last executing test programs: 14m37.132872418s ago: executing program 0 (id=3316): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x488d5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f00000000c0)={0x0}) 14m37.068458011s ago: executing program 0 (id=3317): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0xd000, 0xd, 0x2, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2d, 0x19}, {0x100000, 0x80a0000, 0xc, 0x0, 0x40, 0x50, 0x7d, 0x2, 0x5, 0x3, 0x3, 0x9b}, {0xdddd1000, 0x1000, 0xe, 0x2, 0x3, 0x5, 0x0, 0x19, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x6000, 0x9, 0x6, 0x4, 0x1, 0x5, 0xff, 0x8, 0x7, 0xe, 0x8}, {0x4000, 0xffff1000, 0x8, 0x83, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0x9e, 0x80, 0x11, 0x1, 0xfd}, {0x8080000, 0x2, 0xd, 0x5, 0x3, 0x45, 0x7, 0x3, 0xaf, 0x81, 0xff, 0x70}, {0x12b000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x9}, {0x1, 0x30}, {0x0, 0x7}, 0x80000031, 0x0, 0x318ac17aca5ae84d, 0x2024, 0xc, 0x10800, 0x8000c00, [0x6800000000000003, 0x4, 0x5e, 0x3]}) 14m37.068275361s ago: executing program 0 (id=3318): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000805) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101403, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 14m37.020373144s ago: executing program 0 (id=3320): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) 14m36.960319046s ago: executing program 0 (id=3321): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) 14m36.960109166s ago: executing program 0 (id=3322): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) 14m21.958185955s ago: executing program 32 (id=3322): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x1) 2.062109222s ago: executing program 3 (id=26644): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) 1.738551446s ago: executing program 3 (id=26646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000280)="a6", 0x1, 0x24000041, 0x0, 0x0) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1.700181927s ago: executing program 3 (id=26648): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000001c0)="e37af84322d42e8e9913b7e624dae30f65d161fe185f5768852480d860f8fd184b099be3ff1f5a3a2237e378bd10005ed2199a8c43bc68a1758ada59726151a8db725c0816d97249853d931983a053a673e77e5d9b2b4406341c164a14341ed9ec36f9df4884eea5dc1fc91885dc893b3c3d4eb39c369e4cd0d938e971d725ba8697", 0x82}], 0x1}}], 0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 1.653054599s ago: executing program 3 (id=26650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.604364441s ago: executing program 4 (id=26651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$inet6(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) 1.604022981s ago: executing program 3 (id=26652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000980) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x20000000000) 1.39670714s ago: executing program 4 (id=26657): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) 1.320290383s ago: executing program 4 (id=26658): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000b80), 0x0, 0x804) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 1.260542936s ago: executing program 4 (id=26660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='T'], 0x54}}, 0x20004010) 901.095211ms ago: executing program 1 (id=26668): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c87f2e35cfcfb8c2640f196b51947b17d5785231425317285b58535073e2f7", 0x20}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) unshare(0x62040200) 819.841675ms ago: executing program 1 (id=26669): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 802.050006ms ago: executing program 1 (id=26670): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 786.958566ms ago: executing program 1 (id=26671): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 763.436917ms ago: executing program 1 (id=26672): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000005010040"]) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x2c0, &(0x7f0000000d00)=[0xe0b, 0x8dd, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0xffffffffffffff7d, 0xd, 0x2, 0x7, 0x7, 0x7ffffffffffffffe, 0xfffffffffffeffff, 0x0, 0x7ff, 0x4, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0xc, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x2003, 0xc0e4, 0x1, 0x86, 0x7, 0x630, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0xfffffffffffffffc, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x800, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x6, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x6, 0xffffffffffff7498, 0x1, 0x511, 0x90, 0x9, 0x20008, 0x9, 0xd, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xfffffffffffdff67, 0x67, 0x1a, 0x6, 0x1, 0x7, 0xfe6, 0xa, 0x3, 0x6, 0x1fe, 0x8000000000000000, 0x8, 0x8, 0x3, 0x2, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0x9, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xe, 0x3]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000480)=ANY=[@ANYBLOB="0600000000000008ffffff"]) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000001000/0x3000)=nil, r4, 0x2, 0x13, r3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 762.680997ms ago: executing program 3 (id=26673): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 623.426933ms ago: executing program 2 (id=26678): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100", 0x16}], 0x1) 620.472603ms ago: executing program 1 (id=26679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 612.999974ms ago: executing program 2 (id=26680): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 557.711646ms ago: executing program 2 (id=26681): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) 456.30816ms ago: executing program 2 (id=26682): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4000980) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x20000000000) 407.006652ms ago: executing program 2 (id=26683): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB]) 350.978034ms ago: executing program 2 (id=26684): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000980)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0xa, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0x81, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x0, 0xb, 0x0, 0x3, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xff, 0x0, 0xb, 0x5, 0x7, 0x9, 0xfd}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) 296.331787ms ago: executing program 4 (id=26685): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=26686): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) kernel console output (not intermixed with test programs): 14892][ T330] usb 4-1: Using ep0 maxpacket: 8 [ 1196.921171][ T330] usb 4-1: config 0 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.932322][ T330] usb 4-1: config 0 interface 0 altsetting 208 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.942290][ T330] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1196.949687][ T330] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1196.958961][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.967881][ T330] usb 4-1: config 0 descriptor?? [ 1197.006034][ T5153] usb 3-1: 2:1 : invalid UAC_AS_GENERAL desc [ 1197.015825][ T5153] usb 3-1: USB disconnect, device number 81 [ 1197.028856][T10602] udevd[10602]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1197.043014][ T621] usb 5-1: Using ep0 maxpacket: 8 [ 1197.052628][ T621] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1197.062195][ T621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.070493][ T621] usb 5-1: Product: syz [ 1197.074844][ T621] usb 5-1: Manufacturer: syz [ 1197.079512][ T621] usb 5-1: SerialNumber: syz [ 1197.084877][ T621] usb 5-1: config 0 descriptor?? [ 1197.411167][ T330] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 1197.419001][ T330] holtek 0003:1241:5015.0019: hidraw0: USB HID v0.04 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 1197.430533][ T330] holtek 0003:1241:5015.0019: no inputs found [ 1197.639204][ T330] usb 4-1: USB disconnect, device number 65 [ 1197.729238][T17680] overlayfs: failed to resolve './file1': -2 [ 1197.882283][T17690] loop3: detected capacity change from 0 to 7 [ 1198.044171][T17699] overlayfs: failed to resolve './file1': -2 [ 1198.109202][T17709] can0: slcan on ttyS3. [ 1198.161339][T17708] can0 (unregistered): slcan off ttyS3. [ 1198.363493][T17748] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1198.428090][T17760] 9pnet_fd: Insufficient options for proto=fd [ 1198.674718][T17781] can0: slcan on ttyS3. [ 1198.724217][T17780] can0 (unregistered): slcan off ttyS3. [ 1198.859228][T17797] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1198.868058][T17797] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1198.903491][T17801] overlayfs: missing 'workdir' [ 1199.116885][T17815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1199.125676][T17815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1199.200551][ T330] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1199.270639][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 1199.373970][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 1199.380417][ T330] usb 3-1: config 0 has an invalid interface number: 149 but max is 0 [ 1199.388733][ T330] usb 3-1: config 0 has no interface number 0 [ 1199.396567][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=0450, bcdDevice=2b.ee [ 1199.405735][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.413868][ T330] usb 3-1: Product: syz [ 1199.418235][ T330] usb 3-1: Manufacturer: syz [ 1199.422862][ T330] usb 3-1: SerialNumber: syz [ 1199.429505][ T330] usb 3-1: config 0 descriptor?? [ 1199.701857][T17835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1199.710653][T17835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1199.884448][ T7798] usb 5-1: USB disconnect, device number 51 [ 1200.005254][T17865] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1200.200491][T17886] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1200.221343][T17888] overlayfs: missing 'lowerdir' [ 1201.011044][T30347] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1201.173646][T30347] usb 5-1: Using ep0 maxpacket: 16 [ 1201.179982][T30347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.190384][T30347] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1201.200989][T30347] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1201.210297][T30347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.218482][T30347] usb 5-1: Product: syz [ 1201.224109][T30347] usb 5-1: Manufacturer: syz [ 1201.230195][T30347] usb 5-1: SerialNumber: syz [ 1201.396141][T17930] overlayfs: missing 'workdir' [ 1201.461949][T30347] usb 5-1: 0:2 : does not exist [ 1201.472552][T30347] usb 5-1: USB disconnect, device number 52 [ 1201.479756][T10602] udevd[10602]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1201.509722][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1201.509727][ T4824] Bluetooth: hci0: command 0x1003 tx timeout [ 1201.721046][T17964] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1201.728164][T17964] rust_binder: 315: no such ref 2 [ 1201.733262][T17964] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1201.733281][T17964] rust_binder: Read failure Err(EFAULT) in pid:315 [ 1201.943390][T30347] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1202.117939][T30347] usb 4-1: Using ep0 maxpacket: 8 [ 1202.129436][T30347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1202.138651][T30347] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1202.146320][T30347] usb 4-1: can't read configurations, error -71 [ 1202.208058][ T330] usb 3-1: USB disconnect, device number 82 [ 1202.623896][T18001] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1202.631123][T18001] rust_binder: 335: no such ref 2 [ 1202.636178][T18001] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1202.636191][T18001] rust_binder: Read failure Err(EFAULT) in pid:335 [ 1202.837643][ T36] audit: type=1400 audit(1763541967.124:904): avc: denied { ioctl } for pid=18028 comm="syz.1.23706" path="socket:[331152]" dev="sockfs" ino=331152 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1202.959441][T18048] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1202.966678][T18048] rust_binder: 497: no such ref 2 [ 1202.971809][T18048] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1202.971833][T18048] rust_binder: Read failure Err(EFAULT) in pid:497 [ 1202.974698][T18050] can0: slcan on ttyS3. [ 1203.072831][T18050] can0 (unregistered): slcan off ttyS3. [ 1203.471997][T30347] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1203.646626][T30347] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1203.655415][T30347] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1203.664366][T30347] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.674934][T30347] usb 4-1: config 220 has no interface number 2 [ 1203.681460][T30347] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1203.694848][T30347] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1203.701692][T30347] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1203.708572][T30347] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1203.716945][T30347] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1203.726102][T30347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.734152][T30347] usb 4-1: Product: syz [ 1203.738420][T30347] usb 4-1: Manufacturer: syz [ 1203.743072][T30347] usb 4-1: SerialNumber: syz [ 1203.969017][T30347] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1203.980942][T30347] usb 4-1: No valid video chain found. [ 1203.986523][T30347] usb 4-1: selecting invalid altsetting 0 [ 1204.001547][T30347] usb 4-1: USB disconnect, device number 68 [ 1204.188864][T18121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23737'. [ 1204.371815][ T4824] Bluetooth: hci0: command 0x1003 tx timeout [ 1204.378310][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1204.675360][T30347] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1204.871349][T30347] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.882531][T30347] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.892690][T30347] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1204.905751][T30347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1204.912500][T30347] usb 3-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1204.921635][T30347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.932418][T30347] usb 3-1: config 0 descriptor?? [ 1205.000583][T12954] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1205.174083][T12954] usb 2-1: Using ep0 maxpacket: 8 [ 1205.183992][T12954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1205.193707][T12954] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1205.213772][T12954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.229211][T12954] usb 2-1: config 0 descriptor?? [ 1205.381204][T30347] hid-multitouch 0003:18D1:5028.001A: item fetching failed at offset 0/4 [ 1205.394840][T30347] hid-multitouch 0003:18D1:5028.001A: probe with driver hid-multitouch failed with error -22 [ 1205.605312][ T330] usb 3-1: USB disconnect, device number 83 [ 1205.677404][T12954] kone 0003:1E7D:2CED.001B: unknown main item tag 0x0 [ 1205.689587][T12954] kone 0003:1E7D:2CED.