last executing test programs: 9m46.281174418s ago: executing program 2 (id=41): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40, 0x0) 9m46.235827049s ago: executing program 2 (id=42): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000040)={0xa, 0x4e20, 0x3e8, @empty, 0x6}, 0x1c) 9m46.235299279s ago: executing program 2 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x81, 0x9, 0x5, 0x1f461e2c, 0x0, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x1200000, 0x6, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x81000001, 0x6, 0xff, 0x40000100, 0x8d2, 0x9, 0x4020005, 0x7fff, 0x0, 0x20000001, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x5, 0x3e7, 0x7, 0x5, 0xfffffffe, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7bf, 0x7, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0xfd, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x80014c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10082, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x0, 0x20}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m46.111806414s ago: executing program 2 (id=44): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80, 0x8) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000002000)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r6, 0x0, 0x5) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x200, &(0x7f0000000240)={0x0}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x1a9cc2) 9m43.119492798s ago: executing program 2 (id=70): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0x1d0, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 9m43.030200221s ago: executing program 2 (id=71): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback={0x0, 0x7ffffffe}, 0x9}, 0x1c) (fail_nth: 2) 9m42.989757903s ago: executing program 32 (id=71): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback={0x0, 0x7ffffffe}, 0x9}, 0x1c) (fail_nth: 2) 2m39.809639046s ago: executing program 1 (id=4023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x0, 0x5b3}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80400c0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x4040010) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 2m39.809344997s ago: executing program 1 (id=4025): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) 2m39.809264826s ago: executing program 1 (id=4026): syz_usb_connect$midi(0x5, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100144be00103512138240000102030109025e000101a140030904000004010300010905098211399df7a50f11e63910ff0308060a0425010009050b0c400003190309"], 0x0) 2m38.482406972s ago: executing program 1 (id=4048): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40040) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, 0x0, 0x800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet6(0xa, 0x3, 0x6) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 2m38.299149288s ago: executing program 1 (id=4052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x3, 0x0, [{0x1, 0x1006b1, 0x4, 0xfffffff7, 0x4be1}, {0xa, 0xfffffffb, 0x8, 0x800009, 0x3}, {0xd, 0x3, 0x61, 0x4, 0x4}]}) 2m38.194791982s ago: executing program 1 (id=4056): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x98, r2, 0x1, 0xfffffffd, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x70, 0x70, [@NL80211_MESH_SETUP_IE={0x6a, 0x3, "6b62b42e9f8132e9ff0f7391ff20381de280861c16e4269cf0201e5e34b5cf5ba3d868d1d3a69e8b7fa1f49b0afd24cc3f063852f98c5c39a851fa511c1f8d2d5af96536c42144250b14eabbd05e5a9bb9edf868e0786f22e3eb89d91e878b5f379c231b9f96"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 2m38.063963567s ago: executing program 33 (id=4056): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x98, r2, 0x1, 0xfffffffd, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x70, 0x70, [@NL80211_MESH_SETUP_IE={0x6a, 0x3, "6b62b42e9f8132e9ff0f7391ff20381de280861c16e4269cf0201e5e34b5cf5ba3d868d1d3a69e8b7fa1f49b0afd24cc3f063852f98c5c39a851fa511c1f8d2d5af96536c42144250b14eabbd05e5a9bb9edf868e0786f22e3eb89d91e878b5f379c231b9f96"}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 1.839351286s ago: executing program 5 (id=6647): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000440)={0xa3, 0x0, &(0x7f0000000380)}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, &(0x7f0000000040)=0x1000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 1.748441309s ago: executing program 0 (id=6649): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000007b00010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.564142825s ago: executing program 5 (id=6651): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0xf, "2a281d2d71db37f20a8f1597f02515"}}) 1.563806935s ago: executing program 0 (id=6652): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x189602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) 1.560870205s ago: executing program 5 (id=6654): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8f0ff001d00e9"], 0xb8}}, 0x0) 1.557649396s ago: executing program 0 (id=6655): setpgid(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000240)={0x19980330, r1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xc, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@index_on}], [], 0x2c}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000000c0)=0x564, 0x4) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0x253, 0x4) accept4$tipc(r0, 0x0, &(0x7f0000000140), 0x80800) write$P9_RGETLOCK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003701000203000000000000010480000000000000", @ANYRES32=0x0, @ANYBLOB="0e007d2923332e3a2f5e2a3a25282b77"], 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f00000000c0)={0x8b, 0x8a, 0x100000}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0xe3) 1.454626639s ago: executing program 5 (id=6656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2, 0x0, 0xfffc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000200)="e961ca4e421f25663e400688341c1b671dd2727ff06fdbb889badbfdfdf14faf1faccae553859a1b573fdc71719cab1df13dfd4d9bc26058db6d5e0a613a6b7d1613ca062fdb50c3d9b9c67b7e381e3b"}) 1.43992993s ago: executing program 0 (id=6658): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback={0x20, 0x7ffffffe}, 0x9}, 0x1c) 1.381982692s ago: executing program 0 (id=6660): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000003740)=""/40, 0x28}, {&(0x7f0000003800)=""/4093, 0xffd}], 0x6, 0x0, 0x0, 0x6000000}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x120, 0x0) 1.353815773s ago: executing program 5 (id=6661): socket$inet6(0xa, 0x802, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000250001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 1.252016146s ago: executing program 5 (id=6663): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000084000/0x4000)=nil) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0xf0, 0x27, 0x1, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xcd}}, 0xf0}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000006, 0x31, 0xffffffffffffffff, 0x10000000) r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084504, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000005, 0x4000013, r3, 0x6b25e000) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x80801) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r6, @ANYBLOB="07b0"], 0x0) 1.251918886s ago: executing program 0 (id=6664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd07001000fff54000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r1, @ANYRES64=r1], 0xffe) 1.109748991s ago: executing program 4 (id=6668): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r0, 0x8940, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r2, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x1c}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000004680)={0x3, {{0xa, 0x1ff, 0x100, @mcast1, 0x2}}, 0x4000}, 0x90) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (fail_nth: 2) r6 = socket(0x10, 0x3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0) pipe2(0x0, 0x4080) recvfrom$inet_nvme(r6, &(0x7f0000000180)=""/87, 0x57, 0x40000000, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x3, 0x1, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x4c, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) 1.040024543s ago: executing program 4 (id=6669): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syncfs(0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r2, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket(0x0, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@vsock={0x1e, 0x0, 0x0, @hyper}, 0x80, 0x0}}], 0x2, 0x4004040) 1.007146875s ago: executing program 4 (id=6670): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x203f00, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006150083000000002a90a08538b3c83e25038a39b52bb09ea549b3"], 0x0}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x5, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x1, 0x7, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 955.537806ms ago: executing program 3 (id=6671): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc01000015000100fcffffff10000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000f7fb20020a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000040000000000000002010003000000000401050064010102000000000000000000000000000004d43220000000000000200100000000000000000000000000000635000000000200000000000000000000000000ac141428000000000000000000000000000004d332000c00000000007f0000210000000000000000000104000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d533000101000000000000000000000000043500000000010000000000bf"], 0x1bc}}, 0x4080) 827.871091ms ago: executing program 3 (id=6672): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015) socket$inet6(0xa, 0x80001, 0x0) (async) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x4, 0x10, 0x4, 0x4, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0xc0000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x10, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000700000005002a000000000008000f00"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000700000005002a000000000008000f00"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000000)={0x7fffffff, 0xd3a, 0x4, 0xf9b2}) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000000)={0x7fffffff, 0xd3a, 0x4, 0xf9b2}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x12) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80100001600010009000000fedbdf2500000000000000000000000000000001e00000010000000000000000000000004e2400044e2100000200a0a032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="64010100000000000000000000000000000004d4320000b75500000000000000000000000000000100000000000000000180000000000000080000000000000004000000000000000010000000000000110f000000000000000000000000000000000100000000009d0e000000000000ff030000000000000300000000000000090000000000000001000080060000000100000025bd700003350000020000000c0000000000000005"], 0x1e8}, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000) (async) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="e80100001600010009000000fedbdf2500000000000000000000000000000001e00000010000000000000000000000004e2400044e2100000200a0a032000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="64010100000000000000000000000000000004d4320000b75500000000000000000000000000000100000000000000000180000000000000080000000000000004000000000000000010000000000000110f000000000000000000000000000000000100000000009d0e000000000000ff030000000000000300000000000000090000000000000001000080060000000100000025bd700003350000020000000c0000000000000005"], 0x1e8}, 0x1, 0x0, 0x0, 0x20041081}, 0x4000000) 620.341008ms ago: executing program 3 (id=6673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="70000000fffffffffff4aaaaaaaaaabb08004508002c65584000002f"], 0x3e) 376.624077ms ago: executing program 4 (id=6674): setpgid(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) capset(&(0x7f0000000240)={0x19980330, r1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xc, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@index_on}], [], 0x2c}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f00000000c0)=0x564, 0x4) setsockopt$inet_int(r2, 0x0, 0x21, &(0x7f0000000080)=0x253, 0x4) accept4$tipc(r0, 0x0, &(0x7f0000000140), 0x80800) write$P9_RGETLOCK(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003701000203000000000000010480000000000000", @ANYRES32=0x0, @ANYBLOB="0e007d2923332e3a2f5e2a3a25282b77"], 0x2c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f00000000c0)={0x8b, 0x8a, 0x100000}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x7, 0x1, 