.556421][ T36] audit: type=1400 audit(1768981387.847:443): avc: denied { bind } for pid=2884 comm="syz.6.1039" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.605837][ T36] audit: type=1400 audit(1768981387.847:444): avc: denied { name_bind } for pid=2884 comm="syz.6.1039" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.639628][ T36] audit: type=1400 audit(1768981387.847:445): avc: denied { node_bind } for pid=2884 comm="syz.6.1039" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 92.687009][ T2894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159 [ 92.816831][ T2910] fuse: Bad value for 'fd' [ 92.924300][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 92.924317][ T36] audit: type=1400 audit(1768981388.217:447): avc: denied { search } for pid=2920 comm="syz.4.1056" name="/" dev="configfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 93.042407][ T387] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 93.192392][ T387] usb 7-1: Using ep0 maxpacket: 8 [ 93.198613][ T387] usb 7-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.208773][ T387] usb 7-1: config 0 interface 0 has no altsetting 0 [ 93.215574][ T387] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 93.224929][ T387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.233898][ T387] usb 7-1: config 0 descriptor?? [ 93.292436][ T450] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 93.453484][ T450] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.463782][ T450] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 93.473107][ T450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.491718][ T450] usb 5-1: config 0 descriptor?? [ 93.499046][ T450] usb 5-1: bad CDC descriptors [ 93.648765][ T387] lua 0003:1E7D:2C2E.0016: global environment stack underflow [ 93.688998][ T387] lua 0003:1E7D:2C2E.0016: item 0 0 1 11 parsing failed [ 93.777961][ T387] lua 0003:1E7D:2C2E.0016: parse failed [ 93.823742][ T45] usb 5-1: USB disconnect, device number 17 [ 93.857254][ T387] lua 0003:1E7D:2C2E.0016: probe with driver lua failed with error -22 [ 93.874778][ T387] usb 7-1: USB disconnect, device number 10 [ 94.449994][ T2933] fuse: Bad value for 'fd' [ 95.012441][ T387] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 95.175636][ T387] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 95.184823][ T387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.193311][ T387] usb 7-1: Product: syz [ 95.198033][ T387] usb 7-1: Manufacturer: syz [ 95.202821][ T387] usb 7-1: SerialNumber: syz [ 95.211602][ T387] usb 7-1: config 0 descriptor?? [ 95.420894][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.430404][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.462414][ T387] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 95.615180][ T387] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.624474][ T387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.632687][ T387] usb 5-1: Product: syz [ 95.637212][ T387] usb 5-1: Manufacturer: syz [ 95.641824][ T387] usb 5-1: SerialNumber: syz [ 95.651042][ T387] usb 5-1: config 0 descriptor?? [ 97.778159][ T10] usb 7-1: USB disconnect, device number 11 [ 97.813535][ T2964] fuse: Bad value for 'fd' [ 98.261859][ T45] usb 5-1: USB disconnect, device number 18 [ 98.582915][ T2989] rust_binder: 206: no such ref 0 [ 98.588971][ T2989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 98.612450][ T2986] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.719909][ T2993] 9pnet_fd: Insufficient options for proto=fd [ 99.052397][ T388] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 99.213445][ T388] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 250, using maximum allowed: 30 [ 99.226875][ T388] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 99.249755][ T388] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 99.283556][ T388] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.291564][ T388] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 99.301060][ T388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.313423][ T2997] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1084'. [ 99.322763][ T388] usb 7-1: config 0 descriptor?? [ 99.328003][ T2995] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 99.572918][ T36] audit: type=1326 audit(1768981394.857:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3000 comm="syz.4.1086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f3db9acb9 code=0x0 [ 99.740431][ T388] playstation 0003:054C:05C4.0017: unknown main item tag 0x2 [ 99.763199][ T388] playstation 0003:054C:05C4.0017: hidraw0: USB HID v0.06 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 99.796237][ T3013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:224 [ 99.857582][ T3020] 9pnet_fd: Insufficient options for proto=fd [ 99.939841][ T388] playstation 0003:054C:05C4.0017: Failed to retrieve feature with reportID 18: -71 [ 99.949481][ T388] playstation 0003:054C:05C4.0017: Failed to retrieve DualShock4 pairing info: -71 [ 99.958988][ T388] playstation 0003:054C:05C4.0017: Failed to get MAC address from DualShock4 [ 99.968014][ T388] playstation 0003:054C:05C4.0017: Failed to create dualshock4. [ 99.976491][ T388] playstation 0003:054C:05C4.0017: probe with driver playstation failed