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 1205.902119][T12954] kone 0003:1E7D:2CED.001B: couldn't init struct kone_device [ 1205.912475][T12954] kone 0003:1E7D:2CED.001B: couldn't install mouse [ 1205.922414][T12954] kone 0003:1E7D:2CED.001B: probe with driver kone failed with error -5 [ 1205.937294][T12954] usb 2-1: USB disconnect, device number 71 [ 1206.497161][T18219] can0: slcan on ttyS3. [ 1206.552873][T18219] can0 (unregistered): slcan off ttyS3. [ 1206.872449][T18267] can0: slcan on ttyS3. [ 1206.915425][T18265] can0 (unregistered): slcan off ttyS3. [ 1207.546136][T18319] can0: slcan on ttyS3. [ 1207.605133][T18318] can0 (unregistered): slcan off ttyS3. [ 1207.821965][T18360] can0: slcan on ttyS3. [ 1207.857760][T18359] can0 (unregistered): slcan off ttyS3. [ 1208.090228][ T5153] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1208.252830][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 1208.264479][ T5153] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1208.273066][ T5153] usb 4-1: config 250 has an invalid interface number: 88 but max is 0 [ 1208.283494][ T5153] usb 4-1: config 250 has no interface number 0 [ 1208.289976][ T5153] usb 4-1: config 250 interface 88 has no altsetting 0 [ 1208.300000][ T5153] usb 4-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 1208.311743][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.328706][ T5153] usb 4-1: Product: syz [ 1208.332944][ T5153] usb 4-1: Manufacturer: syz [ 1208.337555][ T5153] usb 4-1: SerialNumber: syz [ 1208.418006][T18415] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1208.426881][T18415] overlayfs: missing 'lowerdir' [ 1208.566331][ T5153] usb 4-1: USB disconnect, device number 69 [ 1208.615688][T18444] can0: slcan on ttyS3. [ 1208.660313][T18444] can0 (unregistered): slcan off ttyS3. [ 1208.692699][T18454] can0: slcan on ttyS3. [ 1208.725238][T18452] can0 (unregistered): slcan off ttyS3. [ 1208.859946][ T330] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1209.023608][ T330] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1209.032768][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.041499][ T330] usb 3-1: config 0 descriptor?? [ 1209.195995][ T5153] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1209.281480][T18508] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1209.358611][ T5153] usb 2-1: Using ep0 maxpacket: 16 [ 1209.373270][ T5153] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1209.381434][ T5153] usb 2-1: config 0 has no interface number 0 [ 1209.387560][ T5153] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1209.397487][ T5153] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1209.412405][ T5153] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1209.421544][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.429629][ T5153] usb 2-1: Product: syz [ 1209.433812][ T5153] usb 2-1: Manufacturer: syz [ 1209.438457][ T5153] usb 2-1: SerialNumber: syz [ 1209.443985][ T5153] usb 2-1: config 0 descriptor?? [ 1209.449343][T18490] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1209.457143][ T5153] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 1209.552740][T18530] can0: slcan on ttyS3. [ 1209.600095][T18529] can0 (unregistered): slcan off ttyS3. [ 1209.677524][ T31] usb 2-1: USB disconnect, device number 72 [ 1209.946564][T18572] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1210.286118][T18590] can0: slcan on ttyS3. [ 1210.320466][T18593] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1210.350086][T18590] can0 (unregistered): slcan off ttyS3. [ 1210.399293][T18605] Invalid logical block size (1) [ 1211.159015][T18636] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1211.494060][T18678] can0: slcan on ttyS3. [ 1211.560146][T18677] can0 (unregistered): slcan off ttyS3. [ 1211.880983][ T621] usb 3-1: USB disconnect, device number 84 [ 1212.408316][T18768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1212.628527][T18783] can0: slcan on ttyS3. [ 1212.672244][T18782] can0 (unregistered): slcan off ttyS3. [ 1213.033488][T30347] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1213.206935][T30347] usb 2-1: Using ep0 maxpacket: 32 [ 1213.218884][T30347] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1213.248917][T30347] usb 2-1: config 0 has no interface number 0 [ 1213.255135][T30347] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1213.272000][T30347] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1213.293647][T30347] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1213.315461][T30347] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1213.336839][T30347] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1213.358684][T30347] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1213.379788][T30347] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1213.389935][T30347] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1213.410795][T30347] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.436040][T30347] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1213.445129][T30347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.456221][T30347] usb 2-1: Product: syz [ 1213.460426][T30347] usb 2-1: Manufacturer: syz [ 1213.476262][T30347] usb 2-1: SerialNumber: syz [ 1213.487907][T30347] usb 2-1: config 0 descriptor?? [ 1213.498116][T18801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1213.735895][T30347] usb 2-1: USB disconnect, device number 73 [ 1214.434286][T18845] can0: slcan on ttyS3. [ 1214.468638][T18844] can0 (unregistered): slcan off ttyS3. [ 1214.504752][T18852] overlayfs: failed to resolve './file1': -2 [ 1215.142324][T18895] can0: slcan on ttyS3. [ 1215.181564][T18894] can0 (unregistered): slcan off ttyS3. [ 1215.235761][T18897] can0: slcan on ttyS3. [ 1215.289441][T18896] can0 (unregistered): slcan off ttyS3. [ 1215.610846][T18922] can0: slcan on ttyS3. [ 1215.678592][T18922] can0 (unregistered): slcan off ttyS3. [ 1216.166263][T30347] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1216.337578][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1216.349415][T30347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.381640][T30347] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1216.402645][T30347] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1216.411843][T30347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1216.437244][T30347] usb 2-1: SerialNumber: syz [ 1216.545669][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1216.555197][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.576047][ T31] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1216.589027][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.609356][ T31] usb 5-1: config 0 descriptor?? [ 1216.667841][T30347] usb 2-1: 0:2 : does not exist [ 1216.684536][T30347] usb 2-1: USB disconnect, device number 74 [ 1216.708858][T10602] udevd[10602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1217.012108][T19007] Invalid ELF header magic: != ELF [ 1217.033442][T19007] Invalid ELF header magic: != ELF [ 1217.073044][ T31] hid-generic 0003:0853:0148.001C: hidraw0: USB HID v0.07 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 1217.284769][ T31] usb 5-1: USB disconnect, device number 53 [ 1217.391175][ T621] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1217.564609][ T621] usb 3-1: Using ep0 maxpacket: 8 [ 1217.576037][ T621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1217.594454][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.616871][ T621] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.639577][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.661787][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1217.683550][ T621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1217.691254][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.713587][ T621] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.736512][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.762862][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1217.786857][ T621] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1217.794386][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.816622][ T621] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1217.839312][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1217.865908][ T621] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1217.878420][ T621] usb 3-1: string descriptor 0 read error: -22 [ 1217.884792][ T621] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1217.894196][ T621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.085157][ T36] audit: type=1400 audit(1763541981.192:905): avc: denied { read } for pid=19056 comm="syz.1.24074" path="socket:[336431]" dev="sockfs" ino=336431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1218.127855][ T621] usb 3-1: USB disconnect, device number 85 [ 1218.193321][ T31] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1218.357036][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.367280][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1218.382037][ T31] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 1218.391123][ T31] usb 4-1: New USB device strings: Mfr=137, Product=2, SerialNumber=3 [ 1218.399737][ T31] usb 4-1: Product: syz [ 1218.403923][ T31] usb 4-1: Manufacturer: syz [ 1218.408515][ T31] usb 4-1: SerialNumber: syz [ 1218.413848][ T31] usb 4-1: config 0 descriptor?? [ 1218.419788][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1218.638190][ T31] usb 4-1: USB disconnect, device number 70 [ 1218.716172][T19065] can0: slcan on ttyS3. [ 1218.770304][T19064] can0 (unregistered): slcan off ttyS3. [ 1218.883593][T19088] can0: slcan on ttyS3. [ 1218.942774][T19088] can0 (unregistered): slcan off ttyS3. [ 1219.111639][T19110] can0: slcan on ttyS3. [ 1219.158623][T19109] can0 (unregistered): slcan off ttyS3. [ 1219.353179][ T31] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1219.549403][ T31] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1219.560551][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.571320][ T31] usb 2-1: config 0 descriptor?? [ 1219.616699][T19175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24106'. [ 1219.627168][T19175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.636149][T19175] bridge_slave_0 (unregistering): left allmulticast mode [ 1219.643299][T19175] bridge_slave_0 (unregistering): left promiscuous mode [ 1219.650540][T19175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.830143][T30347] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1220.002232][T19193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.009338][T19193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.016467][T30347] usb 5-1: Using ep0 maxpacket: 16 [ 1220.016770][T19193] bridge_slave_0: entered allmulticast mode [ 1220.022721][T30347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.028488][T19193] bridge_slave_0: entered promiscuous mode [ 1220.038483][T30347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.054037][T30347] usb 5-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1220.063133][T30347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.071969][T19193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.072401][T30347] usb 5-1: config 0 descriptor?? [ 1220.082191][T19193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.091125][T19193] bridge_slave_1: entered allmulticast mode [ 1220.097452][T19193] bridge_slave_1: entered promiscuous mode [ 1220.103624][ T293] bridge_slave_1: left allmulticast mode [ 1220.109277][ T293] bridge_slave_1: left promiscuous mode [ 1220.114932][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.251783][T19193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.258951][T19193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.266264][T19193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.273392][T19193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.282727][ T293] tipc: Left network mode [ 1220.289301][ T293] veth1_macvtap: left promiscuous mode [ 1220.294909][ T293] veth0_vlan: left promiscuous mode [ 1220.366847][T26632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.374581][T26632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.390068][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.397167][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1220.433531][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.440643][ T9745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1220.484985][T19193] veth0_vlan: entered promiscuous mode [ 1220.513753][T19193] veth1_macvtap: entered promiscuous mode [ 1220.528080][T30347] hid-generic 0003:0B05:1822.001D: unknown main item tag 0x0 [ 1220.552848][T30347] hid-generic 0003:0B05:1822.001D: unknown main item tag 0x0 [ 1220.572080][T30347] hid-generic 0003:0B05:1822.001D: unknown main item tag 0x0 [ 1220.585040][T30347] hid-generic 0003:0B05:1822.001D: unknown main item tag 0x0 [ 1220.593711][T30347] hid-generic 0003:0B05:1822.001D: unknown main item tag 0x0 [ 1220.602947][T30347] hid-generic 0003:0B05:1822.001D: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.4-1/input0 [ 1220.686577][ T36] audit: type=1400 audit(1763541983.581:906): avc: denied { setattr } for pid=19224 comm="syz.3.24123" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1220.745159][ T5153] usb 5-1: USB disconnect, device number 54 [ 1220.864141][T19236] can0: slcan on ttyS3. [ 1220.927104][T19235] can0 (unregistered): slcan off ttyS3. [ 1221.245512][T19269] tipc: Started in network mode [ 1221.250599][T19269] tipc: Node identity 561d512a697f, cluster identity 4711 [ 1221.257847][T19269] tipc: Enabled bearer , priority 0 [ 1221.265825][T19268] tipc: Resetting bearer [ 1221.280297][T19268] tipc: Disabling bearer [ 1222.367153][T30347] usb 2-1: USB disconnect, device number 75 [ 1222.516055][T19338] can0: slcan on ttyS3. [ 1222.616288][T19337] can0 (unregistered): slcan off ttyS3. [ 1223.723099][T19369] can0: slcan on ttyS3. [ 1223.766864][T19368] can0 (unregistered): slcan off ttyS3. [ 1225.114263][ T9745] Bluetooth: hci0: Frame reassembly failed (-84) [ 1226.405179][T19453] can0: slcan on ttyS3. [ 1226.468795][T19452] can0 (unregistered): slcan off ttyS3. [ 1227.352274][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1227.811001][T19525] can0: slcan on ttyS3. [ 1227.895554][T19524] can0 (unregistered): slcan off ttyS3. [ 1230.016057][T19625] can0: slcan on ttyS3. [ 1230.169409][T19625] can0 (unregistered): slcan off ttyS3. [ 1230.797153][T19678] can0: slcan on ttyS3. [ 1230.896238][T19680] can0 (unregistered): slcan off ttyS3. [ 1231.205422][T19712] can0: slcan on ttyS3. [ 1231.237342][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1231.253818][T19711] can0 (unregistered): slcan off ttyS3. [ 1231.264304][T19714] can0: slcan on ttyS3. [ 1231.318149][T19714] can0 (unregistered): slcan off ttyS3. [ 1231.684788][ T36] audit: type=1400 audit(1763541993.732:907): avc: denied { bind } for pid=19768 comm="syz.4.24314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1232.007473][T19792] tipc: Enabling of bearer rejected, failed to enable media [ 1232.213985][T19800] can0: slcan on ttyS3. [ 1232.240063][ T36] audit: type=1326 audit(1763541994.249:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19804 comm="syz.2.24328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fae98f6c9 code=0x0 [ 1232.290788][T19799] can0 (unregistered): slcan off ttyS3. [ 1233.196112][T19950] netlink: 22 bytes leftover after parsing attributes in process `syz.3.24385'. [ 1233.196129][ T36] audit: type=1400 audit(1763541995.135:909): avc: denied { nlmsg_read } for pid=19949 comm="syz.3.24385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1233.306747][T19969] can0: slcan on ttyS3. [ 1233.371423][T19968] can0 (unregistered): slcan off ttyS3. [ 1233.419049][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1233.425142][ T4824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1235.047684][ T36] audit: type=1400 audit(1763541996.843:910): avc: denied { mounton } for pid=20045 comm="syz.4.24431" path="/577/file0" dev="ramfs" ino=343570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1235.305683][T20063] can0: slcan on ttyS3. [ 1235.369363][T20062] can0 (unregistered): slcan off ttyS3. [ 1235.906748][T20083] can0: slcan on ttyS3. [ 1235.966353][T20082] can0 (unregistered): slcan off ttyS3. [ 1236.565968][T20129] can0: slcan on ttyS3. [ 1236.615689][T20128] can0 (unregistered): slcan off ttyS3. [ 1236.939976][ T5153] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1237.125244][ T5153] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 1237.155419][ T5153] usb 4-1: config 0 has no interface number 0 [ 1237.163355][ T5153] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1237.178300][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.197495][ T5153] usb 4-1: Product: syz [ 1237.201938][ T5153] usb 4-1: Manufacturer: syz [ 1237.210890][ T5153] usb 4-1: SerialNumber: syz [ 1237.221993][ T5153] usb 4-1: config 0 descriptor?? [ 1237.907893][ T36] audit: type=1400 audit(1763541999.483:911): avc: denied { remount } for pid=20176 comm="syz.4.24479" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1237.939057][T20181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24481'. [ 1238.023308][ T5153] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1238.185816][ T5153] usb 2-1: Using ep0 maxpacket: 8 [ 1238.197431][ T5153] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1238.205859][ T5153] usb 2-1: config 179 has no interface number 0 [ 1238.212524][ T5153] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1238.223923][ T5153] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1238.235484][ T5153] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1238.246959][ T5153] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1238.258525][ T5153] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1238.272090][ T5153] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1238.279147][ T5153] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1238.288349][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.302074][ T5153] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input123 [ 1238.359273][ T95] input input123: unable to receive magic message: -110 [ 1238.369030][ T95] input input123: unable to receive magic message: -32 [ 1238.383675][ T95] input input123: unable to receive magic message: -32 [ 1238.529498][ T5153] usb 2-1: USB disconnect, device number 76 [ 1238.535514][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1238.545053][ T5153] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1238.730498][ T9745] bridge_slave_1: left allmulticast mode [ 1238.736302][ T9745] bridge_slave_1: left promiscuous mode [ 1238.742033][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.749670][ T9745] bridge_slave_0: left allmulticast mode [ 1238.755487][ T9745] bridge_slave_0: left promiscuous mode [ 1238.761421][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.846759][T20193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.853909][T20193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.861022][T20193] bridge_slave_0: entered allmulticast mode [ 1238.867330][T20193] bridge_slave_0: entered promiscuous mode [ 1238.873813][T20193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.880927][T20193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.888007][T20193] bridge_slave_1: entered allmulticast mode [ 1238.894426][T20193] bridge_slave_1: entered promiscuous mode [ 1238.930703][ T9745] veth1_macvtap: left promiscuous mode [ 1238.936296][ T9745] veth0_vlan: left promiscuous mode [ 1239.034040][T20193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.041238][T20193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.048671][T20193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.055749][T20193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.086201][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.093745][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.116551][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.123668][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.139520][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.146617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.199229][T20193] veth0_vlan: entered promiscuous mode [ 1239.226902][T20193] veth1_macvtap: entered promiscuous mode [ 1239.942650][ T330] usb 4-1: USB disconnect, device number 71 [ 1240.214838][T20245] can0: slcan on ttyS3. [ 1240.267443][T20244] can0 (unregistered): slcan off ttyS3. [ 1240.623375][ T621] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1240.798293][ T621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.817575][ T621] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1240.828292][ T621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.839934][ T621] usb 4-1: config 0 descriptor?? [ 1241.282141][ T621] hid-generic 0003:0079:1846.001E: unknown main item tag 0x4 [ 1241.295095][ T621] hid-generic 0003:0079:1846.001E: item fetching failed at offset 6/7 [ 1241.306802][ T7798] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1241.315276][ T621] hid-generic 0003:0079:1846.001E: probe with driver hid-generic failed with error -22 [ 1241.480632][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1241.490439][ T7798] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1241.500122][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1241.500821][ T621] usb 4-1: USB disconnect, device number 72 [ 1241.510673][ T7798] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1241.528516][ T7798] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1241.537824][ T7798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.547157][ T7798] usb 3-1: config 0 descriptor?? [ 1241.815070][ T5153] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1241.978742][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.989809][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.000151][ T5153] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1242.013003][ T5153] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1242.022148][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.030789][ T5153] usb 2-1: config 0 descriptor?? [ 1242.400132][T20348] can0: slcan on ttyS3. [ 1242.466643][T20348] can0 (unregistered): slcan off ttyS3. [ 1242.482917][ T5153] pantherlord 0003:0810:0002.001F: hidraw0: USB HID v0.00 Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0 [ 1242.508496][ T5153] pantherlord 0003:0810:0002.001F: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1242.723227][ T586] usb 2-1: USB disconnect, device number 77 [ 1243.307258][T20401] can0: slcan on ttyS3. [ 1243.351605][T20404] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 1243.386765][T20401] can0 (unregistered): slcan off ttyS3. [ 1244.332683][ T5153] usb 3-1: USB disconnect, device number 86 [ 1244.513063][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 1244.783460][ T586] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1244.889023][T20492] can0: slcan on ttyS3. [ 1244.947151][ T586] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.959916][ T586] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.971906][T20492] can0 (unregistered): slcan off ttyS3. [ 1244.978755][ T586] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1244.995145][ T586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1245.011007][ T586] usb 2-1: SerialNumber: syz [ 1245.253229][ T586] usb 2-1: 0:2 : does not exist [ 1245.267763][ T586] usb 2-1: USB disconnect, device number 78 [ 1245.294147][T10602] udevd[10602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1246.105181][ T7798] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1246.256836][ T330] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1246.279970][ T7798] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1246.288496][ T7798] usb 2-1: config 0 has no interfaces? [ 1246.296416][ T7798] usb 2-1: language id specifier not provided by device, defaulting to English [ 1246.311994][ T7798] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 1246.321194][ T7798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.330299][ T7798] usb 2-1: config 0 descriptor?? [ 1246.420803][ T330] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1246.429267][ T330] usb 5-1: config 6 has an invalid interface number: 174 but max is 0 [ 1246.437506][ T330] usb 5-1: config 6 has no interface number 0 [ 1246.443693][ T330] usb 5-1: config 6 interface 174 has no altsetting 0 [ 1246.454556][ T330] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=89.18 [ 1246.464295][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.472484][ T330] usb 5-1: Product: syz [ 1246.476903][ T330] usb 5-1: Manufacturer: syz [ 1246.481681][ T330] usb 5-1: SerialNumber: syz [ 1246.489760][ T330] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1246.558754][ T7798] usb 2-1: USB disconnect, device number 79 [ 1246.716794][ T330] r8152 5-1:6.174: Expected endpoints are not found [ 1246.728065][ T330] r8152-cfgselector 5-1: USB disconnect, device number 55 [ 1246.766021][ T4824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1246.766049][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1247.355092][T20612] can0: slcan on ttyS3. [ 1247.444273][T20611] can0 (unregistered): slcan off ttyS3. [ 1247.703957][ T36] audit: type=1400 audit(1763542008.519:912): avc: denied { connect } for pid=20630 comm="syz.2.24636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1247.742618][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 1247.955489][T20655] can0: slcan on ttyS3. [ 1248.013054][T20654] can0 (unregistered): slcan off ttyS3. [ 1248.979774][T20704] loop5: detected capacity change from 0 to 7 [ 1249.330790][T20722] binder: Bad value for 'max' [ 1249.810237][ T31] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1249.865762][T20763] binder: Bad value for 'max' [ 1249.978161][T20769] can0: slcan on ttyS3. [ 1249.983576][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1249.983614][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 1249.994780][ T4824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1249.999301][ T31] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1250.010723][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.018829][ T31] usb 2-1: Product: syz [ 1250.023023][ T31] usb 2-1: Manufacturer: syz [ 1250.027805][ T31] usb 2-1: SerialNumber: syz [ 1250.035269][ T31] usb 2-1: config 0 descriptor?? [ 1250.060191][T20769] can0 (unregistered): slcan off ttyS3. [ 1250.863908][T20852] can0: slcan on ttyS3. [ 1250.884819][T20852] can0 (unregistered): slcan off ttyS3. [ 1251.294264][T20866] can0: slcan on ttyS3. [ 1251.338518][T20865] can0 (unregistered): slcan off ttyS3. [ 1251.709757][T20902] netlink: 'syz.3.24745': attribute type 27 has an invalid length. [ 1251.923368][T20918] binder: Bad value for 'max' [ 1252.469454][T20969] binder: Bad value for 'max' [ 1252.681149][ T5153] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1252.789458][ T330] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1252.814070][ T621] usb 2-1: USB disconnect, device number 80 [ 1252.843645][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 1252.849974][ T5153] usb 5-1: config 4 has an invalid interface number: 60 but max is 0 [ 1252.858514][ T5153] usb 5-1: config 4 has no interface number 0 [ 1252.864684][ T5153] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=da.8d [ 1252.874162][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.951977][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 1252.958390][ T330] usb 3-1: config 4 has an invalid interface number: 135 but max is 0 [ 1252.966951][ T330] usb 3-1: config 4 has no interface number 0 [ 1252.973120][ T330] usb 3-1: config 4 interface 135 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 1252.983446][ T330] usb 3-1: config 4 interface 135 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1252.994138][ T330] usb 3-1: config 4 interface 135 has no altsetting 0 [ 1253.002721][ T330] usb 3-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice= d.fc [ 1253.012088][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.020272][ T330] usb 3-1: Product: syz [ 1253.024596][ T330] usb 3-1: Manufacturer: syz [ 1253.029419][ T330] usb 3-1: SerialNumber: syz [ 1253.035898][T20979] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1253.044415][T20979] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1253.111040][ T330] usb 5-1: USB disconnect, device number 56 [ 1253.271690][ T621] usb 3-1: USB disconnect, device number 87 [ 1253.759900][T21027] can0: slcan on ttyS3. [ 1253.797841][T21027] can0 (unregistered): slcan off ttyS3. [ 1253.833659][T21031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21031 comm=syz.4.24807 [ 1253.840494][T21033] binder: Bad value for 'max' [ 1253.872881][ T586] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1253.951671][T21055] overlayfs: missing 'lowerdir' [ 1254.046171][ T586] usb 2-1: Using ep0 maxpacket: 32 [ 1254.052504][ T586] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1254.077927][ T586] usb 2-1: config 0 has no interface number 0 [ 1254.090305][ T586] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1254.105434][ T586] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1254.119439][ T36] audit: type=1400 audit(1763542014.445:913): avc: denied { ioctl } for pid=21077 comm="syz.4.24830" path="socket:[352279]" dev="sockfs" ino=352279 ioctlcmd=0x8b20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1254.121856][ T586] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1254.156607][ T586] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1254.164930][ T586] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1254.174279][ T586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.194786][ T586] usb 2-1: Product: syz [ 1254.199423][ T586] usb 2-1: Manufacturer: syz [ 1254.204066][ T586] usb 2-1: SerialNumber: syz [ 1254.221191][ T586] usb 2-1: config 0 descriptor?? [ 1254.226616][T21019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1254.459241][T21098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2898581692 (23188653536 ns) > initial count (6059612160 ns). Using initial count to start timer. [ 1254.461270][ T586] ipheth 2-1:0.196: Unable to find endpoints [ 1254.523246][ T586] usb 2-1: USB disconnect, device number 81 [ 1254.583552][T21105] binder: Bad value for 'max' [ 1254.913752][T21117] can0: slcan on ttyS3. [ 1254.959691][T21117] can0 (unregistered): slcan off ttyS3. [ 1255.066161][T21130] loop5: detected capacity change from 0 to 7 [ 1257.132949][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.155691][T21207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.168784][T21207] bridge_slave_0: entered allmulticast mode [ 1257.187712][T21207] bridge_slave_0: entered promiscuous mode [ 1257.204929][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.226404][T21207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.244814][T21207] bridge_slave_1: entered allmulticast mode [ 1257.258151][T21207] bridge_slave_1: entered promiscuous mode [ 1257.324356][ T293] bridge_slave_1: left allmulticast mode [ 1257.332409][ T293] bridge_slave_1: left promiscuous mode [ 1257.343916][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.359548][ T293] bridge_slave_0: left allmulticast mode [ 1257.371462][ T293] bridge_slave_0: left promiscuous mode [ 1257.382972][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.555949][ T293] tipc: Left network mode [ 1257.570098][ T293] veth1_macvtap: left promiscuous mode [ 1257.575662][ T293] veth0_vlan: left promiscuous