0x40, @empty, @mcast1, 0x7, 0x40, 0xfff, 0x7ff}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0xe3) 328.123438ms ago: executing program 3 (id=6675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x2, 0x0, 0x2000000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000200)="e961ca4e421f25663e400688341c1b671dd2727ff06fdbb889badbfdfdf14faf1faccae553859a1b573fdc71719cab1df13dfd4d9bc26058db6d5e0a613a6b7d1613ca062fdb50c3d9b9c67b7e381e3bfbb387b9"}) 327.504048ms ago: executing program 3 (id=6676): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x400000c, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x1260, &(0x7f0000000200)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffe, 0x0, 0x0, 0xd, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x8000a]}}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 277.98662ms ago: executing program 3 (id=6677): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x10, 0x41, 0x100, 0x70bd29, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x8890}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2d}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) exit(0xfffffffffffffffb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x1, 0x2, 0xd, 0xbfff, 0x5}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r4 = socket(0x21, 0x2, 0x0) flock(0xffffffffffffffff, 0x1780f9c373410dea) setsockopt$inet_opts(r4, 0x0, 0x19, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400042, 0x0) 90.732956ms ago: executing program 4 (id=6678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="8ee8c9b8ee08b228660f3801b2d6353ec14b0081660f3882040f01cf0fc72d2626652e0f01ca67660fc7b1fdb600006635002000000f22e0", 0x38}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)=@vmx={0x102, 0x0, 0x2080, {0x0, 0x2000, {}, 0x1, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000001}) (async, rerun: 64) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=6679): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r0, 0x8940, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) readv(r2, &(0x7f0000003440)=[{&(0x7f0000002200)=""/75, 0x4b}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x1c}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000004680)={0x3, {{0xa, 0x1ff, 0x100, @mcast1, 0x2}}, 0x4000}, 0x90) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r6 = socket(0x10, 0x3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x800, 0x0) pipe2(0x0, 0x4080) recvfrom$inet_nvme(r6, &(0x7f0000000180)=""/87, 0x57, 0x40000000, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x3, 0x1, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4c, 0x4c, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r6], 0x20}}, 0x0) kernel console output (not intermixed with test programs): m: crng reseeded on system resumption [ 489.960149][T14330] loop7: detected capacity change from 0 to 7 [ 489.971300][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 489.980014][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 489.980997][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.001233][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.010449][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.018365][T14039] loop7: unable to read partition table [ 490.081061][T14365] support for cryptoloop has been removed. Use dm-crypt instead. [ 490.090222][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.099543][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.107778][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.116967][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.124837][T14330] loop7: unable to read partition table [ 490.130635][T14330] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 490.137652][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.153372][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.161622][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.170773][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.179199][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.188658][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.197280][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.206557][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.214705][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 490.224007][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 490.664488][T14384] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4633'. [ 490.900452][ T1677] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 491.050419][ T1677] usb 1-1: Using ep0 maxpacket: 32 [ 491.056852][ T1677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.067817][ T1677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.077719][ T1677] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 491.086819][ T1677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.095505][ T1677] usb 1-1: config 0 descriptor?? [ 491.101946][ T1677] hub 1-1:0.0: USB hub found [ 491.303770][ T1677] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 491.505157][ T1677] usbhid 1-1:0.0: can't add hid device: -71 [ 491.511223][ T1677] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 491.530758][ T1677] usb 1-1: USB disconnect, device number 74 [ 492.626641][T14409] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4644'. [ 492.691886][T14413] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4646'. [ 492.733997][T14415] fuse: Unknown parameter 'group_i00000000000000000000' [ 492.875703][ T8186] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 492.884719][ T8186] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.961863][ T36] kauditd_printk_skb: 2182 callbacks suppressed [ 492.961884][ T36] audit: type=1326 audit(1775088266.177:90371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.4651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4219c819 code=0x0 [ 493.063851][T14429] netlink: 'syz.0.4651': attribute type 11 has an invalid length. [ 493.071770][T14429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4651'. [ 493.216969][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4653'. [ 493.941978][T14470] syzkaller0: entered allmulticast mode [ 493.948603][T14470] syzkaller0: entered promiscuous mode [ 493.962017][T14469] syzkaller0: left promiscuous mode [ 493.967381][T14469] syzkaller0: left allmulticast mode [ 494.012388][T14481] syz_tun: entered allmulticast mode [ 494.034383][T14487] fuse: Bad value for 'user_id' [ 494.039291][T14487] fuse: Bad value for 'user_id' [ 494.080392][ T1677] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 494.231914][ T1677] usb 1-1: unable to get BOS descriptor or descriptor too short [ 494.240457][ T1677] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 494.253412][ T1677] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 494.262504][ T1677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.270588][ T1677] usb 1-1: Product: syz [ 494.274783][ T1677] usb 1-1: Manufacturer: syz [ 494.279409][ T1677] usb 1-1: SerialNumber: syz [ 494.489446][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 494.933880][T14508] fuse: Bad value for 'group_id' [ 494.938978][T14508] fuse: Bad value for 'group_id' [ 495.199487][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'. [ 495.519163][T14537] netlink: 'syz.4.4701': attribute type 1 has an invalid length. [ 495.527589][T14537] netlink: 'syz.4.4701': attribute type 11 has an invalid length. [ 495.535506][T14537] netlink: 'syz.4.4701': attribute type 2 has an invalid length. [ 495.614415][T14541] 9pnet_fd: p9_fd_create_tcp (14541): problem connecting socket to 127.0.0.1 [ 495.614415][T14542] 9pnet_fd: p9_fd_create_tcp (14542): problem connecting socket to 127.0.0.1 [ 495.774369][T14561] fuse: Bad value for 'user_id' [ 495.779334][T14561] fuse: Bad value for 'user_id' [ 496.428107][T14576] fuse: Bad value for 'fd' [ 496.508740][T14584] veth0_virt_wifi: entered allmulticast mode [ 496.514941][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 496.521174][ T990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 496.528023][T14452] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 496.563615][T14589] fuse: Bad value for 'fd' [ 496.583281][ T1677] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 496.590580][ T1677] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 496.599022][ T1677] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 496.607490][ T1677] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 496.621558][T14583] veth0_virt_wifi: left allmulticast mode [ 496.623219][ T1677] usb 1-1: USB disconnect, device number 75 [ 496.858050][T14600] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4728'. [ 496.876898][T14602] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4729'. [ 496.950151][T14605] netlink: 340 bytes leftover after parsing attributes in process `syz.4.4730'. [ 496.959688][T14605] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4730'. [ 497.180508][T14620] netlink: 'syz.5.4735': attribute type 4 has an invalid length. [ 497.188750][T14620] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4735'. [ 497.370499][ T436] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 497.521010][ T436] usb 1-1: no configurations [ 497.525815][ T436] usb 1-1: can't read configurations, error -22 [ 497.660435][ T436] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 497.720871][ T36] audit: type=1400 audit(1775088270.937:90372): avc: denied { create } for pid=14669 comm="syz.3.4739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 497.820795][ T436] usb 1-1: no configurations [ 497.825443][ T436] usb 1-1: can't read configurations, error -22 [ 497.832045][ T436] usb usb1-port1: attempt power cycle [ 497.871477][T14680] netlink: 'syz.5.4744': attribute type 4 has an invalid length. [ 497.879524][T14680] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4744'. [ 498.180443][ T436] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 498.201217][ T436] usb 1-1: no configurations [ 498.205850][ T436] usb 1-1: can't read configurations, error -22 [ 498.340412][ T436] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 498.361215][ T436] usb 1-1: no configurations [ 498.365863][ T436] usb 1-1: can't read configurations, error -22 [ 498.372535][ T436] usb usb1-port1: unable to enumerate USB device [ 498.445408][T14703] fuse: Bad value for 'fd' [ 499.107575][T14722] netlink: 1143 bytes leftover after parsing attributes in process `syz.4.4762'. [ 499.662223][T14744] IPv6: Can't replace route, no match found [ 499.677841][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4774'. [ 500.018141][T14750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=14750 comm=syz.5.4776 [ 500.042949][ T36] audit: type=1400 audit(1775088273.257:90373): avc: denied { write } for pid=14751 comm="syz.5.4777" name="/" dev="configfs" ino=2493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 500.217595][ T36] audit: type=1326 audit(1775088273.427:90374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14769 comm="syz.4.4783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65bb9c819 code=0x0 [ 500.372441][T14777] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4786'. [ 500.929869][T14798] syz_tun: mtu less than device minimum [ 501.360448][ T502] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 501.510421][ T502] usb 1-1: Invalid ep0 maxpacket: 16 [ 501.640379][ T502] usb 1-1: new low-speed USB device number 81 using dummy_hcd [ 501.790379][ T502] usb 1-1: Invalid ep0 maxpacket: 16 [ 501.795833][ T502] usb usb1-port1: attempt power cycle [ 501.803396][T14834] overlayfs: failed to clone upperpath [ 501.915804][T14838] netlink: 'syz.5.4810': attribute type 10 has an invalid length. [ 501.923884][T14838] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4810'. [ 501.932931][T14838] veth1: entered promiscuous mode [ 502.150416][ T502] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 502.170763][ T502] usb 1-1: Invalid ep0 maxpacket: 16 [ 502.300499][ T502] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 502.321608][ T502] usb 1-1: Invalid ep0 maxpacket: 16 [ 502.327539][ T502] usb usb1-port1: unable to enumerate USB device [ 502.941734][T14886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14886 comm=syz.3.4830 [ 504.089802][T14914] bridge0: port 3(veth0) entered blocking state [ 504.096149][T14914] bridge0: port 3(veth0) entered disabled state [ 504.102566][T14914] veth0: entered allmulticast mode [ 504.108098][T14914] veth0: entered promiscuous mode [ 504.540397][ T436] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 504.691690][ T436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.701549][ T436] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 504.710804][ T436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.719622][ T436] usb 1-1: config 0 descriptor?? [ 504.726261][ T436] hub 1-1:0.0: bad descriptor, ignoring hub [ 504.732245][ T436] hub 1-1:0.0: probe with driver hub failed with error -5 [ 504.739609][ T436] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 504.790121][T14937] fuse: Unknown parameter 'user_i00000000000000000000' [ 505.494724][ T36] audit: type=1326 audit(1775088278.707:90375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.5.4859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71af39c819 code=0x0 [ 505.544961][T14960] fuse: Unknown parameter '#o.ieg nf`Zd0x0000000000000005' [ 505.554459][ T36] audit: type=1400 audit(1775088278.767:90376): avc: denied { audit_read } for pid=14959 comm="syz.3.4862" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 506.715604][T14995] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4874'. [ 507.272895][T15005] random: crng reseeded on system resumption [ 507.346690][ T502] usb 1-1: USB disconnect, device number 84 [ 507.391363][T15021] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4883'. [ 507.444281][T15031] fuse: Unknown parameter 'user_id00000000000000000000' [ 507.886678][T15047] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4893'. [ 508.156424][T15078] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4904'. [ 508.347368][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 508.356440][T15084] dummy0: left allmulticast mode [ 508.361447][T15084] dummy0: left promiscuous mode [ 508.366370][T15084] bridge0: port 4(dummy0) entered disabled state [ 508.373185][T15084] ip6gretap0: left allmulticast mode [ 508.378491][T15084] ip6gretap0: left promiscuous mode [ 508.383960][T15084] bridge0: port 3(ip6gretap0) entered disabled state [ 508.391095][T15084] bridge_slave_1: left allmulticast mode [ 508.396793][T15084] bridge_slave_1: left promiscuous mode [ 508.402489][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.410161][T15084] bridge_slave_0: left allmulticast mode [ 508.415962][T15084] bridge_slave_0: left promiscuous mode [ 508.421662][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.646856][T15086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=15086 comm=syz.3.4908 [ 508.716118][T15089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 508.734820][T15095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4911'. [ 509.050373][ T502] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 509.201505][ T502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.230356][ T502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.248283][ T502] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.257801][ T502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.267551][ T502] usb 1-1: config 0 descriptor?? [ 509.277172][ T502] hub 1-1:0.0: USB hub found [ 509.479169][ T502] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 509.699501][ T502] usbhid 1-1:0.0: can't add hid device: -71 [ 509.706220][ T502] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 509.730675][ T502] usb 1-1: USB disconnect, device number 85 [ 510.209944][T15128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4925'. [ 510.441444][T15144] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4931'. [ 510.476598][T15151] fuse: Unknown parameter '0x0000000000000004' [ 510.831104][T15173] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4942'. [ 510.893114][T15183] fuse: Unknown parameter '0x0000000000000004' [ 511.083166][T15200] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4951'. [ 511.633150][T15219] fuse: Unknown parameter '0x0000000000000004' [ 511.800572][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.821415][T15221] bridge_slave_0 (unregistering): left allmulticast mode [ 511.829970][T15221] bridge_slave_0 (unregistering): left promiscuous mode [ 511.837712][T15227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 511.839839][T15221] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.854618][T15227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 511.996206][T15245] fuse: Unknown parameter '0x0000000000000004' [ 512.005572][T15247] fuse: Bad value for 'fd' [ 512.061999][T15255] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4974'. [ 512.493223][T15268] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4979'. [ 512.600534][T15279] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4984'. [ 513.213225][T15297] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4993'. [ 513.336792][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.346851][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.354484][T15303] bridge_slave_0: entered allmulticast mode [ 513.360813][T15303] bridge_slave_0: entered promiscuous mode [ 513.367516][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.374641][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.381952][T15303] bridge_slave_1: entered allmulticast mode [ 513.388189][T15303] bridge_slave_1: entered promiscuous mode [ 513.444070][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.451173][T15303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.458427][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.465476][T15303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.496025][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.507436][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.514583][T14641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.523884][T14642] veth1_macvtap: left promiscuous mode [ 513.529786][T14642] veth0_vlan: left promiscuous mode [ 513.592886][T15303] veth0_vlan: entered promiscuous mode [ 513.611396][T15303] veth1_macvtap: entered promiscuous mode [ 513.645193][T15319] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5001'. [ 513.699345][T15329] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 513.708976][T15329] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 514.020392][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 514.058004][T14642] veth0: left allmulticast mode [ 514.063081][T14642] veth0: left promiscuous mode [ 514.067988][T14642] bridge0: port 3(veth0) entered disabled state [ 514.074958][T14642] bridge_slave_1: left allmulticast mode [ 514.080659][T14642] bridge_slave_1: left promiscuous mode [ 514.086778][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.094330][T14642] bridge_slave_0: left allmulticast mode [ 514.100122][T14642] bridge_slave_0: left promiscuous mode [ 514.106288][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.171700][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 514.180124][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.191360][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.201240][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 514.214483][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 514.223890][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.226934][T15347] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.239334][T15347] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.242242][ T9] usb 5-1: config 0 descriptor?? [ 514.246867][T15347] bridge_slave_0: entered allmulticast mode [ 514.258358][T15347] bridge_slave_0: entered promiscuous mode [ 514.266201][T14642] veth1_macvtap: left promiscuous mode [ 514.272515][T14642] veth0_vlan: left promiscuous mode [ 514.325426][T15347] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.332969][T15347] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.342680][T15347] bridge_slave_1: entered allmulticast mode [ 514.349192][T15347] bridge_slave_1: entered promiscuous mode [ 514.431709][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.438935][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.447096][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.454289][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.485452][T15347] veth0_vlan: entered promiscuous mode [ 514.498304][T15347] veth1_macvtap: entered promiscuous mode [ 514.559759][T15354] netlink: 'syz.5.5012': attribute type 27 has an invalid length. [ 514.572772][T15354] veth1: left promiscuous mode [ 514.662937][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 514.688877][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 514.717638][ T9] usb 5-1: USB disconnect, device number 78 [ 514.731892][T15363] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 514.771732][T15367] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5017'. [ 514.840721][ T1677] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 514.911778][T15386] tipc: MTU too low for tipc bearer [ 515.014123][ T1677] usb 4-1: config 2 has an invalid interface number: 184 but max is 0 [ 515.039641][ T1677] usb 4-1: config 2 has no interface number 0 [ 515.050522][ T1677] usb 4-1: config 2 interface 184 has no altsetting 0 [ 515.071482][ T1677] usb 4-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= c.2f [ 515.090575][ T1677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.104402][ T1677] usb 4-1: Product: syz [ 515.108626][ T1677] usb 4-1: Manufacturer: syz [ 515.120595][ T1677] usb 4-1: SerialNumber: syz [ 515.270442][ T45] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 515.341757][ T1677] usb 4-1: unknown interface protocol 0xd0, assuming v1 [ 515.348969][ T1677] usb 4-1: cannot find UAC_HEADER [ 515.356321][ T1677] snd-usb-audio 4-1:2.184: probe with driver snd-usb-audio failed with error -22 [ 515.367454][ T1677] usb 4-1: USB disconnect, device number 87 [ 515.372030][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.184/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 515.421712][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.432412][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.442408][ T45] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 515.451726][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 515.459763][ T45] usb 5-1: SerialNumber: syz [ 515.681170][ T45] usb 5-1: 0:2 : does not exist [ 515.689432][ T45] usb 5-1: USB disconnect, device number 79 [ 515.702401][ T36] audit: type=1400 audit(1775088288.917:90377): avc: denied { ioctl } for pid=15399 comm="syz.0.5028" path="socket:[93942]" dev="sockfs" ino=93942 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 515.702556][T14921] udevd[14921]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 516.090431][ T1475] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 516.109204][T15406] netlink: 'syz.5.5031': attribute type 12 has an invalid length. [ 516.118696][T15406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15406 comm=syz.5.5031 [ 516.181342][ T36] audit: type=1400 audit(1775088289.397:90378): avc: denied { execute } for pid=15407 comm="syz.4.5032" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 516.241860][ T1475] usb 4-1: unable to get BOS descriptor or descriptor too short [ 516.250299][ T1475] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 516.264531][ T1475] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 516.275217][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.286265][ T1475] usb 4-1: Product: syz [ 516.298533][ T1475] usb 4-1: Manufacturer: syz [ 516.304557][ T1475] usb 4-1: SerialNumber: syz [ 516.309556][T15416] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5036'. [ 516.392183][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5037'. [ 516.402623][ T36] audit: type=1400 audit(1775088289.617:90379): avc: denied { map } for pid=15420 comm="syz.0.5037" path="socket:[94621]" dev="sockfs" ino=94621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 516.427628][ T36] audit: type=1400 audit(1775088289.617:90380): avc: denied { read } for pid=15420 comm="syz.0.5037" path="socket:[94621]" dev="sockfs" ino=94621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 516.435393][T15423] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5038'. [ 516.533735][T14633] Bluetooth: hci0: Frame reassembly failed (-84) [ 517.024249][T15456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15456 comm=syz.0.5053 [ 517.946668][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5067'. [ 518.010979][ T36] audit: type=1400 audit(1775088291.227:90381): avc: denied { accept } for pid=15497 comm="syz.4.