with error -71 [ 99.991910][ T388] usb 7-1: USB disconnect, device number 12 [ 100.579967][ T3035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288 [ 101.008195][ T388] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 101.182173][ T3059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 101.242436][ T388] usb 7-1: Using ep0 maxpacket: 8 [ 101.259055][ T388] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 101.267960][ T388] usb 7-1: config 0 has no interface number 0 [ 101.276053][ T388] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16 [ 101.285539][ T388] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.293927][ T388] usb 7-1: Product: syz [ 101.298304][ T388] usb 7-1: Manufacturer: syz [ 101.303435][ T388] usb 7-1: SerialNumber: syz [ 101.310494][ T388] usb 7-1: config 0 descriptor?? [ 101.521585][ T388] uvcvideo 7-1:0.31: Found Unit with invalid ID 0 [ 101.532511][ T388] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 101.539033][ T388] usb 7-1: No valid video chain found. [ 101.551380][ T388] usb 7-1: USB disconnect, device number 13 [ 102.161619][ T3078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299 [ 102.872386][ T45] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 103.063693][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.074123][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 103.104461][ T45] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 103.122432][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.150309][ T450] kernel read not supported for file /72/uid_map (pid: 450 comm: kworker/0:3) [ 103.150850][ T45] usb 5-1: config 0 descriptor?? [ 103.492404][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 103.642388][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 103.648858][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.660991][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.671111][ T10] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 103.680392][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.689868][ T10] usb 7-1: config 0 descriptor?? [ 104.113567][ T10] hid-generic 0003:258A:0033.0018: hidraw0: USB HID v0.00 Device [HID 258a:0033] on usb-dummy_hcd.6-1/input0 [ 104.314381][ T45] usb 7-1: USB disconnect, device number 14 [ 105.082399][ T1750] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 105.232394][ T1750] usb 7-1: Using ep0 maxpacket: 16 [ 105.238878][ T1750] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 105.250761][ T1750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 105.263916][ T1750] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.273272][ T1750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.281384][ T1750] usb 7-1: Product: syz [ 105.285971][ T1750] usb 7-1: Manufacturer: syz [ 105.290678][ T1750] usb 7-1: SerialNumber: syz [ 105.296558][ T1750] usb 7-1: config 0 descriptor?? [ 105.647741][ T388] usb 5-1: USB disconnect, device number 19 [ 107.295158][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.302362][ T3137] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.309797][ T3137] bridge_slave_0: entered allmulticast mode [ 107.317294][ T3137] bridge_slave_0: entered promiscuous mode [ 107.324275][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.331377][ T3137] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.338587][ T3137] bridge_slave_1: entered allmulticast mode [ 107.345040][ T3137] bridge_slave_1: entered promiscuous mode [ 107.351219][ T12] bridge_slave_1: left allmulticast mode [ 107.356990][ T12] bridge_slave_1: left promiscuous mode [ 107.362734][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.370308][ T12] bridge_slave_0: left allmulticast mode [ 107.376069][ T12] bridge_slave_0: left promiscuous mode [ 107.381689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.456327][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.463427][ T3137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.470681][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.477737][ T3137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.485053][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 107.494477][ T12] tipc: Left network mode [ 107.500039][ T12] veth1_macvtap: left promiscuous mode [ 107.505755][ T12] veth0_vlan: left promiscuous mode [ 107.544924][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.557495][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.564587][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.586988][ T3137] veth0_vlan: entered promiscuous mode [ 107.599942][ T3137] veth1_macvtap: entered promiscuous mode [ 107.642423][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 107.648982][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.657350][ T10] usb 5-1: config 0 has no interface number 0 [ 107.665133][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 107.673327][ T36] audit: type=1326 audit(1768981402.967:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.673426][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.706786][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.714861][ T10] usb 5-1: Product: syz [ 107.719220][ T10] usb 5-1: Manufacturer: syz [ 107.723751][ T36] audit: type=1326 audit(1768981402.987:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.724109][ T10] usb 5-1: SerialNumber: syz [ 107.747449][ T36] audit: type=1326 audit(1768981402.997:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.770350][ T10] usb 5-1: config 0 descriptor?? [ 107.780535][ T36] audit: type=1326 audit(1768981402.997:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.788522][ T10] smsc75xx v1.0.0 [ 107.805129][ T36] audit: type=1326 audit(1768981403.007:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.831750][ T36] audit: type=1326 audit(1768981403.007:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.855774][ T36] audit: type=1326 audit(1768981403.007:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.872601][ T1750] usb 7-1: USB disconnect, device number 15 [ 107.887379][ T36] audit: type=1326 audit(1768981403.007:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.901882][ T3154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3154 comm=syz.6.1143 [ 107.911249][ T36] audit: type=1326 audit(1768981403.007:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 107.948081][ T36] audit: type=1326 audit(1768981403.007:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3148 comm="syz.8.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674359acb9 code=0x7ffc0000 [ 108.554715][ T12] bridge_slave_1: left allmulticast mode [ 108.560397][ T12] bridge_slave_1: left promiscuous mode [ 108.566354][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.574223][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.665620][ T12] veth1_macvtap: left promiscuous mode [ 108.671251][ T12] veth0_vlan: left promiscuous mode [ 108.747697][ T3229] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.755060][ T3229] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.762388][ T3229] bridge_slave_0: entered allmulticast mode [ 108.768877][ T3229] bridge_slave_0: entered promiscuous mode [ 108.775710][ T3229] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.782844][ T3229] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.789991][ T3229] bridge_slave_1: entered allmulticast mode [ 108.796654][ T3229] bridge_slave_1: entered promiscuous mode [ 108.809787][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 108.851527][ T3229] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.858633][ T3229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.866216][ T3229] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.873276][ T3229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.894773][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.902127][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.911581][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.918650][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.930599][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.937704][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.969984][ T3229] veth0_vlan: entered promiscuous mode [ 108.984797][ T3229] veth1_macvtap: entered promiscuous mode [ 109.020479][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 109.032448][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 109.042113][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 109.053296][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.062832][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 109.073866][ T10] usb 5-1: USB disconnect, device number 20 [ 109.222461][ T332] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 109.374780][ T332] usb 9-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=23.8e [ 109.383964][ T332] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.391963][ T332] usb 9-1: Product: syz [ 109.396165][ T332] usb 9-1: Manufacturer: syz [ 109.400759][ T332] usb 9-1: SerialNumber: syz [ 109.407905][ T332] zaurus 9-1:255.0: probe with driver zaurus failed with error -22 [ 109.609719][ T332] usb 9-1: USB disconnect, device number 2 [ 109.912455][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 110.065362][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 110.066707][ T3265] dummy0: entered promiscuous mode [ 110.076407][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.084954][ T3264] dummy0: left promiscuous mode [ 110.092541][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.107816][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 110.121060][ T10] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 110.132211][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.143422][ T10] usb 5-1: config 0 descriptor?? [ 110.156173][ T3271] tipc: Enabling of bearer rejected, failed to enable media [ 110.472434][ T450] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 110.554599][ T10] greenasia 0003:0E8F:0012.0019: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 110.566973][ T10] greenasia 0003:0E8F:0012.0019: no inputs found [ 110.622441][ T450] usb 9-1: Using ep0 maxpacket: 32 [ 110.628963][ T450] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 110.640919][ T450] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.650659][ T450] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 110.662974][ T450] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 110.673953][ T450] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 110.685155][ T450] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 