mode [ 1257.723557][T21207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.730692][T21207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.738019][T21207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.745102][T21207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.769683][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.784661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.808930][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.816010][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.852176][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.859262][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.879564][T21227] overlayfs: failed to resolve './file0': -2 [ 1257.914520][T21207] veth0_vlan: entered promiscuous mode [ 1257.942057][T21207] veth1_macvtap: entered promiscuous mode [ 1258.845447][ T586] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1258.867116][ T330] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1258.890635][T21310] binder: Bad value for 'max' [ 1259.019938][ T586] usb 4-1: config 0 has no interfaces? [ 1259.025481][ T586] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1259.034696][ T586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.043557][ T586] usb 4-1: config 0 descriptor?? [ 1259.052369][ T330] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 1259.060402][ T330] usb 2-1: config 0 has no interface number 0 [ 1259.066576][ T330] usb 2-1: too many endpoints for config 0 interface 6 altsetting 211: 244, using maximum allowed: 30 [ 1259.077794][ T330] usb 2-1: config 0 interface 6 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 244 [ 1259.091055][ T330] usb 2-1: config 0 interface 6 has no altsetting 0 [ 1259.094632][ T7798] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1259.099308][ T330] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1259.114423][ T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.122509][ T330] usb 2-1: Product: syz [ 1259.126675][ T330] usb 2-1: Manufacturer: syz [ 1259.131327][ T330] usb 2-1: SerialNumber: syz [ 1259.136573][ T330] usb 2-1: config 0 descriptor?? [ 1259.269068][ T7798] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1259.279004][ T7798] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1259.292024][ T7798] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1259.298674][ T7798] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1259.307888][ T7798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.316919][ T7798] usb 5-1: config 0 descriptor?? [ 1259.431204][ T330] usb 4-1: USB disconnect, device number 73 [ 1259.758282][ T7798] saitek 0003:06A3:0621.0020: unknown main item tag 0x0 [ 1259.765389][ T7798] saitek 0003:06A3:0621.0020: unknown main item tag 0x0 [ 1259.772425][ T7798] saitek 0003:06A3:0621.0020: unknown main item tag 0x0 [ 1259.780128][ T7798] saitek 0003:06A3:0621.0020: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 1259.991610][ T7798] usb 5-1: USB disconnect, device number 57 [ 1260.076737][T21326] tap0: tun_chr_ioctl cmd 1074025678 [ 1260.082326][T21326] tap0: group set to 21 [ 1260.623174][T21350] 9pnet: Could not find request transport: ›b“5àèv²xÈ}§YD­i°·°Ü("¾lûò_±H"o¹¯iÒ[òÈòÛ½p [ 1260.973573][T21356] binder: Bad value for 'max' [ 1261.116813][T21372] overlayfs: failed to resolve './file1': -2 [ 1261.307529][ T36] audit: type=1400 audit(1763542021.082:914): avc: denied { watch } for pid=21387 comm="syz.3.24959" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1261.593139][T21415] binder: Bad value for 'max' [ 1261.724047][T21433] binder: Bad value for 'max' [ 1261.866988][ T5153] usb 2-1: USB disconnect, device number 82 [ 1261.958303][T21450] overlayfs: failed to resolve './bus': -2 [ 1261.998091][ T621] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1262.084682][ T330] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1262.163124][ T621] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1262.175416][ T621] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.185440][ T621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1262.192085][ T621] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 1262.201467][ T621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.214804][ T621] usb 4-1: config 0 descriptor?? [ 1262.247183][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 1262.253739][ T330] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1262.263578][ T330] usb 5-1: config 0 has no interface number 0 [ 1262.270380][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.270542][T21494] netlink: 68 bytes leftover after parsing attributes in process `syz.1.25010'. [ 1262.281697][ T330] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.309379][ T330] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1262.318908][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.330379][ T330] usb 5-1: config 0 descriptor?? [ 1262.657101][ T621] hid-generic 0003:0543:E621.0021: unknown main item tag 0x0 [ 1262.679029][ T621] hid-generic 0003:0543:E621.0021: unknown main item tag 0x0 [ 1262.686828][ T621] hid-generic 0003:0543:E621.0021: unknown main item tag 0x0 [ 1262.702231][ T621] hid-generic 0003:0543:E621.0021: unknown main item tag 0x0 [ 1262.720682][ T621] hid-generic 0003:0543:E621.0021: unknown main item tag 0x0 [ 1262.742736][ T621] hid-generic 0003:0543:E621.0021: hidraw0: USB HID v0.05 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 1262.875032][ T621] usb 4-1: USB disconnect, device number 74 [ 1263.005722][ T330] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0022/input/input125 [ 1263.028036][ T330] input: HID 28bd:0071 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.0022/input/input126 [ 1263.054759][ T330] uclogic 0003:28BD:0071.0022: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1 [ 1263.225833][ T7798] usb 5-1: USB disconnect, device number 58 [ 1263.263732][ T36] audit: type=1400 audit(1763542022.882:915): avc: denied { ioctl } for pid=21554 comm="syz.2.25040" path="socket:[355272]" dev="sockfs" ino=355272 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.568101][T21612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.25065'. [ 1263.839960][ T7798] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1264.002265][ T7798] usb 2-1: Using ep0 maxpacket: 16 [ 1264.009022][ T7798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1264.020405][ T7798] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1264.030421][ T7798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1264.041755][ T7798] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1264.050853][ T7798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.058900][ T7798] usb 2-1: Product: syz [ 1264.063070][ T7798] usb 2-1: Manufacturer: syz [ 1264.067702][ T31] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1264.075350][ T7798] usb 2-1: SerialNumber: syz [ 1264.080820][ T7798] usb 2-1: config 0 descriptor?? [ 1264.086091][T21616] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1264.240553][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1264.246798][ T31] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1264.255089][ T31] usb 4-1: config 0 has no interface number 0 [ 1264.262676][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1264.271725][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.279748][ T31] usb 4-1: Product: syz [ 1264.283921][ T330] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1264.283940][ T31] usb 4-1: Manufacturer: syz [ 1264.283960][ T31] usb 4-1: SerialNumber: syz [ 1264.301344][ T31] usb 4-1: config 0 descriptor?? [ 1264.307168][ T31] smsc95xx v2.0.0 [ 1264.313573][ T5153] usb 2-1: USB disconnect, device number 83 [ 1264.448529][ T330] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1264.460081][ T330] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.470183][ T330] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1264.476825][ T330] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1264.485900][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.495006][ T330] usb 5-1: config 0 descriptor?? [ 1264.521324][T21651] binder: Bad value for 'max' [ 1264.743477][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1264.754372][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1264.937886][ T330] kye 0003:0458:5015.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1264.948670][ T330] kye 0003:0458:5015.0023: unknown main item tag 0x0 [ 1264.955479][ T330] kye 0003:0458:5015.0023: unknown main item tag 0x0 [ 1264.955581][ T7798] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1264.962442][ T330] kye 0003:0458:5015.0023: unknown main item tag 0x0 [ 1264.977964][ T330] kye 0003:0458:5015.0023: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 1264.998891][ T330] kye 0003:0458:5015.0023: tablet-enabling feature report not found [ 1265.007104][ T330] kye 0003:0458:5015.0023: tablet enabling failed [ 1265.141136][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1265.152396][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.172485][ T7798] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 1265.190011][T30347] usb 5-1: USB disconnect, device number 59 [ 1265.196555][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 1265.217619][ T7798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1265.227649][ T7798] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1265.237161][ T7798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.253712][ T7798] usb 3-1: config 0 descriptor?? [ 1265.697423][ T7798] hid-generic 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 1265.704965][ T7798] hid-generic 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 1265.712408][ T7798] hid-generic 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 1265.720268][ T7798] hid-generic 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 1265.727724][ T7798] hid-generic 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 1265.736621][ T7798] hid-generic 0003:10C4:8ACF.0024: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 1265.914266][ T5153] usb 3-1: USB disconnect, device number 88 [ 1266.106717][T21715] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1266.136435][ T7798] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1266.300525][ T7798] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.312417][ T7798] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1266.323460][ T7798] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1266.334956][ T7798] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1266.344055][ T7798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.360630][T21704] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1267.848966][ T31] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 1267.870288][ T31] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1267.891576][ T31] usb 4-1: USB disconnect, device number 75 [ 1268.041394][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25166'. [ 1268.053127][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.063370][T21830] bridge_slave_0 (unregistering): left allmulticast mode [ 1268.070625][T21830] bridge_slave_0 (unregistering): left promiscuous mode [ 1268.078344][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.095965][ T7798] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1268.104370][ T7798] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input127 [ 1268.116999][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1268.125643][ T7798] usb 5-1: USB disconnect, device number 60 [ 1268.142841][T13999] udevd[13999]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory [ 1268.155223][T13999] udevd[13999]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 1268.714852][ T7798] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1268.837750][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 1268.888187][ T7798] usb 4-1: Using ep0 maxpacket: 16 [ 1268.905698][ T7798] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1268.916093][ T7798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.925111][ T7798] usb 4-1: config 0 descriptor?? [ 1268.942528][ T7798] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1268.950489][ T7798] usb 4-1: Detected FT4232H [ 1268.963065][T21879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 1269.149906][ T7798] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1269.166195][ T7798] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1269.173627][ T7798] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1269.183860][ T7798] usb 4-1: USB disconnect, device number 76 [ 1269.190659][ T7798] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1269.200353][ T7798] ftdi_sio 4-1:0.0: device disconnected [ 1269.321503][ T31] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1269.485079][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.495238][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1269.504883][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1269.514393][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1269.522622][ T31] usb 2-1: SerialNumber: syz [ 1269.530948][ T31] usb 2-1: 0:2 : does not exist [ 1269.895691][T30347] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1269.967144][ T31] usb 2-1: USB disconnect, device number 84 [ 1270.058189][T30347] usb 5-1: Using ep0 maxpacket: 16 [ 1270.064795][T30347] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.075364][T30347] usb 5-1: config 0 has no interfaces? [ 1270.081957][T30347] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1270.091350][T30347] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1270.099411][T30347] usb 5-1: Manufacturer: syz [ 1270.105732][T30347] usb 5-1: config 0 descriptor?? [ 1270.370625][ T330] usb 5-1: USB disconnect, device number 61 [ 1270.613378][T21964] binder: Bad value for 'stats' [ 1270.621554][ T31] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1270.673896][ T9745] Bluetooth: hci1: Frame reassembly failed (-84) [ 1270.784027][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1270.790291][ T31] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 1270.798444][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.808558][ T31] usb 4-1: config 0 has no interface number 0 [ 1270.814641][ T31] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1270.825637][ T31] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1270.838541][ T31] usb 4-1: config 0 interface 52 has no altsetting 0 [ 1270.845971][ T31] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1270.855059][ T31] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1270.863903][ T31] usb 4-1: Manufacturer: syz [ 1270.869148][ T31] usb 4-1: config 0 descriptor?? [ 1271.033211][ T4824] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1271.033222][T15741] Bluetooth: hci0: command 0x1003 tx timeout [ 1271.249885][ T31] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1271.413461][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1271.423210][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1271.434462][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1271.443516][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.451539][ T31] usb 5-1: Product: syz [ 1271.455756][ T31] usb 5-1: Manufacturer: syz [ 1271.460356][ T31] usb 5-1: SerialNumber: syz [ 1271.465700][ T31] usb 5-1: config 0 descriptor?? [ 1271.471840][ T31] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1271.695167][ T31] usb 5-1: USB disconnect, device number 62 [ 1271.702995][T21985] binder: Bad value for 'stats' [ 1271.711055][T13999] udevd[13999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1272.690809][ T31] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1272.853259][ T4824] Bluetooth: hci1: command 0x1003 tx timeout [ 1272.853308][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1272.865463][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1272.872014][ T31] usb 5-1: config 162 has an invalid interface number: 246 but max is 1 [ 1272.888101][ T31] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.905868][ T31] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 1272.915249][ T31] usb 5-1: config 162 has no interface number 0 [ 1272.928430][ T31] usb 5-1: config 162 interface 246 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.942250][ T31] usb 5-1: config 162 interface 246 has no altsetting 0 [ 1272.950956][ T31] usb 5-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 1272.960156][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.969732][ T31] usb 5-1: Product: syz [ 1272.974173][ T31] usb 5-1: Manufacturer: syz [ 1272.978933][ T31] usb 5-1: SerialNumber: syz [ 1273.214658][T22010] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1273.246674][ T31] usb 5-1: USB disconnect, device number 63 [ 1273.329946][ T330] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1273.493570][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.504591][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.514416][ T330] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1273.523473][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.532209][ T330] usb 3-1: config 0 descriptor?? [ 1273.634559][ T5153] usb 4-1: USB disconnect, device number 77 [ 1273.991872][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.014012][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.035994][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.057992][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.080252][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.102165][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.124158][ T330] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1274.153520][ T330] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1274.438387][ T31] usb 3-1: USB disconnect, device number 89 [ 1274.962584][T22045] netlink: 368 bytes leftover after parsing attributes in process `syz.4.25265'. [ 1275.021871][T22051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:574 [ 1275.021907][T22051] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1275.052485][T22051] rust_binder: Read failure Err(EFAULT) in pid:574 [ 1275.060646][ T31] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1275.080795][T22054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:574 [ 1275.080827][T22054] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1275.090525][T22054] rust_binder: Read failure Err(EFAULT) in pid:574 [ 1275.241973][ T31] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.292230][ T31] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1275.301433][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1275.336566][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1275.343400][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1275.368332][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1275.377654][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.385677][ T31] usb 2-1: Product: syz [ 1275.409973][ T31] usb 2-1: Manufacturer: syz [ 1275.414663][ T31] usb 2-1: SerialNumber: syz [ 1275.659917][ T31] usb 2-1: USB disconnect, device number 85 [ 1276.132425][T22069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=22069 comm=syz.4.25277 [ 1277.002507][ T331] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1277.208345][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 1277.215023][ T331] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1277.223765][ T331] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.235615][ T331] usb 3-1: New USB device found, idVendor=06f8, idProduct=3004, bcdDevice=37.e5 [ 1277.244735][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.253066][ T331] usb 3-1: Product: syz [ 1277.257291][ T331] usb 3-1: Manufacturer: syz [ 1277.261932][ T331] usb 3-1: SerialNumber: syz [ 1277.327519][T12954] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1277.490012][T12954] usb 2-1: Using ep0 maxpacket: 8 [ 1277.490288][ T331] usb 3-1: USB disconnect, device number 90 [ 1277.511507][T12954] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1277.519660][T12954] usb 2-1: config 0 has no interface number 0 [ 1277.528303][T12954] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1277.537438][T12954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.545562][T12954] usb 2-1: Product: syz [ 1277.549746][T12954] usb 2-1: Manufacturer: syz [ 1277.554343][T12954] usb 2-1: SerialNumber: syz [ 1277.559790][T12954] usb 2-1: config 0 descriptor?? [ 1277.793399][T12954] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 1277.799842][T12954] usb 2-1: No valid video chain found. [ 1278.002011][ T31] usb 2-1: USB disconnect, device number 86 [ 1278.041226][ T36] audit: type=1326 audit(1763542036.525:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22109 comm="syz.4.25296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68cf58f6c9 code=0x0 [ 1278.123055][T22117] netlink: 'syz.2.25299': attribute type 17 has an invalid length. [ 1278.475883][ T330] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1278.639551][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.650634][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.666689][ T330] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1278.675996][ T330] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1278.684332][ T330] usb 3-1: Manufacturer: syz [ 1278.690181][ T330] usb 3-1: config 0 descriptor?? [ 1278.972347][T22141] binder: Bad value for 'stats' [ 1279.135100][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.142101][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.149283][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.156195][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.163604][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.176832][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.190505][ T330] pyra 0003:1E7D:2CF6.0026: unknown main item tag 0x0 [ 1279.201514][ T330] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1279.400778][T22177] rust_binder: Write failure EINVAL in pid:488 [ 1279.568572][ T330] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 1279.582409][ T330] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 1279.589593][ T330] pyra 0003:1E7D:2CF6.0026: probe with driver pyra failed with error -71 [ 1279.601092][ T330] usb 3-1: USB disconnect, device number 91 [ 1279.622096][T22194] fido_id[22194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1279.636429][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1279.642582][ T31] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1279.809504][ T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1279.820486][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1279.827099][ T31] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1279.836304][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.845442][ T31] usb 2-1: config 0 descriptor?? [ 1279.850767][T22175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1280.173085][T22224] kvm: kvm [22223]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 1280.292969][T22244] binder: Bad value for 'max' [ 1280.296164][ T31] pantherlord 0003:0E8F:0003.0027: unexpected long global item [ 1280.316476][ T31] pantherlord 0003:0E8F:0003.0027: parse failed [ 1280.328664][ T31] pantherlord 0003:0E8F:0003.0027: probe with driver pantherlord failed with error -22 [ 1280.365752][T22257] tmpfs: Unknown parameter 'quota' [ 1280.519020][ T330] usb 2-1: USB disconnect, device number 87 [ 1280.631766][T12954] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1280.642625][ T5153] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1280.655772][T22275] /dev/nbd3: Can't lookup blockdev [ 1280.795435][T12954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1280.806673][ T5153] usb 3-1: Using ep0 maxpacket: 16 [ 1280.811908][T12954] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 1280.821517][T12954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.830153][ T5153] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1280.842249][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1280.853445][T12954] usb 5-1: config 0 descriptor?? [ 1280.866238][ T5153] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1280.875455][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.883537][ T5153] usb 3-1: Product: syz [ 1280.887843][ T5153] usb 3-1: Manufacturer: syz [ 1280.892531][ T5153] usb 3-1: SerialNumber: syz [ 1280.903164][ T5153] usb 3-1: config 0 descriptor?? [ 1281.297460][T12954] hid-generic 0003:0C70:F00E.0028: unknown main item tag 0x0 [ 1281.304952][T12954] hid-generic 0003:0C70:F00E.0028: unknown main item tag 0x0 [ 1281.312371][T12954] hid-generic 0003:0C70:F00E.0028: unknown main item tag 0x0 [ 1281.320084][T12954] hid-generic 0003:0C70:F00E.0028: unknown main item tag 0x0 [ 1281.327751][T12954] hid-generic 0003:0C70:F00E.0028: unknown main item tag 0x0 [ 1281.338373][T22301] tmpfs: Unsupported parameter 'mpol' [ 1281.340745][T12954] hid-generic 0003:0C70:F00E.0028: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.4-1/input0 [ 1281.346836][ T31] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1281.493717][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25393'. [ 1281.515032][ T331] usb 5-1: USB disconnect, device number 64 [ 1281.542933][ T31] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1281.551399][ T31] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1281.560562][ T31] usb 2-1: config 150 has no interface number 0 [ 1281.566930][ T31] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1281.575456][ T31] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1281.584545][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.592608][ T31] usb 2-1: Product: syz [ 1281.596814][ T31] usb 2-1: Manufacturer: syz [ 1281.601427][ T31] usb 2-1: SerialNumber: syz [ 1281.775549][T22339] binder: Bad value for 'max' [ 1282.241172][T22365] binder: Bad value for 'max' [ 1283.653474][ T5153] usb 3-1: USB disconnect, device number 92 [ 1284.155600][T22482] binder: Bad value for 'max' [ 1284.354966][ T31] usb 2-1: USB disconnect, device number 88 [ 1284.488508][ T5153] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1284.661844][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 1284.679101][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.694329][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.715326][ T5153] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1284.737136][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.759981][ T5153] usb 4-1: config 0 descriptor?? [ 1284.849363][T22502] binder: Bad value for 'stats' [ 1284.879820][T22508] loop4: detected capacity change from 0 to 7 [ 1285.015533][T22522] binder: Bad value for 'max' [ 1285.205605][ T5153] hid-generic 0003:04D8:00DF.0029: unknown main item tag 0x2 [ 1285.227473][ T5153] hid-generic 0003:04D8:00DF.0029: item fetching failed at offset 2/5 [ 1285.241820][ T5153] hid-generic 0003:04D8:00DF.0029: probe with driver hid-generic failed with error -22 [ 1285.388936][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25493'. [ 1285.424584][T30347] usb 4-1: USB disconnect, device number 78 [ 1285.694764][T22543] binder: Bad value for 'max' [ 1285.727124][T22545] netlink: 'syz.4.25500': attribute type 3 has an invalid length. [ 1285.735116][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25500'. [ 1286.016061][ T331] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1286.200302][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 1286.212228][ T331] usb 5-1: config 0 has no interfaces? [ 1286.219335][ T331] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1286.232698][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.249518][ T331] usb 5-1: Product: syz [ 1286.261101][ T331] usb 5-1: Manufacturer: syz [ 1286.265818][ T331] usb 5-1: SerialNumber: syz [ 1286.276165][ T331] usb 5-1: config 0 descriptor?? [ 1286.579406][T30347] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1286.720584][T22547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.740046][T22547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.752713][T30347] usb 2-1: Using ep0 maxpacket: 16 [ 1286.758823][ T31] usb 5-1: USB disconnect, device number 65 [ 1286.765931][T30347] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.786268][T30347] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1286.803828][T30347] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1286.817872][T30347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.837624][T30347] usb 2-1: config 0 descriptor?? [ 1286.870694][T22578] binder: Bad value for 'max' [ 1287.069079][T30347] usbhid 2-1:0.0: can't add hid device: -71 [ 1287.088675][T30347] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1287.100101][T30347] usb 2-1: USB disconnect, device number 89 [ 1287.361547][T22601] random: crng reseeded on system resumption [ 1287.432206][T22610] overlayfs: failed to resolve './file0': -2 [ 1287.558935][T22626] binder: Bad value for 'stats' [ 1287.576075][ T5153] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1287.760659][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 1287.773141][ T5153] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 1287.792354][ T5153] usb 4-1: config 0 has no interface number 0 [ 1287.807825][ T5153] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=3b.fa [ 1287.820654][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.836506][ T5153] usb 4-1: Product: syz [ 1287.847159][ T5153] usb 4-1: Manufacturer: syz [ 1287.851806][ T5153] usb 4-1: SerialNumber: syz [ 1287.868252][ T5153] usb 4-1: config 0 descriptor?? [ 1288.009397][T22639] binder: Bad value for 'max' [ 1288.098755][ T5153] usb 4-1: unsupported MDLM descriptors [ 1288.111866][ T5153] usb 4-1: USB disconnect, device number 79 [ 1288.155929][T22643] kvm: kvm [22642]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x4 [ 1288.768237][ T31] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1288.777454][T22682] 9pnet_fd: Insufficient options for proto=fd [ 1288.953138][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1288.967819][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1288.983960][ T31] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1289.001650][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.014410][ T31] usb 3-1: config 0 descriptor?? [ 1289.028138][T22665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1289.151218][ T36] audit: type=1400 audit(1763542046.780:917): avc: denied { rename } for pid=22703 comm="syz.4.25573" name="file0" dev="tmpfs" ino=1935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1289.180134][ T5153] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1289.253885][T22665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.270205][T22665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.289457][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 1289.295442][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1289.306121][ T31] usb 3-1: USB disconnect, device number 93 [ 1289.363603][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 1289.375570][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.396107][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.417026][ T5153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1289.429967][ T5153] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1289.439032][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.458652][ T5153] usb 4-1: config 0 descriptor?? [ 1289.640634][T22724] input: syz1 as /devices/virtual/input/input129 [ 1289.764838][ T621] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1289.907394][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.915030][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.922471][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.929885][ T621] usb 3-1: Using ep0 maxpacket: 32 [ 1289.935182][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.945035][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.952356][ T621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1289.966447][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1289.977798][ T621] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1289.998885][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1290.006173][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1290.013447][ T621] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1290.022608][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1290.029891][ T5153] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1290.037152][ T621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.049666][ T621] usb 3-1: config 0 descriptor?? [ 1290.055104][ T5153] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002A/input/input130 [ 1290.076880][ T621] hub 3-1:0.0: bad descriptor, ignoring hub [ 1290.082953][ T621] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1290.094493][ T5153] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1290.136568][ T5153] usb 4-1: USB disconnect, device number 80 [ 1290.159934][T10602] udevd[10602]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 1290.211126][ T9745] Bluetooth: hci0: Frame reassembly failed (-84) [ 1290.242501][ T36] audit: type=1400 audit(1763542047.796:918): avc: denied { write } for pid=22771 comm="syz.1.25606" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1290.513149][ T621] hid-multitouch 0003:0EEF:72C4.002B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1290.847931][ T5153] usb 3-1: USB disconnect, device number 94 [ 1291.303021][T22824] netlink: 92 bytes leftover after parsing attributes in process `syz.2.25631'. [ 1291.449407][T22832] tmpfs: Bad value for 'nr_inodes' [ 1291.651361][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25638'. [ 1291.942007][ T5153] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1292.028085][T22856] /dev/loop0: Can't lookup blockdev [ 1292.059879][T22860] binder: Bad value for 'stats' [ 1292.106246][ T5153] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1292.115357][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.124266][ T5153] usb 2-1: config 0 descriptor?? [ 1292.254398][T22870] 9pnet_fd: Insufficient options for proto=fd [ 1292.440380][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1292.440392][ T4824] Bluetooth: hci0: command 0x1003 tx timeout [ 1292.500489][T22896] rust_binder: pid 22896 performed invalid decrement on ref [ 1293.056843][T22936] binder: Bad value for 'stats' [ 1293.081400][T22938] binder: Bad value for 'max' [ 1293.361216][T12954] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1293.523698][T12954] usb 3-1: Using ep0 maxpacket: 32 [ 1293.540619][T12954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.551109][T12954] usb 3-1: config 0 has no interfaces? [ 1293.558444][T12954] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1293.569000][T12954] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1293.585699][T12954] usb 3-1: Product: syz [ 1293.595837][T12954] usb 3-1: Manufacturer: syz [ 1293.603520][T12954] usb 3-1: SerialNumber: syz [ 1293.610603][T12954] usb 3-1: config 0 descriptor?? [ 1293.837126][T12954] usb 3-1: USB disconnect, device number 95 [ 1293.986149][T23001] overlayfs: missing 'workdir' [ 1294.026824][T23005] binder: Bad value for 'max' [ 1294.379588][T12954] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1294.552904][T12954] usb 5-1: Using ep0 maxpacket: 32 [ 1294.558568][T23028] /dev/loop0: Can't lookup blockdev [ 1294.564682][T12954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.575932][T12954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 1294.593340][T12954] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1294.602624][T12954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.615950][T12954] usb 5-1: config 0 descriptor?? [ 1294.622835][T23014] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1294.910514][T30347] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1294.947096][ T621] usb 2-1: USB disconnect, device number 90 [ 1295.005091][T23067] binder: Bad value for 'stats' [ 1295.024278][T23069] tmpfs: Unsupported parameter 'mpol' [ 1295.068407][T12954] logitech 0003:046D:C293.002C: unknown main item tag 0x0 [ 1295.075667][T12954] logitech 0003:046D:C293.002C: unknown main item tag 0xd [ 1295.083058][T12954] logitech 0003:046D:C293.002C: unknown global tag 0xd [ 1295.084095][T30347] usb 4-1: Using ep0 maxpacket: 32 [ 1295.090446][T12954] logitech 0003:046D:C293.002C: item 0 0 1 13 parsing failed [ 1295.098912][T30347] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.102702][T12954] logitech 0003:046D:C293.002C: parse failed [ 1295.114830][T30347] usb 4-1: config 0 has no interfaces? [ 1295.119004][T12954] logitech 0003:046D:C293.002C: probe with driver logitech failed with error -22 [ 1295.127082][T30347] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1295.145742][T30347] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1295.154084][T30347] usb 4-1: Product: syz [ 1295.158377][T30347] usb 4-1: Manufacturer: syz [ 1295.163028][T30347] usb 4-1: SerialNumber: syz [ 1295.181335][T30347] usb 4-1: config 0 descriptor?? [ 1295.258508][T23095] /dev/loop0: Can't lookup blockdev [ 1295.288181][T12954] usb 5-1: USB disconnect, device number 66 [ 1295.407664][ T331] usb 4-1: USB disconnect, device number 81 [ 1296.024299][T23137] input: syz0 as /devices/virtual/input/input132 [ 1296.032067][T23140] netlink: 'syz.1.25781': attribute type 4 has an invalid length. [ 1296.052101][T23140] netlink: 'syz.1.25781': attribute type 27 has an invalid length. [ 1296.060651][T23140] netlink: 'syz.1.25781': attribute type 1 has an invalid length. [ 1296.068638][T23140] netlink: 3577 bytes leftover after parsing attributes in process `syz.1.25781'. [ 1296.081684][T23145] binder: Bad value for 'max' [ 1296.242974][ T331] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1296.258974][ T36] audit: type=1400 audit(1763542053.343:919): avc: denied { nlmsg_write } for pid=23158 comm="syz.3.25790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1296.282962][ T293] bridge_slave_1: left allmulticast mode [ 1296.288919][ T293] bridge_slave_1: left promiscuous mode [ 1296.294623][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.302975][ T293] bridge_slave_0: left allmulticast mode [ 1296.308782][ T293] bridge_slave_0: left promiscuous mode [ 1296.308890][T23164] binder: Bad value for 'max' [ 1296.314480][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.384839][T12954] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1296.403357][T23155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.410654][T23155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.417808][T23155] bridge_slave_0: entered allmulticast mode [ 1296.424236][T23155] bridge_slave_0: entered promiscuous mode [ 1296.427109][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 1296.432368][T23155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.438897][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.442548][T23155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.459757][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.461233][T23155] bridge_slave_1: entered allmulticast mode [ 1296.470975][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1296.476976][T23155] bridge_slave_1: entered promiscuous mode [ 1296.485519][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.502779][ T331] usb 5-1: config 0 descriptor?? [ 1296.509752][ T331] hub 5-1:0.0: USB hub found [ 1296.516834][ T293] veth1_macvtap: left promiscuous mode [ 1296.522411][ T293] veth0_vlan: left promiscuous mode [ 1296.546264][T12954] usb 3-1: Using ep0 maxpacket: 32 [ 1296.552552][T12954] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.564567][T12954] usb 3-1: config 0 has no interfaces? [ 1296.579937][T12954] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1296.593523][T12954] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1296.609418][T12954] usb 3-1: Product: syz [ 1296.617801][T12954] usb 3-1: Manufacturer: syz [ 1296.624696][T12954] usb 3-1: SerialNumber: syz [ 1296.631225][T12954] usb 3-1: config 0 descriptor?? [ 1296.696526][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.703612][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1296.712895][T26632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.719975][T26632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.725948][ T331] hub 5-1:0.0: 1 port detected [ 1296.756364][T23155] veth0_vlan: entered promiscuous mode [ 1296.769600][T23155] veth1_macvtap: entered promiscuous mode [ 1296.858015][T30347] usb 3-1: USB disconnect, device number 96 [ 1296.868200][T23192] netlink: 536 bytes leftover after parsing attributes in process `syz.1.25800'. [ 1296.877893][T23192] netlink: 52 bytes leftover after parsing attributes in process `syz.1.25800'. [ 1296.916485][T23196] netlink: 'syz.1.25802': attribute type 27 has an invalid length. [ 1297.792261][T30347] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1297.814645][T23249] syz.3.25828 (23249): /proc/23248/oom_adj is deprecated, please use /proc/23248/oom_score_adj instead. [ 1297.901447][ T331] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1297.922169][ T331] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1297.932425][ T331] usbhid 5-1:0.0: can't add hid device: -32 [ 1297.938486][ T331] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1297.966291][ T331] usb 5-1: USB disconnect, device number 67 [ 1297.976461][T30347] usb 2-1: Using ep0 maxpacket: 32 [ 1297.983308][T30347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.993705][T30347] usb 2-1: config 0 has no interfaces? [ 1298.000860][T30347] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1298.010246][T30347] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1298.018441][T30347] usb 2-1: Product: syz [ 1298.023030][T30347] usb 2-1: Manufacturer: syz [ 1298.027657][T30347] usb 2-1: SerialNumber: syz [ 1298.037453][T30347] usb 2-1: config 0 descriptor?? [ 1298.262267][ T331] usb 2-1: USB disconnect, device number 91 [ 1299.061858][T23298] binder: Bad value for 'max' [ 1299.201012][T23312] /dev/loop0: Can't lookup blockdev [ 1299.547408][T12954] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1299.568832][ T331] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1299.595074][ T36] audit: type=1400 audit(1763542056.426:920): avc: denied { setopt } for pid=23323 comm="syz.1.25863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1299.650650][T23328] binder: Bad value for 'stats' [ 1299.738654][T12954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1299.749701][T12954] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1299.754178][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1299.769740][T12954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.778613][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.788646][ T331] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1299.794627][T12954] usb 4-1: config 0 descriptor?? [ 1299.798055][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.814872][T23318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1299.816897][ T331] usb 3-1: config 0 descriptor?? [ 1300.274056][ T331] hid-generic 0003:04F3:0755.002D: unknown main item tag 0x0 [ 1300.281656][T12954] ryos 0003:1E7D:3138.002E: item fetching failed at offset 1/5 [ 1300.283915][ T331] hid-generic 0003:04F3:0755.002D: unknown main item tag 0x0 [ 1300.299268][ T331] hid-generic 0003:04F3:0755.002D: failed to start in urb: -90 [ 1300.305781][T12954] ryos 0003:1E7D:3138.002E: parse failed [ 1300.308672][ T331] hid-generic 0003:04F3:0755.002D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1300.316396][T12954] ryos 0003:1E7D:3138.002E: probe with driver ryos failed with error -22 [ 1300.336273][T23358] /dev/loop0: Can't lookup blockdev [ 1300.456499][T23367] netlink: 'syz.1.25883': attribute type 46 has an invalid length. [ 1300.512119][ T331] usb 3-1: USB disconnect, device number 97 [ 1300.518970][T12954] usb 4-1: USB disconnect, device number 82 [ 1300.614067][T23375] binder: Bad value for 'stats' [ 1300.845414][T23408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25902'. [ 1301.068786][T23427] binder: Bad value for 'max' [ 1301.753456][T23494] overlayfs: failed to resolve './file1': -2 [ 1301.958162][T23514] overlayfs: failed to resolve './file1': -2 [ 1302.440010][ T331] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1302.624008][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 1302.644727][ T331] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1302.666153][ T331] usb 4-1: config 0 has no interface number 0 [ 1302.687354][ T331] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1302.722946][ T331] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1302.748065][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.764757][ T331] usb 4-1: Product: syz [ 1302.769637][ T331] usb 4-1: Manufacturer: syz [ 1302.775786][ T331] usb 4-1: SerialNumber: syz [ 1302.789734][ T331] usb 4-1: config 0 descriptor?? [ 1302.796741][T23523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1303.046478][T23523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1303.130744][T23529] netlink: 'syz.4.25962': attribute type 4 has an invalid length. [ 1303.458127][ T7798] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1303.623319][ T7798] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 1303.632035][ T7798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.645241][ T7798] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1303.660518][ T7798] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1303.670290][ T7798] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1303.679994][ T7798] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1303.689135][ T7798] usb 2-1: Product: syz [ 1303.694195][ T7798] usb 2-1: Manufacturer: syz [ 1303.699523][ T7798] usb 2-1: SerialNumber: syz [ 1303.713681][ T7798] usb 2-1: config 0 descriptor?? [ 1303.722514][ T7798] hub 2-1:0.0: bad descriptor, ignoring hub [ 1303.729643][ T7798] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1303.750987][ T7798] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1303.813130][T13999] udevd[13999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1304.454943][ T7798] usb 2-1: USB disconnect, device number 92 [ 1304.910750][T30347] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1305.056159][ T36] audit: type=1400 audit(1763542061.466:921): avc: denied { write } for pid=23582 comm="syz.4.25986" name="/" dev="configfs" ino=1885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1305.095378][T30347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.105568][T30347] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1305.116895][T30347] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1305.127266][T30347] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1305.135323][T30347] usb 3-1: Manufacturer: syz [ 1305.141070][T30347] usb 3-1: config 0 descriptor?? [ 