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 518.590455][ T990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 518.590837][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 518.603087][T15404] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 518.653352][ T1475] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 518.660402][ T1475] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 518.669000][ T1475] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 518.677065][ T1475] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 518.686793][ T1475] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 518.695308][ T1475] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 518.703132][ T1475] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 518.713120][ T1475] usb 4-1: failed to enable PITCH for EP 0x82 [ 518.725657][ T1475] usb 4-1: USB disconnect, device number 88 [ 518.740708][T14926] udevd[14926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 518.929846][T15545] overlayfs: failed to clone upperpath [ 519.420445][ T502] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 519.580433][ T502] usb 4-1: Using ep0 maxpacket: 8 [ 519.589789][ T502] usb 4-1: string descriptor 0 read error: -22 [ 519.596390][ T502] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 519.607239][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.836699][ T502] usb 4-1: USB disconnect, device number 89 [ 520.363059][T15626] rust_binder: Read failure Err(EAGAIN) in pid:10 [ 520.444899][T15636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 520.770415][ T8186] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 520.878462][T15654] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5136'. [ 520.931967][ T8186] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.970809][ T8186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.997331][ T8186] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.006700][ T8186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.022804][ T8186] usb 4-1: Product: syz [ 521.031431][ T8186] usb 4-1: Manufacturer: syz [ 521.041515][ T8186] usb 4-1: SerialNumber: syz [ 521.055435][ T8186] cdc_mbim 4-1:1.0: skipping garbage [ 521.069568][ T8186] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 521.076755][ T8186] cdc_mbim 4-1:1.0: bind() failure [ 521.262096][ T8186] usb 4-1: USB disconnect, device number 90 [ 521.530783][T15682] fuse: Bad value for 'fd' [ 521.899566][T15693] fuse: Bad value for 'group_id' [ 521.904736][T15693] fuse: Bad value for 'group_id' [ 521.940974][T15696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5152'. [ 522.190383][ T8186] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 522.237640][T15715] fuse: Unknown parameter 'sd' [ 522.257631][T15718] overlayfs: failed to clone upperpath [ 522.273415][T15722] overlayfs: failed to resolve './file0/file0': -2 [ 522.351639][ T8186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 522.362855][ T8186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42414, setting to 1024 [ 522.374350][ T8186] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 522.387504][ T8186] usb 4-1: New USB device found, idVendor=0404, idProduct=ffff, bcdDevice= 0.00 [ 522.396790][ T8186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.409572][ T8186] usb 4-1: config 0 descriptor?? [ 522.415254][T15696] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.632121][ T8186] usbhid 4-1:0.0: can't add hid device: -71 [ 522.644663][ T8186] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 522.675767][ T8186] usb 4-1: USB disconnect, device number 91 [ 522.717499][T15734] overlayfs: failed to clone upperpath [ 522.805826][T15740] process '/newroot/55/file0' started with executable stack [ 523.618055][T15774] random: crng reseeded on system resumption [ 523.640763][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5180'. [ 523.662421][ T36] audit: type=1400 audit(1775088296.877:90382): avc: denied { validate_trans } for pid=15775 comm="syz.3.5181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 523.749831][T15788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5187'. [ 523.778003][T15795] 9pnet_fd: p9_fd_create_tcp (15795): problem connecting socket to 127.0.0.1 [ 523.828739][ T36] audit: type=1400 audit(1775088297.037:90383): avc: denied { setattr } for pid=15806 comm="syz.3.5194" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 523.940516][T15811] syzkaller1: entered promiscuous mode [ 523.946045][T15811] syzkaller1: entered allmulticast mode [ 524.690882][T15818] devpts: called with bogus options [ 525.402841][T15848] overlayfs: failed to clone upperpath [ 525.458605][T15858] overlayfs: failed to resolve './file1': -2 [ 526.030604][ T45] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 526.153016][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5222'. [ 526.180375][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 526.187040][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.198242][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.200686][T15881] fuse: Unknown parameter 'lfSŮKEۥa]8 [ 526.200686][T15881] m ʥҊUXt [ 526.200686][T15881] :]wRYn/4!iADD─JteNC17t [ 526.200686][T15881] )i/NU9!Vt(vޓ(EmV' [ 526.209616][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 526.254583][ T45] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 526.263605][ T45] usb 4-1: Product: syz [ 526.274569][ T45] usb 4-1: Manufacturer: syz [ 526.293712][ T45] hub 4-1:4.0: USB hub found [ 526.431294][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5232'. [ 526.440762][T15899] bridge_slave_1: left allmulticast mode [ 526.446472][T15899] bridge_slave_1: left promiscuous mode [ 526.455128][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.463162][T15899] bridge_slave_0: left allmulticast mode [ 526.469647][T15899] bridge_slave_0: left promiscuous mode [ 526.475630][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.497218][ T45] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 526.707337][T15870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.716193][T15870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.830484][ T9] usb 4-1: USB disconnect, device number 92 [ 526.947621][T15917] overlayfs: failed to clone upperpath [ 528.293698][T15955] fuse: Bad value for 'fd' [ 528.454705][T15972] netlink: 'syz.5.5265': attribute type 4 has an invalid length. [ 528.462528][T15972] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5265'. [ 528.806026][ T36] audit: type=1400 audit(1775088302.017:90384): avc: denied { execmod } for pid=15983 comm="syz.3.5270" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 528.918222][ T9] kernel write not supported for file [eventfd] (pid: 9 comm: kworker/0:0) [ 528.978555][T15992] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5273'. [ 529.109014][T15994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5272'. [ 529.853224][T16010] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5280'. [ 529.998822][T16014] bridge0: port 3(dummy0) entered blocking state [ 530.008332][T16014] bridge0: port 3(dummy0) entered disabled state [ 530.015737][T16014] dummy0: entered allmulticast mode [ 530.023458][T16014] dummy0: entered promiscuous mode [ 530.029074][T16014] bridge0: port 3(dummy0) entered blocking state [ 530.035474][T16014] bridge0: port 3(dummy0) entered forwarding state [ 530.350712][ T502] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 530.510360][ T502] usb 4-1: Using ep0 maxpacket: 8 [ 530.516926][ T502] usb 4-1: unable to get BOS descriptor or descriptor too short [ 530.525493][ T502] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.535255][ T502] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 530.548726][ T502] usb 4-1: string descriptor 0 read error: -22 [ 530.554993][ T502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 530.564143][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.776140][ T502] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 530.789704][ T502] usb 4-1: USB disconnect, device number 93 [ 530.807800][T16035] netlink: 'syz.5.5290': attribute type 4 has an invalid length. [ 530.911449][T14633] ip6gretap0: left allmulticast mode [ 530.916797][T14633] ip6gretap0: left promiscuous mode [ 530.922270][T14633] bridge0: port 5(ip6gretap0) entered disabled state [ 530.929733][T14633] dummy0: left allmulticast mode [ 530.934944][T14633] dummy0: left promiscuous mode [ 530.940209][T14633] bridge0: port 4(dummy0) entered disabled state [ 530.947347][T14633] team_slave_1: left allmulticast mode [ 530.953549][T14633] team_slave_1: left promiscuous mode [ 530.959087][T14633] bridge0: port 3(team_slave_1) entered disabled state [ 530.967015][T14633] bridge0: port 2(7) entered disabled state [ 530.990554][T14633] bridge_slave_0: left allmulticast mode [ 530.999547][T14633] bridge_slave_0: left promiscuous mode [ 531.010959][T14633] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.151446][T14633] veth1_macvtap: left promiscuous mode [ 531.157218][T14633] veth0_vlan: left promiscuous mode [ 531.830389][T16081] netlink: 196 bytes leftover after parsing attributes in process `syz.5.5301'. [ 531.907582][T16083] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5300'. [ 532.710387][ T45] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 532.860401][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 532.869155][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.880790][ T45] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.885862][ T36] audit: type=1400 audit(1775088306.097:90385): avc: denied { create } for pid=16113 comm="syz.4.5314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 532.891445][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 532.917797][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 532.928518][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.941504][ T45] usb 4-1: config 0 descriptor?? [ 533.350418][T16130] bridge0: port 1(dummy0) entered blocking state [ 533.356918][T16130] bridge0: port 1(dummy0) entered disabled state [ 533.363961][T16130] dummy0: entered allmulticast mode [ 533.369704][T16130] dummy0: entered promiscuous mode [ 533.375027][T16130] bridge0: port 1(dummy0) entered blocking state [ 533.381433][T16130] bridge0: port 1(dummy0) entered listening state [ 533.569724][ T1475] usb 4-1: USB disconnect, device number 94 [ 534.380376][ T45] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 534.531727][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.542885][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.552655][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 534.561853][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.570535][ T45] usb 4-1: config 0 descriptor?? [ 534.578981][ T45] hub 4-1:0.0: USB hub found [ 534.780136][ T45] hub 4-1:0.0: 1 port detected [ 535.111463][T16188] overlayfs: failed to clone lowerpath [ 535.129598][T16193] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.138024][T16193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=16193 comm=syz.5.5349 [ 535.582564][ T45] hub 4-1:0.0: activate --> -90 [ 535.983632][ T9] usb 4-1: USB disconnect, device number 95 [ 536.200446][ T45] usb 4-1-port1: config error [ 536.860368][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 537.011608][ T9] usb 4-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 537.022197][ T9] usb 4-1: config 166 has 0 interfaces, different from the descriptor's value: 2 [ 537.033129][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.042325][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.051066][ T9] usb 4-1: Product: syz [ 537.058799][ T9] usb 4-1: Manufacturer: syz [ 537.063668][ T9] usb 4-1: SerialNumber: syz [ 537.270979][T16226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16226 comm=syz.3.5362 [ 537.293189][ T36] audit: type=1400 audit(1775088310.507:90386): avc: denied { getopt } for pid=16225 comm="syz.3.