110.694317][ T450] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.702480][ T450] usb 9-1: Product: syz [ 110.706653][ T450] usb 9-1: Manufacturer: syz [ 110.711406][ T450] usb 9-1: SerialNumber: syz [ 110.716630][ T450] usb 9-1: config 0 descriptor?? [ 110.723044][ T450] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input14 [ 110.756152][ T387] usb 5-1: USB disconnect, device number 21 [ 110.931280][ T450] usb 9-1: USB disconnect, device number 3 [ 111.322458][ T45] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 111.483738][ T45] usb 10-1: Using ep0 maxpacket: 32 [ 111.499237][ T45] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 111.509156][ T45] usb 10-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 111.517901][ T45] usb 10-1: Manufacturer: syz [ 111.523501][ T45] usb 10-1: config 0 descriptor?? [ 111.927306][ T3316] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1617207373 (3234414746 ns) > initial count (443187862 ns). Using initial count to start timer. [ 112.182427][ T45] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 112.334817][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 112.341326][ T45] usb 5-1: config 0 has no interfaces? [ 112.348573][ T45] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 112.358203][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.370322][ T45] usb 5-1: config 0 descriptor?? [ 112.579123][ T332] usb 5-1: USB disconnect, device number 22 [ 112.602939][ T450] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 112.753445][ T450] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 112.761623][ T450] usb 9-1: config 0 has no interface number 0 [ 112.767787][ T450] usb 9-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 112.779153][ T450] usb 9-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.792803][ T450] usb 9-1: config 0 interface 255 has no altsetting 0 [ 112.799573][ T450] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 112.808915][ T450] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.817495][ T450] usb 9-1: config 0 descriptor?? [ 113.025102][ T45] usb 9-1: USB disconnect, device number 4 [ 113.121222][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 113.121238][ T36] audit: type=1400 audit(1768981408.407:505): avc: denied { audit_control } for pid=3326 comm="syz.4.1205" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 113.372423][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 113.522414][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 113.537388][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.547256][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.558204][ T36] audit: type=1400 audit(1768981408.847:506): avc: denied { ioctl } for pid=3332 comm="syz.8.1208" path="net:[4026532555]" dev="nsfs" ino=4026532555 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.561413][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.593410][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.606537][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.615639][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.098917][ T31] usb 10-1: USB disconnect, device number 2 [ 114.432412][ T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 114.524422][ T36] audit: type=1400 audit(1768981409.817:507): avc: denied { connect } for pid=3349 comm="syz.8.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.583534][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.600512][ T31] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.615000][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.623917][ T31] usb 10-1: config 0 descriptor?? [ 114.833250][ T31] usbhid 10-1:0.0: can't add hid device: -71 [ 114.839856][ T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 114.851482][ T31] usb 10-1: USB disconnect, device number 3 [ 115.251734][ T36] audit: type=1400 audit(1768981410.537:508): avc: denied { execute } for pid=3370 comm="syz.8.1224" path="/file1" dev="ramfs" ino=25731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 115.274407][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 115.387617][ T36] audit: type=1400 audit(1768981410.677:509): avc: denied { read } for pid=3375 comm="syz.7.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 115.444640][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.455693][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.468842][ T31] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.478353][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.487550][ T31] usb 10-1: config 0 descriptor?? [ 115.895077][ T31] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 115.903833][ T31] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 116.147413][ T1750] usb 5-1: USB disconnect, device number 23 [ 116.353502][ T10] usb 10-1: USB disconnect, device number 4 [ 116.442449][ T1750] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 116.532440][ T387] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 116.592384][ T1750] usb 5-1: Using ep0 maxpacket: 32 [ 116.598596][ T1750] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.606996][ T1750] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.615670][ T1750] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.624674][ T1750] usb 5-1: config 1 has no interface number 0 [ 116.630782][ T1750] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.641742][ T1750] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 116.654682][ T1750] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 116.663752][ T1750] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.693665][ T387] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 116.701892][ T387] usb 9-1: config 0 has no interface number 0 [ 116.708107][ T387] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 116.718182][ T387] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 116.727308][ T387] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.735916][ T387] usb 9-1: config 0 descriptor?? [ 116.946468][ T387] usb 9-1: USB disconnect, device number 5 [ 117.118018][ T3435] ------------[ cut here ]------------ [ 117.123566][ T3435] WARNING: CPU: 0 PID: 3435 at arch/x86/kvm/x86.c:11253 vcpu_run+0x759d/0x7840 [ 117.132633][ T3435] Modules linked in: [ 117.136571][ T3435] CPU: 0 UID: 0 PID: 3435 Comm: syz.9.1250 Not tainted syzkaller #0 bfede744b46277b76d69ebe6cb8c22209d769bcb [ 117.148160][ T3435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.158294][ T3435] RIP: 0010:vcpu_run+0x759d/0x7840 [ 117.163532][ T3435] Code: 1f 48 83 c3 20 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 5c 02 00 00 44 88 33 eb 78 e8 1a e3 6a 00 eb 71 e8 13 e3 6a 00 <0f> 0b 4d 89 f5 eb 65 e8 07 e3 6a 00 48 8b 84 24 b8 00 00 00 42 80 [ 117.183222][ T3435] RSP: 0018:ffffc90008def540 EFLAGS: 00010287 [ 117.189321][ T3435] RAX: ffffffff811ca2fd RBX: 00000000fffffff0 RCX: 0000000000080000 [ 117.197516][ T3435] RDX: ffffc90002655000 RSI: 0000000000000294 RDI: 0000000000000295 [ 117.205552][ T3435] RBP: ffffc90008def9d0 R08: ffff88812a5d5ae7 R09: 1ffff110254bab5c [ 117.213553][ T3435] R10: dffffc0000000000 R11: ffffed10254bab5d R12: dffffc0000000000 [ 117.221535][ T3435] R13: ffff88812e69025c R14: dffffc0000000000 R15: ffff88812e690000 [ 117.229631][ T3435] FS: 00007f50ca7f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 117.238692][ T3435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.245562][ T3435] CR2: 00007f50ca7f7d58 CR3: 0000000125e22000 CR4: 00000000003526b0 [ 117.253596][ T3435] Call Trace: [ 117.256965][ T3435] [ 117.259893][ T3435] ? sched_clock_noinstr+0xd/0x30 [ 117.264959][ T3435] ? __switch_to+0xc4f/0x1300 [ 117.269668][ T3435] ? generic_exec_single+0x1fd/0x500 [ 117.275017][ T3435] ? signal_pending+0xc0/0xc0 [ 117.279820][ T3435] ? __kasan_check_write+0x18/0x20 [ 117.284981][ T3435] ? xfd_validate_state+0x68/0x140 [ 117.290397][ T3435] ? fpu_swap_kvm_fpstate+0x92/0x5e0 [ 117.295720][ T3435] ? __kasan_check_write+0x18/0x20 [ 117.301046][ T3435] ? fpregs_mark_activate+0x68/0x160 [ 117.306371][ T3435] ? fpu_swap_kvm_fpstate+0x44c/0x5e0 [ 117.311858][ T3435] kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0 [ 117.317637][ T3435] ? synchronize_rcu_expedited+0x728/0x970 [ 117.323497][ T3435] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 117.329495][ T3435] ? __cfi_wait_rcu_exp_gp+0x10/0x10 [ 117.335173][ T3435] ? ioctl_has_perm+0x1bc/0x500 [ 117.340127][ T3435] ? ioctl_has_perm+0x408/0x500 [ 117.345056][ T3435] ? has_cap_mac_admin+0xd0/0xd0 [ 117.350013][ T3435] ? synchronize_rcu+0x77/0x2f0 [ 117.354909][ T3435] ? __cfi_synchronize_rcu+0x10/0x10 [ 117.360205][ T3435] ? handle_mm_fault+0x171c/0x1bf0 [ 117.365375][ T3435] ? __kasan_check_write+0x18/0x20 [ 117.370539][ T3435] kvm_vcpu_ioctl+0xa48/0x1000 [ 117.375343][ T3435] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.380558][ T3435] ? _raw_spin_lock_irq+0x93/0x120 [ 117.385700][ T3435] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 117.391262][ T3435] ? __kasan_check_write+0x18/0x20 [ 117.396412][ T3435] ? __kasan_check_write+0x18/0x20 [ 117.401532][ T3435] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 117.407029][ T3435] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 117.413003][ T3435] ? __fget_files+0x2c5/0x340 [ 117.417704][ T3435] ? bpf_lsm_file_ioctl+0xd/0x20 [ 117.423041][ T3435] ? security_file_ioctl+0x3e/0x110 [ 117.428270][ T3435] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 117.433502][ T3435] __se_sys_ioctl+0x132/0x1b0 [ 117.438199][ T3435] __x64_sys_ioctl+0x7f/0xa0 [ 117.442822][ T3435] x64_sys_call+0x1878/0x2ee0 [ 117.447617][ T3435] do_syscall_64+0x57/0xf0 [ 117.452051][ T3435] ? clear_bhb_loop+0x50/0xa0 [ 117.456802][ T3435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.462750][ T3435] RIP: 0033:0x7f50cbd9acb9 [ 117.467182][ T3435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.486913][ T3435] RSP: 002b:00007f50ca7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.495540][ T3435] RAX: ffffffffffffffda RBX: 00007f50cc016180 RCX: 00007f50cbd9acb9 [ 117.503616][ T3435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 117.511683][ T3435] RBP: 00007f50cbe08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 117.519685][ T3435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.527684][ T3435] R13: 00007f50cc016218 R14: 00007f50cc016180 R15: 00007ffcf61b0ce8 [ 117.535736][ T3435] [ 117.538769][ T3435] ---[ end trace 0000000000000000 ]--- [ 119.152476][ T450] usb 5-1: USB disconnect, device number 24