1305.145614][T23585] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 1305.154351][T23585] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 1305.162582][T23585] kvm: requested 169295 ns i8254 timer period limited to 200000 ns [ 1305.170839][T23585] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1305.179120][T23585] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 1305.187392][T23585] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 1305.367947][ T621] usb 3-1: USB disconnect, device number 98 [ 1305.744249][ T331] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1305.754825][ T331] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1305.773316][ T331] usb 4-1: USB disconnect, device number 83 [ 1307.400238][ T36] audit: type=1400 audit(1763542063.626:922): avc: denied { associate } for pid=23693 comm="syz.3.26023" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1307.503738][T23711] overlayfs: failed to resolve './file1': -2 [ 1307.508699][T23713] input: syz1 as /devices/virtual/input/input133 [ 1307.629038][ T331] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1307.694118][T12954] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1307.739219][T23732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26054'. [ 1307.760546][T23734] overlayfs: failed to resolve './file1': -2 [ 1307.791546][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 1307.791638][T23738] fuseblk: Bad value for 'fd' [ 1307.799914][ T331] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1307.812922][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1307.813199][ T5153] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1307.825613][ T331] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1307.841045][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.849291][ T331] usb 2-1: Product: syz [ 1307.853515][ T331] usb 2-1: Manufacturer: syz [ 1307.858438][ T331] usb 2-1: SerialNumber: syz [ 1307.863880][ T331] usb 2-1: config 0 descriptor?? [ 1307.870233][T12954] usb 4-1: config 7 has an invalid interface number: 206 but max is 0 [ 1307.882656][T12954] usb 4-1: config 7 has no interface number 0 [ 1307.888771][T12954] usb 4-1: config 7 interface 206 has no altsetting 0 [ 1307.901343][T12954] usb 4-1: New USB device found, idVendor=19d2, idProduct=1426, bcdDevice=fd.42 [ 1307.910534][T12954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.918624][T12954] usb 4-1: Product: syz [ 1307.922996][T12954] usb 4-1: Manufacturer: syz [ 1307.927582][T12954] usb 4-1: SerialNumber: syz [ 1308.008186][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 1308.014485][ T5153] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1308.022753][ T5153] usb 5-1: config 0 has no interface number 0 [ 1308.029014][ T5153] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1308.039745][ T5153] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1308.047990][ T5153] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1308.057109][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.065258][ T5153] usb 5-1: Product: syz [ 1308.069440][ T5153] usb 5-1: Manufacturer: syz [ 1308.074167][ T5153] usb 5-1: SerialNumber: syz [ 1308.079591][ T5153] usb 5-1: config 0 descriptor?? [ 1308.154904][T12954] usb 4-1: bad CDC descriptors [ 1308.160835][T12954] usb 4-1: USB disconnect, device number 84 [ 1308.235717][ T331] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1308.305505][ T5153] usb 5-1: USB disconnect, device number 68 [ 1308.398233][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 1308.404570][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.414928][ T331] usb 3-1: config 0 has no interfaces? [ 1308.421802][ T331] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1308.430876][ T331] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1308.439029][ T331] usb 3-1: Product: syz [ 1308.443205][ T331] usb 3-1: Manufacturer: syz [ 1308.447806][ T331] usb 3-1: SerialNumber: syz [ 1308.453070][ T331] usb 3-1: config 0 descriptor?? [ 1308.676159][ T7798] usb 3-1: USB disconnect, device number 99 [ 1308.777384][ T331] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1308.939952][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 1308.946662][ T331] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1308.955051][ T331] usb 5-1: config 0 has no interface number 0 [ 1308.961289][ T331] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1308.972219][ T331] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1308.980911][ T331] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1308.990116][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.998299][ T331] usb 5-1: Product: syz [ 1309.002572][ T331] usb 5-1: Manufacturer: syz [ 1309.007316][ T331] usb 5-1: SerialNumber: syz [ 1309.016021][ T331] usb 5-1: config 0 descriptor?? [ 1309.638589][T23771] binder: Bad value for 'stats' [ 1310.027106][T23794] /dev/loop0: Can't lookup blockdev [ 1310.078539][T23802] exFAT-fs (rnullb0): invalid boot record signature [ 1310.085207][T23802] exFAT-fs (rnullb0): failed to read boot sector [ 1310.091583][T23802] exFAT-fs (rnullb0): failed to recognize exfat type [ 1310.125701][T23806] binder: Bad value for 'stats' [ 1310.142415][ T5153] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1310.304943][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 1310.311304][ T5153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.321752][ T5153] usb 4-1: config 0 has no interfaces? [ 1310.328864][ T5153] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1310.338082][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1310.346242][ T5153] usb 4-1: Product: syz [ 1310.350426][ T5153] usb 4-1: Manufacturer: syz [ 1310.355029][ T5153] usb 4-1: SerialNumber: syz [ 1310.360686][ T5153] usb 4-1: config 0 descriptor?? [ 1310.456594][T13659] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1310.584615][ T5153] usb 4-1: USB disconnect, device number 85 [ 1310.620285][T13659] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1310.628776][T13659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 7 [ 1310.629693][ T7798] usb 2-1: USB disconnect, device number 93 [ 1310.639993][T13659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 1310.659565][T13659] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1310.668704][T13659] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1310.677968][T13659] usb 3-1: Manufacturer: syz [ 1310.686537][T13659] usb 3-1: config 0 descriptor?? [ 1310.794706][ T5153] usb 5-1: USB disconnect, device number 69 [ 1310.820574][T23823] exFAT-fs (rnullb0): invalid boot record signature [ 1310.827300][T23823] exFAT-fs (rnullb0): failed to read boot sector [ 1310.833728][T23823] exFAT-fs (rnullb0): failed to recognize exfat type [ 1310.910105][ T7798] usb 3-1: USB disconnect, device number 100 [ 1311.035559][ T36] audit: type=1400 audit(1763542066.986:923): avc: denied { execute_no_trans } for pid=23843 comm="syz.4.26104" path="/file0" dev="ramfs" ino=376157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1311.200253][T23868] fuseblk: Bad value for 'fd' [ 1311.204114][T13659] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1311.388280][T13659] usb 2-1: Using ep0 maxpacket: 8 [ 1311.394554][T13659] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 1311.402822][T13659] usb 2-1: config 0 has no interface number 1 [ 1311.409160][T13659] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1311.420278][T13659] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1311.432188][T13659] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1311.443791][T13659] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1311.454263][T13659] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1311.467521][T13659] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.479339][T13659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.490611][T13659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1311.503460][T13659] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1311.514638][T13659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.523148][T13659] usb 2-1: Product: syz [ 1311.528176][T13659] usb 2-1: Manufacturer: syz [ 1311.533119][T13659] usb 2-1: SerialNumber: syz [ 1311.548175][T13659] usb 2-1: config 0 descriptor?? [ 1311.566765][T23840] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1311.665642][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26141'. [ 1311.666110][ T36] audit: type=1326 audit(1763542067.567:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23920 comm="syz.3.26142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83eb38f6c9 code=0x0 [ 1311.794202][T13659] usb 2-1: USB disconnect, device number 94 [ 1311.897467][ T7798] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 1311.973293][ T331] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1312.061022][ T7798] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1312.069362][ T7798] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1312.077485][ T7798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.087610][ T7798] usb 5-1: config 0 has no interface number 0 [ 1312.093767][ T7798] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1312.102842][ T7798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.111594][ T7798] usb 5-1: config 0 descriptor?? [ 1312.136853][ T331] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.146692][ T331] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1312.153302][ T331] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 1312.162406][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.171141][ T331] usb 3-1: config 0 descriptor?? [ 1312.335832][ T7798] usb 5-1: USB disconnect, device number 70 [ 1312.526158][T23946] /dev/loop0: Can't lookup blockdev [ 1312.651165][T23960] binder: Bad value for 'stats' [ 1312.831831][ T331] usb 3-1: string descriptor 0 read error: -71 [ 1312.851064][ T331] uclogic 0003:5543:0047.002F: failed retrieving string descriptor #200: -71 [ 1312.859893][ T331] uclogic 0003:5543:0047.002F: failed retrieving pen parameters: -71 [ 1312.879004][ T331] uclogic 0003:5543:0047.002F: failed probing pen v2 parameters: -71 [ 1312.904968][ T331] uclogic 0003:5543:0047.002F: failed probing parameters: -71 [ 1312.912505][ T331] uclogic 0003:5543:0047.002F: probe with driver uclogic failed with error -71 [ 1312.938724][ T331] usb 3-1: USB disconnect, device number 101 [ 1313.546027][T23991] binder: Bad value for 'stats' [ 1313.595064][T23993] overlayfs: failed to resolve './file1': -2 [ 1314.043086][T24014] input: syz1 as /devices/virtual/input/input134 [ 1314.475854][ T331] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1314.649219][ T331] usb 5-1: Using ep0 maxpacket: 16 [ 1314.656806][ T331] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1314.694598][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1314.712319][ T331] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1314.722011][ T331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.730220][ T331] usb 5-1: Product: syz [ 1314.736211][ T331] usb 5-1: Manufacturer: syz [ 1314.741347][ T331] usb 5-1: SerialNumber: syz [ 1314.753053][ T331] usb 5-1: config 0 descriptor?? [ 1315.403777][T24059] fuse: Bad value for 'group_id' [ 1315.408842][T24059] fuse: Bad value for 'group_id' [ 1316.237403][T24086] exFAT-fs (rnullb0): invalid boot record signature [ 1316.244226][T24086] exFAT-fs (rnullb0): failed to read boot sector [ 1316.250697][T24086] exFAT-fs (rnullb0): failed to recognize exfat type [ 1317.133448][T24095] binder: Bad value for 'stats' [ 1317.466970][T13659] usb 5-1: USB disconnect, device number 71 [ 1317.587009][T24119] exFAT-fs (rnullb0): invalid boot record signature [ 1317.593668][T24119] exFAT-fs (rnullb0): failed to read boot sector [ 1317.608526][T24119] exFAT-fs (rnullb0): failed to recognize exfat type [ 1317.712785][T24131] netlink: 'syz.4.26240': attribute type 4 has an invalid length. [ 1317.784519][T24135] binder: Bad value for 'stats' [ 1317.857350][T24141] exFAT-fs (rnullb0): invalid boot record signature [ 1317.863993][T24141] exFAT-fs (rnullb0): failed to read boot sector [ 1317.881300][T24141] exFAT-fs (rnullb0): failed to recognize exfat type [ 1318.801402][T24176] netlink: 140 bytes leftover after parsing attributes in process `syz.4.26261'. [ 1318.811100][T24175] binder: Bad value for 'stats' [ 1319.011413][T24188] overlayfs: missing 'lowerdir' [ 1319.219830][T24201] binder: Bad value for 'stats' [ 1319.482245][T24222] binder: Bad value for 'stats' [ 1319.697657][ T331] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1319.872067][ T331] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1319.889703][ T331] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 1319.903658][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1319.918952][ T331] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1319.944007][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.967474][ T331] usb 4-1: Product: syz [ 1319.977893][ T331] usb 4-1: Manufacturer: syz [ 1319.989855][ T331] usb 4-1: SerialNumber: syz [ 1320.010992][ T331] usb 4-1: config 0 descriptor?? [ 1320.251950][ T331] usb 4-1: USB disconnect, device number 86 [ 1320.936672][T24264] overlayfs: missing 'lowerdir' [ 1320.957614][T24268] exFAT-fs (rnullb0): invalid boot record signature [ 1320.966679][T24268] exFAT-fs (rnullb0): failed to read boot sector [ 1320.973133][T24268] exFAT-fs (rnullb0): failed to recognize exfat type [ 1321.081224][T24285] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1321.102737][T24285] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1322.987344][T24296] overlayfs: statfs failed on './file0' [ 1323.099524][T13659] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1323.285276][T13659] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 1323.299652][T13659] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1323.330005][T13659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.358713][T13659] usb 2-1: Product: syz [ 1323.363782][T13659] usb 2-1: Manufacturer: syz [ 1323.368939][T13659] usb 2-1: SerialNumber: syz [ 1324.248059][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26363'. [ 1324.532407][T24411] loop5: detected capacity change from 0 to 7 [ 1324.939350][T24449] binder: Bad value for 'stats' [ 1326.088053][ T5153] usb 2-1: USB disconnect, device number 95 [ 1326.170852][T24475] overlayfs: statfs failed on './file0' [ 1326.293746][ T36] audit: type=1326 audit(1763542081.062:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.360597][ T36] audit: type=1326 audit(1763542081.062:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.407946][ T36] audit: type=1326 audit(1763542081.062:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.455727][ T36] audit: type=1326 audit(1763542081.062:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.511939][ T36] audit: type=1326 audit(1763542081.062:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.555272][ T36] audit: type=1326 audit(1763542081.062:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.620304][ T36] audit: type=1326 audit(1763542081.062:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.663751][ T36] audit: type=1326 audit(1763542081.062:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.697366][T24581] netlink: 'syz.2.26460': attribute type 4 has an invalid length. [ 1326.714025][ T36] audit: type=1326 audit(1763542081.062:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.3.26453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eb38f6c9 code=0x7ffc0000 [ 1326.861699][ T36] audit: type=1326 audit(1763542081.589:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24597 