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 537.449335][ T9] usb 4-1: USB disconnect, device number 96 [ 537.868469][T16257] netlink: 'syz.5.5376': attribute type 1 has an invalid length. [ 537.915315][T16268] EXT4-fs: Conflicting test_dummy_encryption options [ 538.439291][T16274] netlink: 'syz.5.5383': attribute type 4 has an invalid length. [ 539.041440][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5395'. [ 539.629816][T16322] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 539.910387][ T1677] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 540.080469][ T1677] usb 4-1: Using ep0 maxpacket: 16 [ 540.087283][ T1677] usb 4-1: unable to get BOS descriptor or descriptor too short [ 540.095891][ T1677] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.106102][ T1677] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 540.116594][ T1677] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 540.125853][ T1677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.133890][ T1677] usb 4-1: Product: syz [ 540.138134][ T1677] usb 4-1: Manufacturer: syz [ 540.142785][ T1677] usb 4-1: SerialNumber: syz [ 540.351942][ T1677] usb 4-1: 0:2 : does not exist [ 540.358978][ T1677] usb 4-1: USB disconnect, device number 97 [ 541.140385][ T1677] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 541.302258][ T1677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 541.313446][ T1677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.323280][ T1677] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 541.332598][ T1677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.341476][ T1677] usb 4-1: config 0 descriptor?? [ 541.348387][ T1677] hub 4-1:0.0: USB hub found [ 541.548645][ T1677] hub 4-1:0.0: 1 port detected [ 541.776752][T16395] netlink: 'syz.5.5433': attribute type 12 has an invalid length. [ 541.822100][ T36] audit: type=1400 audit(1775088315.037:90387): avc: denied { add_name } for pid=16399 comm="syz.4.5435" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 541.850383][ T36] audit: type=1400 audit(1775088315.037:90388): avc: denied { create } for pid=16399 comm="syz.4.5435" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 541.877466][ T36] audit: type=1400 audit(1775088315.037:90389): avc: denied { lock } for pid=16399 comm="syz.4.5435" path="socket:[98318]" dev="sockfs" ino=98318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 542.354559][ T1677] hub 4-1:0.0: activate --> -90 [ 542.411705][T16417] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5441'. [ 542.753433][ T436] usb 4-1: USB disconnect, device number 98 [ 542.962242][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5450'. [ 542.971330][ T1677] usb 4-1-port1: config error [ 542.976182][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5450'. [ 542.998902][T16442] overlayfs: failed to clone upperpath [ 543.503612][ T36] audit: type=1400 audit(1775088316.717:90390): avc: denied { lock } for pid=16473 comm="syz.5.5464" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=98410 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 543.600359][ T1677] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 543.750401][ T1677] usb 4-1: Using ep0 maxpacket: 8 [ 543.757418][ T1677] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.767367][ T1677] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 543.776582][ T1677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.784684][ T1677] usb 4-1: Product: syz [ 543.789012][ T1677] usb 4-1: Manufacturer: syz [ 543.793879][ T1677] usb 4-1: SerialNumber: syz [ 544.000392][ T36] audit: type=1400 audit(1775088317.207:90391): avc: denied { map } for pid=16456 comm="syz.3.5457" path="socket:[97813]" dev="sockfs" ino=97813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 544.032057][ T1677] usb 4-1: USB disconnect, device number 99 [ 544.051135][T14926] udevd[14926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 544.138390][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5477'. [ 544.242749][ T36] audit: type=1400 audit(1775088317.457:90392): avc: denied { mount } for pid=16504 comm="syz.4.5478" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 544.375547][ T36] audit: type=1400 audit(1775088317.587:90393): avc: denied { create } for pid=16511 comm="syz.0.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 544.431324][T16516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5483'. [ 544.556053][T16531] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5490'. [ 545.140343][ T36] audit: type=1400 audit(1775088318.347:90394): avc: denied { mounton } for pid=16562 comm="syz.4.5501" path="/168/file0" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 545.692454][T16581] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5509'. [ 545.728116][T16587] bridge0: port 3(veth0) entered blocking state [ 545.734473][T16587] bridge0: port 3(veth0) entered disabled state [ 545.740872][T16587] veth0: entered allmulticast mode [ 545.746750][T16587] veth0: entered promiscuous mode [ 545.751941][T16587] bridge0: port 3(veth0) entered blocking state [ 545.758188][T16587] bridge0: port 3(veth0) entered listening state [ 545.960376][ T65] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 546.090433][ T65] usb 4-1: device descriptor read/64, error -71 [ 546.330396][ T65] usb 4-1: device descriptor read/64, error -71 [ 546.360175][T16606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5521'. [ 546.570471][ T65] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 546.700350][ T65] usb 4-1: device descriptor read/64, error -71 [ 546.798554][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5527'. [ 546.940406][ T65] usb 4-1: device descriptor read/64, error -71 [ 547.050482][ T65] usb usb4-port1: attempt power cycle [ 547.390359][ T65] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 547.411503][ T65] usb 4-1: device descriptor read/8, error -71 [ 547.538361][T16632] tipc: Started in network mode [ 547.541524][ T65] usb 4-1: device descriptor read/8, error -71 [ 547.543577][T16632] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 547.557131][T16632] tipc: Enabled bearer , priority 10 [ 547.669530][T16636] netlink: 'syz.0.5534': attribute type 27 has an invalid length. [ 547.691962][T16636] bridge0: port 3(veth0) entered disabled state [ 547.698355][T16636] bridge0: port 1(dummy0) entered disabled state [ 547.704856][T16636] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.740461][T16644] netlink: 'syz.5.5537': attribute type 4 has an invalid length. [ 547.748317][T16644] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5537'. [ 547.780387][ T65] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 547.813319][ T65] usb 4-1: device descriptor read/8, error -71 [ 547.941640][ T65] usb 4-1: device descriptor read/8, error -71 [ 548.050516][ T65] usb usb4-port1: unable to enumerate USB device [ 548.670393][ T1677] tipc: Node number set to 8956586 [ 548.961816][T16712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:186 [ 549.147807][T16718] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5562'. [ 549.201459][T16722] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5565'. [ 549.351594][ T36] audit: type=1326 audit(1775088322.567:90395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.0.5570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4219c819 code=0x0 [ 549.747786][T16752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.832957][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 550.147111][T16778] overlayfs: failed to clone upperpath [ 550.592490][T16806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 551.137624][ T36] audit: type=1326 audit(1775088324.347:90396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16843 comm="syz.4.5615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d4059c819 code=0x0 [ 551.892708][T16907] netlink: 'syz.0.5641': attribute type 12 has an invalid length. [ 552.139415][T16933] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5652'. [ 552.463806][T16941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5656'. [ 552.470482][T16937] netlink: 580 bytes leftover after parsing attributes in process `syz.3.5654'. [ 552.472934][T16941] veth0: left allmulticast mode [ 552.487519][T16941] veth0: left promiscuous mode [ 552.493729][T16941] bridge0: port 3(veth0) entered disabled state [ 552.500647][T16941] dummy0: left allmulticast mode [ 552.505597][T16941] dummy0: left promiscuous mode [ 552.510574][T16941] bridge0: port 1(dummy0) entered disabled state [ 552.517533][T16941] bridge_slave_1: left allmulticast mode [ 552.523498][T16941] bridge_slave_1: left promiscuous mode [ 552.529280][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.932907][T16963] netlink: 37 bytes leftover after parsing attributes in process `syz.5.5665'. [ 553.240432][ T45] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 553.391404][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 553.409296][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.419384][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 553.428841][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.438043][ T45] usb 4-1: config 0 descriptor?? [ 553.444937][ T45] hub 4-1:0.0: USB hub found [ 553.562608][T17007] overlayfs: failed to clone upperpath [ 553.650360][ T45] hub 4-1:0.0: 1 port detected [ 553.672887][T17013] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5684'. [ 553.683900][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5684'. [ 553.693093][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5684'. [ 554.011803][ T36] audit: type=1326 audit(1775088327.227:90397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17031 comm="syz.0.5691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4219c819 code=0x0 [ 554.447591][ T45] hub 4-1:0.0: activate --> -90 [ 554.575518][T17035] tipc: Trying to set illegal importance in message [ 554.895062][ T9] usb 4-1: USB disconnect, device number 104 [ 555.110380][ T45] usb 4-1-port1: config error [ 555.507349][T17055] IPv6: Can't replace route, no match found [ 555.660415][ T45] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 555.783576][T17073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5708'. [ 555.790373][ T45] usb 4-1: device descriptor read/64, error -71 [ 556.031330][ T45] usb 4-1: device descriptor read/64, error -71 [ 556.280383][ T45] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 556.410368][ T45] usb 4-1: device descriptor read/64, error -71 [ 556.435547][T17098] overlayfs: failed to clone upperpath [ 556.481682][T17103] incfs: Error accessing: ./file0. [ 556.486906][T17103] incfs: mount failed -20 [ 556.591222][T17119] overlayfs: failed to clone upperpath [ 556.660467][ T45] usb 4-1: device descriptor read/64, error -71 [ 556.770488][ T45] usb usb4-port1: attempt power cycle [ 557.110370][ T45] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 557.131497][ T45] usb 4-1: device descriptor read/8, error -71 [ 557.241259][T17140] overlayfs: failed to clone upperpath [ 557.265386][ T45] usb 4-1: device descriptor read/8, error -71 [ 557.349244][T17151] overlayfs: failed to clone upperpath [ 557.417684][T17162] overlayfs: failed to clone upperpath [ 557.510351][ T45] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 557.531360][ T45] usb 4-1: device descriptor read/8, error -71 [ 557.661627][ T45] usb 4-1: device descriptor read/8, error -71 [ 557.770470][ T45] usb usb4-port1: unable to enumerate USB device [ 557.884466][ T36] audit: type=1326 audit(1775088331.097:90398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17129 comm="syz.4.5732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d4059c819 code=0x7fc00000 [ 557.932013][T17184] overlayfs: failed to clone upperpath [ 558.645349][T17202] IPv6: Can't replace route, no match found [ 558.826089][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 558.991544][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 559.001301][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 86, changing to 7 [ 559.012461][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 9231, setting to 1024 [ 559.025345][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.034757][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.043008][ T9] usb 4-1: Product: syz [ 559.047274][ T9] usb 4-1: Manufacturer: syz [ 559.052158][ T9] usb 4-1: SerialNumber: syz [ 559.058000][ T9] usb 4-1: config 0 descriptor?? [ 559.066957][ T9] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 41, bLength 9, bSynchAddress c3 [ 559.275048][ T9] usb 4-1: USB disconnect, device number 109 [ 559.286732][T16700] udevd[16700]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 559.784589][T17233] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 559.966800][T17242] /dev/loop0: Can't lookup blockdev [ 559.978460][T17242] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5778'. [ 560.160365][ T45] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 560.312823][ T45] usb 4-1: New USB device found, idVendor=b137, idProduct=6010, bcdDevice=c6.98 [ 560.322116][ T45] usb 4-1: New USB device strings: Mfr=14, Product=20, SerialNumber=0 [ 560.330497][ T45] usb 4-1: Product: syz [ 560.334727][ T45] usb 4-1: Manufacturer: syz [ 560.339875][ T45] usb 4-1: config 0 descriptor?? [ 561.018429][T17258] overlayfs: failed to clone lowerpath [ 562.220663][ T36] audit: type=1400 audit(1775088335.437:90399): avc: denied { nlmsg_read } for pid=17268 comm="syz.5.5788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 562.881972][ T45] usb 4-1: USB disconnect, device number 110 [ 562.992648][ T36] audit: type=1400 audit(1775088336.207:90400): avc: denied { append } for pid=17296 comm="syz.3.5800" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 563.000783][T17297] 9pnet_fd: Insufficient options for proto=fd [ 563.237295][ T36] audit: type=1326 audit(1775088336.447:90401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17305 comm="syz.5.5804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71af39c819 code=0x0 [ 563.420467][ T9] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 563.458812][T17314] netlink: 868 bytes leftover after parsing attributes in process `syz.0.5807'. [ 563.531513][T17320] overlayfs: failed to clone upperpath [ 563.552835][ T36] audit: type=1400 audit(1775088336.767:90402): avc: denied { create } for pid=17321 comm="syz.0.