comm="syz.2.26469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fae98f6c9 code=0x7ffc0000 [ 1327.151149][ T331] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1327.313635][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 1327.325557][ T331] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.346115][ T331] usb 4-1: config 0 has no interfaces? [ 1327.353713][ T331] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1327.367776][ T331] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1327.376086][ T331] usb 4-1: Product: syz [ 1327.392718][ T331] usb 4-1: Manufacturer: syz [ 1327.397370][ T331] usb 4-1: SerialNumber: syz [ 1327.413875][ T331] usb 4-1: config 0 descriptor?? [ 1327.492211][T24647] binder: Unknown parameter '†—' [ 1327.653956][T23930] usb 4-1: USB disconnect, device number 87 [ 1327.814523][T24667] binder: Unknown parameter '†—' [ 1328.062765][T24679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24679 comm=syz.4.26509 [ 1328.156529][T24687] binder: Unknown parameter '†—' [ 1329.147210][T24703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24703 comm=syz.2.26523 [ 1329.450736][T24725] binder: Unknown parameter '†—' [ 1329.507170][T24731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24731 comm=syz.1.26535 [ 1330.530035][T24747] binder: Bad value for 'stats' [ 1330.617946][T24754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24754 comm=syz.4.26547 [ 1330.698090][T24761] binder: Unknown parameter '†—' [ 1330.880899][T24771] netlink: 'syz.1.26555': attribute type 4 has an invalid length. [ 1331.213707][T24785] binder: Unknown parameter '†—' [ 1331.240793][T24781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.257024][T24781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.278174][T24781] bridge_slave_0: entered allmulticast mode [ 1331.290163][T24781] bridge_slave_0: entered promiscuous mode [ 1331.310243][ T9745] bridge_slave_1: left allmulticast mode [ 1331.322375][ T9745] bridge_slave_1: left promiscuous mode [ 1331.328019][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.456376][T24794] overlayfs: failed to resolve './file1': -2 [ 1331.470036][T24781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.484543][T24781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.503205][T24781] bridge_slave_1: entered allmulticast mode [ 1331.516203][T24781] bridge_slave_1: entered promiscuous mode [ 1331.542228][ T9745] veth1_macvtap: left promiscuous mode [ 1331.547879][ T9745] veth0_vlan: left promiscuous mode [ 1331.694889][T24806] binder: Unknown parameter '†—' [ 1331.770863][T26632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.772676][T24822] overlayfs: failed to resolve './file1': -2 [ 1331.778043][T26632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.792615][T26632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.799707][T26632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1331.828279][T24781] veth0_vlan: entered promiscuous mode [ 1331.841769][T24781] veth1_macvtap: entered promiscuous mode [ 1332.011590][T24843] overlayfs: failed to resolve './file1': -2 [ 1332.218789][T24862] binder: Unknown parameter '†—' [ 1332.469746][T24878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=24878 comm=syz.2.26603 [ 1332.795416][ T586] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1332.969935][ T586] usb 3-1: Using ep0 maxpacket: 32 [ 1332.977823][ T586] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.990415][ T586] usb 3-1: config 0 has no interfaces? [ 1333.003396][ T586] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1333.012661][ T586] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1333.020942][ T586] usb 3-1: Product: syz [ 1333.044596][ T586] usb 3-1: Manufacturer: syz [ 1333.049258][ T586] usb 3-1: SerialNumber: syz [ 1333.055358][ T586] usb 3-1: config 0 descriptor?? [ 1333.279245][T23930] usb 3-1: USB disconnect, device number 102 [ 1333.455116][T24914] netlink: 'syz.4.26619': attribute type 4 has an invalid length. [ 1333.515090][T24922] binder: Unknown parameter '†—' [ 1333.870004][T24940] netlink: 'syz.2.26634': attribute type 4 has an invalid length. [ 1333.947714][T24944] binder: Unknown parameter '†—' [ 1334.448817][T24958] overlayfs: failed to resolve './file0': -2 [ 1334.639075][T24968] binder: Unknown parameter '†—' [ 1335.007279][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 1335.007298][ T36] audit: type=1326 audit(1763542089.111:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.081413][ T36] audit: type=1326 audit(1763542089.139:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.124673][ T36] audit: type=1326 audit(1763542089.139:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.192171][ T36] audit: type=1326 audit(1763542089.139:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.242524][ T36] audit: type=1326 audit(1763542089.139:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.292915][ T36] audit: type=1326 audit(1763542089.139:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.341293][ T36] audit: type=1326 audit(1763542089.139:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.395480][ T36] audit: type=1326 audit(1763542089.139:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24986 comm="syz.4.26658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cf58f6c9 code=0x7ffc0000 [ 1335.677356][T25029] netlink: 'syz.2.26678': attribute type 4 has an invalid length. [ 1336.283813][ T36] audit: type=1400 audit(1763542090.284:966): avc: denied { add_name } for pid=25044 comm="syz.4.26685" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1336.319880][T20193] ------------[ cut here ]------------ [ 1336.325779][T20193] WARNING: CPU: 0 PID: 20193 at fs/inode.c:340 drop_nlink+0xce/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1336.333986][T20193] Modules linked in: [ 1336.338042][T20193] CPU: 0 UID: 0 PID: 20193 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1336.349943][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1336.360064][T20193] RIP: 0010:drop_nlink+0xce/0x110 [ 1336.365152][T20193] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 1336.385061][T20193] RSP: 0018:ffffc90001e47c60 EFLAGS: 00010293 [ 1336.391172][T20193] RAX: ffffffff81ee1a7e RBX: ffff88815c43a5a0 RCX: ffff888114804c00 [ 1336.392231][ T36] audit: type=1400 audit(1763542090.284:967): avc: denied { create } for pid=25044 comm="syz.4.26685" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1336.399206][T20193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1336.428823][T20193] RBP: ffffc90001e47c88 R08: 0000000000000003 R09: 0000000000000004 [ 1336.436876][T20193] R10: dffffc0000000000 R11: fffff520003c8f7c R12: dffffc0000000000 [ 1336.445048][T20193] R13: 1ffff1102b8874bd R14: ffff88815c43a5e8 R15: 0000000000000000 [ 1336.453221][T20193] FS: 0000555558ab8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1336.462214][T20193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1336.468867][T20193] CR2: 0000555558adb4e8 CR3: 0000000119d1e000 CR4: 00000000003526b0 [ 1336.476880][T20193] Call Trace: [ 1336.480229][T20193] [ 1336.483185][T20193] shmem_rmdir+0x5f/0x90 [ 1336.487462][T20193] vfs_rmdir+0x3dd/0x560 [ 1336.491770][T20193] incfs_kill_sb+0x109/0x230 [ 1336.496396][T20193] deactivate_locked_super+0xd5/0x2a0 [ 1336.501837][T20193] deactivate_super+0xb8/0xe0 [ 1336.506553][T20193] cleanup_mnt+0x3f1/0x480 [ 1336.511002][T20193] __cleanup_mnt+0x1d/0x40 [ 1336.515476][T20193] task_work_run+0x1e0/0x250 [ 1336.520116][T20193] ? __cfi_task_work_run+0x10/0x10 [ 1336.525285][T20193] ? __x64_sys_umount+0x126/0x170 [ 1336.530343][T20193] ? __cfi___x64_sys_umount+0x10/0x10 [ 1336.535774][T20193] ? __kasan_check_read+0x15/0x20 [ 1336.540869][T20193] resume_user_mode_work+0x36/0x50 [ 1336.546037][T20193] syscall_exit_to_user_mode+0x64/0xb0 [ 1336.551514][T20193] do_syscall_64+0x64/0xf0 [ 1336.556109][T20193] ? clear_bhb_loop+0x50/0xa0 [ 1336.560835][T20193] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1336.566805][T20193] RIP: 0033:0x7f68cf5909f7 [ 1336.571247][T20193] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1336.590973][T20193] RSP: 002b:00007ffd2408ad68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1336.599451][T20193] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f68cf5909f7 [ 1336.607471][T20193] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2408ae20 [ 1336.615526][T20193] RBP: 00007ffd2408ae20 R08: 0000000000000000 R09: 0000000000000000 [ 1336.623567][T20193] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2408beb0 [ 1336.631594][T20193] R13: 00007f68cf611d7d R14: 000000000013e57a R15: 00007ffd2408bef0 [ 1336.639586][T20193] [ 1336.642674][T20193] ---[ end trace 0000000000000000 ]--- [ 1336.648631][T20193] ================================================================== [ 1336.656734][T20193] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 1336.663012][T20193] Write of size 4 at addr 0000000000000168 by task syz-executor/20193 [ 1336.671194][T20193] [ 1336.673541][T20193] CPU: 0 UID: 0 PID: 20193 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1336.673577][T20193] Tainted: [W]=WARN [ 1336.673585][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1336.673600][T20193] Call Trace: [ 1336.673608][T20193] [ 1336.673618][T20193] __dump_stack+0x21/0x30 [ 1336.673652][T20193] dump_stack_lvl+0x10c/0x190 [ 1336.673681][T20193] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1336.673708][T20193] print_report+0x3d/0x70 [ 1336.673732][T20193] kasan_report+0x163/0x1a0 [ 1336.673757][T20193] ? ihold+0x24/0x70 [ 1336.673781][T20193] ? _raw_spin_unlock+0x45/0x60 [ 1336.673807][T20193] ? ihold+0x24/0x70 [ 1336.673831][T20193] kasan_check_range+0x299/0x2a0 [ 1336.673857][T20193] __kasan_check_write+0x18/0x20 [ 1336.673898][T20193] ihold+0x24/0x70 [ 1336.673922][T20193] vfs_rmdir+0x26a/0x560 [ 1336.673951][T20193] incfs_kill_sb+0x109/0x230 [ 1336.673984][T20193] deactivate_locked_super+0xd5/0x2a0 [ 1336.674013][T20193] deactivate_super+0xb8/0xe0 [ 1336.674040][T20193] cleanup_mnt+0x3f1/0x480 [ 1336.674066][T20193] __cleanup_mnt+0x1d/0x40 [ 1336.674089][T20193] task_work_run+0x1e0/0x250 [ 1336.674116][T20193] ? __cfi_task_work_run+0x10/0x10 [ 1336.674161][T20193] ? __x64_sys_umount+0x126/0x170 [ 1336.674193][T20193] ? __cfi___x64_sys_umount+0x10/0x10 [ 1336.674224][T20193] ? __kasan_check_read+0x15/0x20 [ 1336.674258][T20193] resume_user_mode_work+0x36/0x50 [ 1336.674286][T20193] syscall_exit_to_user_mode+0x64/0xb0 [ 1336.674312][T20193] do_syscall_64+0x64/0xf0 [ 1336.674341][T20193] ? clear_bhb_loop+0x50/0xa0 [ 1336.674367][T20193] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1336.674392][T20193] RIP: 0033:0x7f68cf5909f7 [ 1336.674412][T20193] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1336.674433][T20193] RSP: 002b:00007ffd2408ad68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1336.674458][T20193] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f68cf5909f7 [ 1336.674475][T20193] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2408ae20 [ 1336.674491][T20193] RBP: 00007ffd2408ae20 R08: 0000000000000000 R09: 0000000000000000 [ 1336.674506][T20193] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2408beb0 [ 1336.674523][T20193] R13: 00007f68cf611d7d R14: 000000000013e57a R15: 00007ffd2408bef0 [ 1336.674545][T20193] [ 1336.674554][T20193] ================================================================== [ 1336.919123][T20193] Disabling lock debugging due to kernel taint [ 1336.925372][T20193] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 1336.933190][T20193] #PF: supervisor write access in kernel mode [ 1336.939258][T20193] #PF: error_code(0x0002) - not-present page [ 1336.945232][T20193] PGD 8000000126451067 P4D 8000000126451067 PUD 0 [ 1336.951752][T20193] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 1336.957847][T20193] CPU: 0 UID: 0 PID: 20193 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1336.971143][T20193] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1336.976162][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1336.986217][T20193] RIP: 0010:ihold+0x2a/0x70 [ 1336.990733][T20193] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 1337.010342][T20193] RSP: 0018:ffffc90001e47ca0 EFLAGS: 00010246 [ 1337.016429][T20193] RAX: ffff888114804c00 RBX: 0000000000000000 RCX: ffff888114804c00 [ 1337.024404][T20193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.032378][T20193] RBP: ffffc90001e47cb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 1337.040354][T20193] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88815c43a5ac [ 1337.048344][T20193] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1337.056319][T20193] FS: 0000555558ab8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1337.065263][T20193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.071849][T20193] CR2: 0000000000000168 CR3: 0000000119d1e000 CR4: 00000000003526b0 [ 1337.079826][T20193] Call Trace: [ 1337.083126][T20193] [ 1337.086059][T20193] vfs_rmdir+0x26a/0x560 [ 1337.090311][T20193] incfs_kill_sb+0x109/0x230 [ 1337.094914][T20193] deactivate_locked_super+0xd5/0x2a0 [ 1337.100297][T20193] deactivate_super+0xb8/0xe0 [ 1337.104989][T20193] cleanup_mnt+0x3f1/0x480 [ 1337.109415][T20193] __cleanup_mnt+0x1d/0x40 [ 1337.113838][T20193] task_work_run+0x1e0/0x250 [ 1337.118459][T20193] ? __cfi_task_work_run+0x10/0x10 [ 1337.123577][T20193] ? __x64_sys_umount+0x126/0x170 [ 1337.128621][T20193] ? __cfi___x64_sys_umount+0x10/0x10 [ 1337.134003][T20193] ? __kasan_check_read+0x15/0x20 [ 1337.139053][T20193] resume_user_mode_work+0x36/0x50 [ 1337.144191][T20193] syscall_exit_to_user_mode+0x64/0xb0 [ 1337.149663][T20193] do_syscall_64+0x64/0xf0 [ 1337.154087][T20193] ? clear_bhb_loop+0x50/0xa0 [ 1337.158773][T20193] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1337.164675][T20193] RIP: 0033:0x7f68cf5909f7 [ 1337.169094][T20193] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1337.188704][T20193] RSP: 002b:00007ffd2408ad68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1337.197128][T20193] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f68cf5909f7 [ 1337.205104][T20193] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2408ae20 [ 1337.213120][T20193] RBP: 00007ffd2408ae20 R08: 0000000000000000 R09: 0000000000000000 [ 1337.221117][T20193] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2408beb0 [ 1337.229097][T20193] R13: 00007f68cf611d7d R14: 000000000013e57a R15: 00007ffd2408bef0 [ 1337.237091][T20193] [ 1337.240115][T20193] Modules linked in: [ 1337.244017][T20193] CR2: 0000000000000168 [ 1337.248176][T20193] ---[ end trace 0000000000000000 ]--- [ 1337.253645][T20193] RIP: 0010:ihold+0x2a/0x70 [ 1337.258162][T20193] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 1337.277779][T20193] RSP: 0018:ffffc90001e47ca0 EFLAGS: 00010246 [ 1337.283859][T20193] RAX: ffff888114804c00 RBX: 0000000000000000 RCX: ffff888114804c00 [ 1337.291840][T20193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1337.299905][T20193] RBP: ffffc90001e47cb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 1337.307880][T20193] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88815c43a5ac [ 1337.315862][T20193] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1337.323942][T20193] FS: 0000555558ab8500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1337.332877][T20193] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1337.339466][T20193] CR2: 0000000000000168 CR3: 0000000119d1e000 CR4: 00000000003526b0 [ 1337.347461][T20193] Kernel panic - not syncing: Fatal exception [ 1337.353822][T20193] Kernel Offset: disabled [ 1337.358845][T20193] Rebooting in 86400 seconds..