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 563.580788][ T9] usb 4-1: no configurations [ 563.585510][ T9] usb 4-1: can't read configurations, error -22 [ 563.720392][ T9] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 563.870831][ T9] usb 4-1: no configurations [ 563.875479][ T9] usb 4-1: can't read configurations, error -22 [ 563.882076][ T9] usb usb4-port1: attempt power cycle [ 564.157737][T17329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5814'. [ 564.194645][T17338] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 564.220405][ T9] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 564.241126][ T9] usb 4-1: no configurations [ 564.245762][ T9] usb 4-1: can't read configurations, error -22 [ 564.380379][ T9] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 564.401134][ T9] usb 4-1: no configurations [ 564.405813][ T9] usb 4-1: can't read configurations, error -22 [ 564.412232][ T9] usb usb4-port1: unable to enumerate USB device [ 565.060793][T17347] netlink: 'syz.5.5822': attribute type 27 has an invalid length. [ 565.092463][T17351] netlink: 'syz.4.5823': attribute type 11 has an invalid length. [ 565.100626][T17351] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5823'. [ 565.134629][T17352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17352 comm=syz.5.5822 [ 565.184154][ T36] audit: type=1400 audit(1775088338.397:90403): avc: denied { mount } for pid=17355 comm="syz.5.5825" name="/" dev="incremental-fs" ino=2524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 565.184718][T17356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17356 comm=syz.5.5825 [ 566.185004][ T36] audit: type=1400 audit(1775088339.397:90404): avc: denied { setattr } for pid=17368 comm="syz.3.5831" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 566.313726][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.322329][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.550361][ T436] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 566.574731][T17381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5836'. [ 566.701521][ T436] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 566.710171][ T436] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 566.718699][ T436] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.728915][ T436] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 566.740095][ T436] usb 4-1: string descriptor 0 read error: -22 [ 566.746356][ T436] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 566.756368][ T436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.765026][ T436] usb 4-1: config 0 descriptor?? [ 566.772833][ T436] hub 4-1:0.0: bad descriptor, ignoring hub [ 566.778854][ T436] hub 4-1:0.0: probe with driver hub failed with error -5 [ 567.080429][ T436] usb 4-1: USB disconnect, device number 115 [ 567.621853][T17411] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5849'. [ 567.733170][ T36] audit: type=1326 audit(1775088340.947:90405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17434 comm="syz.4.5857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4059c819 code=0x0 [ 568.115593][T17439] overlayfs: failed to clone upperpath [ 568.646196][T17461] netlink: 'syz.3.5867': attribute type 4 has an invalid length. [ 569.014128][ T36] audit: type=1326 audit(1775088342.227:90406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17475 comm="syz.5.5872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71af39c819 code=0x0 [ 569.115650][T17477] bridge0: port 3(dummy0) entered blocking state [ 569.125584][T17477] bridge0: port 3(dummy0) entered disabled state [ 569.132498][T17477] dummy0: entered allmulticast mode [ 569.138760][T17477] dummy0: entered promiscuous mode [ 569.144173][T17477] bridge0: port 3(dummy0) entered blocking state [ 569.150574][T17477] bridge0: port 3(dummy0) entered listening state [ 570.869356][T17524] netlink: 'syz.4.5889': attribute type 8 has an invalid length. [ 570.877629][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'. [ 571.490584][T17544] netlink: 'syz.4.5898': attribute type 33 has an invalid length. [ 572.053714][T17556] netlink: 'syz.5.5903': attribute type 46 has an invalid length. [ 572.310558][T17573] netlink: 'syz.3.5908': attribute type 13 has an invalid length. [ 572.320832][T17573] erspan0: refused to change device tx_queue_len [ 572.338860][T17573] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5908'. [ 572.390778][ T36] audit: type=1400 audit(1775088345.607:90407): avc: denied { accept } for pid=17580 comm="syz.0.5913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 572.690363][ T8186] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 572.820354][ T8186] usb 4-1: device descriptor read/64, error -71 [ 573.063985][ T8186] usb 4-1: device descriptor read/64, error -71 [ 573.080595][T17612] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5928'. [ 573.330342][ T8186] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 573.480350][ T8186] usb 4-1: device descriptor read/64, error -71 [ 573.540385][T17638] veth0: entered promiscuous mode [ 573.551552][T17637] veth0: left promiscuous mode [ 573.730348][ T8186] usb 4-1: device descriptor read/64, error -71 [ 573.856473][ T8186] usb usb4-port1: attempt power cycle [ 573.903533][T17653] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5945'. [ 574.210355][ T8186] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 574.231594][ T8186] usb 4-1: device descriptor read/8, error -71 [ 574.361345][ T8186] usb 4-1: device descriptor read/8, error -71 [ 574.434224][T17667] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5949'. [ 574.450376][T17668] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5949'. [ 574.494749][T17671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=17671 comm=syz.4.5950 [ 574.507783][T17671] netlink: 'syz.4.5950': attribute type 9 has an invalid length. [ 574.600348][ T8186] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 574.621556][ T8186] usb 4-1: device descriptor read/8, error -71 [ 574.751848][ T8186] usb 4-1: device descriptor read/8, error -71 [ 574.860747][ T8186] usb usb4-port1: unable to enumerate USB device [ 575.083429][T17689] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5956'. [ 575.108142][T17691] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5957'. [ 575.870374][ T1475] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 576.020367][ T1475] usb 4-1: Using ep0 maxpacket: 32 [ 576.026634][ T1475] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 576.035227][ T1475] usb 4-1: config 0 has no interface number 0 [ 576.041406][ T1475] usb 4-1: config 0 interface 184 has no altsetting 0 [ 576.049801][ T1475] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 576.059011][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.067048][ T1475] usb 4-1: Product: syz [ 576.071237][ T1475] usb 4-1: Manufacturer: syz [ 576.075839][ T1475] usb 4-1: SerialNumber: syz [ 576.081146][ T1475] usb 4-1: config 0 descriptor?? [ 576.086849][ T1475] smsc75xx v1.0.0 [ 576.168813][T17730] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5973'. [ 576.287070][T17702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.295879][T17702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.506611][T17702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.519462][T17702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.522176][T17739] overlayfs: failed to clone upperpath [ 576.527919][T17735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.542419][T17735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.559502][ T1475] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 576.579477][ T1475] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 576.589407][ T1475] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 576.599952][ T1475] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 576.610613][ T1475] usb 4-1: USB disconnect, device number 120 [ 576.717868][T17766] overlayfs: failed to clone upperpath [ 577.030405][ T1475] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 577.181571][ T1475] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 577.192678][ T1475] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.207062][ T1475] usb 4-1: config 0 interface 0 has no altsetting 0 [ 577.213968][ T1475] usb 4-1: New USB device found, idVendor=056a, idProduct=00df, bcdDevice= 0.00 [ 577.223386][ T1475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.239554][ T1475] usb 4-1: config 0 descriptor?? [ 577.245197][T17762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.277295][T17792] overlayfs: failed to clone upperpath [ 577.345660][T17801] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6000'. [ 577.408157][T17803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6000'. [ 577.470993][T17810] fuse: Unknown parameter 'rootmo' [ 577.477185][T17810] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6003'. [ 577.664700][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.671793][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.678675][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.685661][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.692677][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.699631][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.706555][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.713599][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.720518][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.727474][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.734385][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.741413][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.748988][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.755885][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.762804][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.769764][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.776744][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.783931][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.790526][T17817] overlayfs: failed to clone upperpath [ 577.791164][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.803226][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.810366][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.820348][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.830407][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.837416][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.844808][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.851887][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.859001][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.866074][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.873175][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.880798][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.887731][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.894880][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.902041][ T1475] wacom 0003:056A:00DF.0025: unknown main item tag 0x0 [ 577.909405][ T1475] wacom 0003:056A:00DF.0025: Unknown device_type for 'HID 056a:00df'. Assuming pen. [ 577.921054][ T1475] wacom 0003:056A:00DF.0025: hidraw0: USB HID v0.20 Device [HID 056a:00df] on usb-dummy_hcd.3-1/input0 [ 577.945758][ T1475] input: Wacom Bamboo 16FG 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00DF.0025/input/input52 [ 577.998419][ T36] audit: type=1400 audit(1775088351.207:90408): avc: denied { setattr } for pid=17834 comm="syz.4.6013" name="NETLINK" dev="sockfs" ino=102028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 578.351248][T17840] overlayfs: failed to clone upperpath [ 578.373357][ T45] usb 4-1: USB disconnect, device number 121 [ 578.415117][T17847] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6018'. [ 578.425146][T17847] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6018'. [ 578.520018][T17858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6023'. [ 578.544093][T17860] overlayfs: failed to clone upperpath [ 578.760365][ T45] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 578.920382][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 578.926986][ T45] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 578.935420][ T45] usb 4-1: config 0 has no interface number 0 [ 578.941655][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 578.951667][ T45] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 578.963484][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 578.972709][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.980847][ T45] usb 4-1: Product: syz [ 578.985019][ T45] usb 4-1: Manufacturer: syz [ 578.989800][ T45] usb 4-1: SerialNumber: syz [ 578.995154][ T45] usb 4-1: config 0 descriptor?? [ 579.000799][T17852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.008066][T17852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.218343][T17852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.227174][T17852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.235419][T17852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.243590][T17852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.301463][T17896] overlayfs: failed to clone upperpath [ 579.454885][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 579.468399][ T45] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 579.478810][ T45] asix 4-1:0.251: probe with driver asix failed with error -5 [ 579.488652][ T45] usb 4-1: USB disconnect, device number 122 [ 579.578732][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6047'. [ 580.118552][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6052'. [ 580.171451][ T36] audit: type=1326 audit(1775088353.387:90409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17937 comm="syz.4.6055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4059c819 code=0x0 [ 580.220362][ T1475] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 580.370370][ T1475] usb 4-1: Using ep0 maxpacket: 8 [ 580.377495][ T1475] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7 [ 580.388658][ T1475] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 170, changing to 7 [ 580.401580][ T1475] usb 4-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 580.410855][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.418947][ T1475] usb 4-1: Product: А [ 580.423073][ T1475] usb 4-1: Manufacturer: 䀊 [ 580.427777][ T1475] usb 4-1: SerialNumber: 韯䥼뷐䚔崫䟱픂즴둗䷻셙ᙣ䕲읳V冲憈ꙇ껨鑾犮젫﨨駼愘㙽໎∧ﭏᥦ庰ꂸ뢰ᅙ循倘檡䇴慐ઘ첋维ﻆꃆ舄ꨫ琑蔠ﶆ಺✡ꋡܮ׺ꔤ珬튋㘒峗ﻣﲹ⮒뎔쏎䎥稇㔾녤椤飉隕塵ꂴ⼨ꠙ찈⮽윭턟腛㘃穀筽᰸ꇸඣ䯬갫 [ 580.471790][T17941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6056'. [ 580.665697][ T1475] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 580.671733][ T1475] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 580.680909][ T1475] usb 4-1: found format II with max.bitrate = 0, frame size=19210 [ 580.688944][ T1475] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 580.698602][ T1475] usb 4-1: USB disconnect, device number 123 [ 580.707833][T17703] udevd[17703]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 581.560389][ T45] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 581.690394][ T45] usb 4-1: device descriptor read/64, error -71 [ 581.708560][ T36] audit: type=1400 audit(1775088354.917:90410): avc: denied { create } for pid=17973 comm="syz.0.6072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 581.940348][ T45] usb 4-1: device descriptor read/64, error -71 [ 582.190353][ T45] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 582.331479][ T45] usb 4-1: device descriptor read/64, error -71 [ 582.590356][ T45] usb 4-1: device descriptor read/64, error -71 [ 582.710436][ T45] usb usb4-port1: attempt power cycle [ 583.000389][T18015] overlayfs: failed to clone upperpath [ 583.029760][T18018] netlink: 'syz.0.6091': attribute type 4 has an invalid length. [ 583.060343][ T45] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 583.081962][ T45] usb 4-1: device descriptor read/8, error -71 [ 583.097814][T18022] overlayfs: failed to clone upperpath [ 583.211355][ T45] usb 4-1: device descriptor read/8, error -71 [ 583.274906][T18045] overlayfs: failed to clone upperpath [ 583.316817][T18050] __nla_validate_parse: 1 callbacks suppressed [ 583.316839][T18050] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6104'. [ 583.460431][ T45] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 583.481619][ T45] usb 4-1: device descriptor read/8, error -71 [ 583.611565][ T45] usb 4-1: device descriptor read/8, error -71 [ 583.720432][ T45] usb usb4-port1: unable to enumerate USB device [ 583.958231][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6115'. [ 584.178998][T18088] overlay: Unknown parameter '/' [ 584.184380][T18088] overlayfs: failed to clone lowerpath [ 584.670320][ C1] bridge0: port 3(dummy0) entered learning state [ 584.731378][T18107] 9pnet_fd: Insufficient options for proto=fd [ 584.825107][T18109] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6127'. [ 584.848893][ T36] audit: type=1400 audit(1775088358.057:90411): avc: denied { mounton } for pid=18110 comm="syz.4.6128" path="/371/file0" dev="tmpfs" ino=1994 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.893445][T18115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18115 comm=syz.3.6130 [ 585.098164][T18122] kvm: kvm [18121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 585.107263][T18122] kvm: kvm [18121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 585.132265][T18122] kvm: kvm [18121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xff00 [ 585.141430][T18122] kvm: kvm [18121]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xff00 [ 585.322797][ T36] audit: type=1400 audit(1775088358.537:90412): avc: denied { create } for pid=18131 comm="syz.5.6137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 585.449847][T18137] netlink: 'syz.4.6139': attribute type 12 has an invalid length. [ 586.256309][T18175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 586.284018][T18177] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6155'. [ 586.550363][ T1475] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 586.710348][ T1475] usb 4-1: Using ep0 maxpacket: 16 [ 586.716806][ T1475] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.727096][ T1475] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.737571][ T1475] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 586.746896][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.755103][ T1475] usb 4-1: Product: syz [ 586.759341][ T1475] usb 4-1: Manufacturer: syz [ 586.763970][ T1475] usb 4-1: SerialNumber: syz [ 586.917933][T18194] sit0: entered promiscuous mode [ 586.924815][T18194] netlink: 'syz.4.6162': attribute type 1 has an invalid length. [ 586.932862][T18194] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6162'. [ 586.973360][ T1475] usb 4-1: 0:2 : does not exist [ 586.979166][ T1475] usb 4-1: unit 6 not found! [ 586.987854][ T1475] usb 4-1: USB disconnect, device number 2 [ 587.009841][T17703] udevd[17703]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 587.150821][T18205] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 587.170331][ T36] audit: type=1400 audit(1775088360.377:90413): avc: denied { relabelto } for pid=18198 comm="syz.4.6163" name="file1" dev="tmpfs" ino=2092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 587.230981][ T36] audit: type=1400 audit(1775088360.377:90414): avc: denied { associate } for pid=18198 comm="syz.4.6163" name="file1" dev="tmpfs" ino=2092 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 587.501977][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6167'. [ 587.511234][T18210] dummy0: left allmulticast mode [ 587.516226][T18210] dummy0: left promiscuous mode [ 587.521193][T18210] bridge0: port 3(dummy0) entered disabled state [ 587.528056][T18210] bridge_slave_1: left allmulticast mode [ 587.533799][T18210] bridge_slave_1: left promiscuous mode [ 587.539558][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.548017][T18210] bridge_slave_0: left allmulticast mode [ 587.555101][T18210] bridge_slave_0: left promiscuous mode [ 587.560861][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.650062][T18227] vlan1: entered allmulticast mode [ 588.655556][T18227] veth0_vlan: entered allmulticast mode [ 588.762582][T18226] vlan1: left allmulticast mode [ 588.767561][T18226] veth0_vlan: left allmulticast mode [ 588.928542][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6180'. [ 589.277854][T18263] 9pnet: p9_errstr2errno: server reported unknown error [ 589.502523][T18273] overlayfs: failed to clone upperpath [ 590.930327][ T1475] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 591.100331][ T1475] usb 4-1: Using ep0 maxpacket: 32 [ 591.107148][ T1475] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.115825][ T1475] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 591.128544][ T1475] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 591.137906][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.146011][ T1475] usb 4-1: Product: syz [ 591.150481][ T1475] usb 4-1: Manufacturer: syz [ 591.155190][ T1475] usb 4-1: SerialNumber: syz [ 591.550847][T18314] overlayfs: failed to resolve '/': -2 [ 592.343259][T18336] overlayfs: failed to clone upperpath [ 592.995015][T18356] overlayfs: failed to clone upperpath [ 593.133151][T18362] x_tables: unsorted underflow at hook 3 [ 593.161509][T18366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=18366 comm=syz.0.6231 [ 593.196193][T18370] overlayfs: failed to clone upperpath [ 593.238471][T18376] overlayfs: failed to clone upperpath [ 593.701867][ T1475] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 593.712751][ T1475] usb 4-1: unit 2 not found! [ 593.728407][ T1475] usb 4-1: USB disconnect, device number 3 [ 593.738482][T17703] udevd[17703]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 593.754797][T18387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 593.874807][T18395] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6243'. [ 593.911271][T18397] netlink: 272 bytes leftover after parsing attributes in process `syz.4.6244'. [ 593.930108][T18399] overlayfs: failed to clone upperpath [ 594.080337][ T1475] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 594.240354][ T1475] usb 4-1: Using ep0 maxpacket: 8 [ 594.247018][ T1475] usb 4-1: unable to get BOS descriptor or descriptor too short [ 594.257342][ T1475] usb 4-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40 [ 594.266768][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.274997][ T1475] usb 4-1: Product: syz [ 594.279608][ T1475] usb 4-1: Manufacturer: syz [ 594.284379][ T1475] usb 4-1: SerialNumber: syz [ 594.502585][ T1475] usb 4-1: 1:1 : no UAC_FORMAT_TYPE desc [ 594.508632][ T1475] usb 4-1: unit 1 not found! [ 594.513335][ T1475] usb 4-1: unit 8 not found! [ 594.522076][ T1475] usb 4-1: USB disconnect, device number 4 [ 595.173140][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6266'. [ 595.540671][ T36] audit: type=1400 audit(1775088368.757:90415): avc: denied { getopt } for pid=18467 comm="syz.3.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 595.805083][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 595.950355][ T31] usb 4-1: device descriptor read/64, error -71 [ 595.977817][T18528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6298'. [ 596.190596][ T31] usb 4-1: device descriptor read/64, error -71 [ 596.430499][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 596.469114][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'. [ 596.560330][ T31] usb 4-1: device descriptor read/64, error -71 [ 596.800347][ T31] usb 4-1: device descriptor read/64, error -71 [ 596.911119][ T31] usb usb4-port1: attempt power cycle [ 596.964543][T18553] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6310'. [ 597.228398][T18574] sit0: entered promiscuous mode [ 597.234429][T18574] netlink: 'syz.5.6318': attribute type 1 has an invalid length. [ 597.242457][T18574] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6318'. [ 597.260346][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 597.295682][ T31] usb 4-1: device descriptor read/8, error -71 [ 597.399887][T18578] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.407152][T18578] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.414364][T18578] bridge_slave_0: entered allmulticast mode [ 597.420956][T18578] bridge_slave_0: entered promiscuous mode [ 597.427843][T18578] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.436840][T18578] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.445565][T18578] bridge_slave_1: entered allmulticast mode [ 597.452302][T18578] bridge_slave_1: entered promiscuous mode [ 597.458564][ T31] usb 4-1: device descriptor read/8, error -71 [ 597.466725][T13946] syz_tun (unregistering): left allmulticast mode [ 597.533747][T18578] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.540829][T18578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.548076][T18578] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.555344][T18578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.586666][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.595353][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.606956][T14633] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.614048][T14633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.623903][T14642] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.631183][T14642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.656745][T18578] veth0_vlan: entered promiscuous mode [ 597.667434][T18578] veth1_macvtap: entered promiscuous mode [ 597.686815][ T36] audit: type=1400 audit(1775088370.897:90416): avc: denied { mounton } for pid=18578 comm="syz-executor" path="/root/syzkaller.V2PWY5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=104415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 597.715308][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 597.736503][T18602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 597.746351][ T31] usb 4-1: device descriptor read/8, error -71 [ 597.891446][ T31] usb 4-1: device descriptor read/8, error -71 [ 598.000627][ T31] usb usb4-port1: unable to enumerate USB device [ 598.010397][ T1475] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 598.115426][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6331'. [ 598.150352][ T1475] usb 6-1: device descriptor read/64, error -71 [ 598.400324][ T1475] usb 6-1: device descriptor read/64, error -71 [ 598.650486][ T1475] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 598.711898][T18625] netlink: 404 bytes leftover after parsing attributes in process `syz.4.6337'. [ 598.780328][ T1475] usb 6-1: device descriptor read/64, error -71 [ 598.931018][ T36] audit: type=1326 audit(1775088372.147:90417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.4.6344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4059c819 code=0x0 [ 599.019893][T18642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=18642 comm=syz.3.6345 [ 599.050397][ T1475] usb 6-1: device descriptor read/64, error -71 [ 599.143702][T18648] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 599.160596][ T1475] usb usb6-port1: attempt power cycle [ 599.428236][T18665] overlayfs: failed to clone upperpath [ 599.520367][ T1475] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 599.541516][ T1475] usb 6-1: device descriptor read/8, error -71 [ 599.671684][ T1475] usb 6-1: device descriptor read/8, error -71 [ 599.910385][ T1475] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 599.932465][ T1475] usb 6-1: device descriptor read/8, error -71 [ 599.938807][T18669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 600.030317][ C1] bridge0: port 3(dummy0) entered forwarding state [ 600.046056][ C1] bridge0: topology change detected, propagating [ 600.064656][ T1475] usb 6-1: device descriptor read/8, error -71 [ 600.180426][ T1475] usb usb6-port1: unable to enumerate USB device [ 600.926356][T18697] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 600.934696][T18697] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 600.934722][T18697] rust_binder: Read failure Err(EFAULT) in pid:435 [ 601.170329][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 601.206374][T18723] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6376'. [ 601.340965][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 601.347528][ T31] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 601.356218][ T31] usb 6-1: config 1 has no interface number 0 [ 601.362580][ T31] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 601.372893][ T31] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 601.383211][ T31] usb 6-1: config 1 interface 105 has no altsetting 0 [ 601.391812][ T31] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 601.401303][ T31] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 601.409558][ T31] usb 6-1: Product: syz [ 601.414306][ T31] usb 6-1: Manufacturer: syz [ 601.418988][ T31] usb 6-1: SerialNumber: syz [ 601.426140][T18695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.435475][T18695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.480499][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 601.630602][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 601.637357][ T45] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 601.648505][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 601.659788][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.669459][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.677545][ T45] usb 4-1: Product: syz [ 601.681760][ T45] usb 4-1: Manufacturer: syz [ 601.686399][ T45] usb 4-1: SerialNumber: syz [ 601.848836][T18695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.856295][T18695] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.893535][ T45] usb 4-1: 0:2 : does not exist [ 601.906650][ T45] usb 4-1: USB disconnect, device number 9 [ 601.919358][T17704] udevd[17704]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 602.264818][ T31] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 602.477905][T18747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=18747 comm=syz.0.6386 [ 602.491696][ T31] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:b5:f4:eb:37:52 [ 602.679047][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 602.679107][ T31] usb 6-1: USB disconnect, device number 6 [ 602.687564][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 602.695783][ T31] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 602.703318][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 602.721358][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 602.729413][ T149] aqc111 6-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 602.739905][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 602.748912][ T149] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 602.762866][ T149] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 602.771510][ T149] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 602.781059][ T149] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 602.789631][ T149] aqc111 6-1:1.105 eth1: Error submitting the control message: status=-19 [ 602.808132][ T31] aqc111 6-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 602.823626][ T31] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 602.830860][T18773] overlayfs: failed to clone upperpath [ 602.832483][ T31] aqc111 6-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 602.854339][ T31] aqc111 6-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 602.891435][ T31] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 602.903779][ T31] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 602.913582][ T31] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 603.037771][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6398'. [ 603.048553][T18799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18799 comm=syz.3.6398 [ 603.074176][T18801] netlink: 'syz.3.6399': attribute type 93 has an invalid length. [ 603.272320][T18809] 9p: Unknown access argument ffffffffffffffff: -22 [ 603.350409][ T1475] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 603.460460][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 603.510332][ T1475] usb 4-1: Using ep0 maxpacket: 16 [ 603.516663][ T1475] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.528293][ T1475] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 603.537481][ T1475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.545630][ T1475] usb 4-1: Product: syz [ 603.549867][ T1475] usb 4-1: Manufacturer: syz [ 603.554488][ T1475] usb 4-1: SerialNumber: syz [ 603.559768][ T1475] usb 4-1: config 0 descriptor?? [ 603.566266][ T1475] asix 4-1:0.0: probe with driver asix failed with error -22 [ 603.610346][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 603.616805][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.627194][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 603.640630][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 603.649775][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.658480][ T31] usb 6-1: config 0 descriptor?? [ 603.664531][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 603.766990][ T31] usb 4-1: USB disconnect, device number 10 [ 604.091111][ T1475] usb 6-1: USB disconnect, device number 7 [ 604.298377][ T36] audit: type=1326 audit(1775088377.507:90418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18830 comm="syz.3.6413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b0c19c819 code=0x0 [ 604.468402][T18834] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 604.730341][ T1475] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 604.820433][T18854] tipc: New replicast peer: 255.255.255.255 [ 604.826576][T18854] tipc: Enabled bearer , priority 5 [ 604.860453][ T1475] usb 6-1: device descriptor read/64, error -71 [ 605.042106][ T36] audit: type=1400 audit(1775088378.257:90419): avc: denied { lock } for pid=18859 comm="syz.0.6427" path="socket:[106824]" dev="sockfs" ino=106824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 605.093287][T18863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6428'. [ 605.100323][ T1475] usb 6-1: device descriptor read/64, error -71 [ 605.360330][ T1475] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 605.400348][ T8186] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 605.490328][ T1475] usb 6-1: device descriptor read/64, error -71 [ 605.550364][ T8186] usb 4-1: Using ep0 maxpacket: 16 [ 605.556821][ T8186] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 605.565778][ T8186] usb 4-1: config 1 has no interface number 0 [ 605.572038][ T8186] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 605.582163][ T8186] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 605.592238][ T8186] usb 4-1: config 1 interface 105 has no altsetting 0 [ 605.600565][ T8186] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 605.609847][ T8186] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 605.618262][ T8186] usb 4-1: Product: syz [ 605.622603][ T8186] usb 4-1: Manufacturer: syz [ 605.627389][ T8186] usb 4-1: SerialNumber: syz [ 605.633863][T18865] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 605.641231][T18865] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 605.760394][ T1475] usb 6-1: device descriptor read/64, error -71 [ 605.870452][ T1475] usb usb6-port1: attempt power cycle [ 606.049645][T18865] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.056884][T18865] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.210327][ T1475] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 606.231398][ T1475] usb 6-1: device descriptor read/8, error -71 [ 606.327976][T18878] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6434'. [ 606.371390][ T1475] usb 6-1: device descriptor read/8, error -71 [ 606.407380][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6435'. [ 606.465134][ T8186] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 606.529623][T18894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6441'. [ 606.610332][ T1475] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 606.631570][ T1475] usb 6-1: device descriptor read/8, error -71 [ 606.682537][ T8186] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:56:d5:de:bc:88 [ 606.763785][ T1475] usb 6-1: device descriptor read/8, error -71 [ 606.870923][ T1475] usb usb6-port1: unable to enumerate USB device [ 606.882877][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 606.882976][ T1475] usb 4-1: USB disconnect, device number 11 [ 606.891139][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 606.900374][ T1475] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 606.905091][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 606.924053][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 606.932157][ T149] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 606.940164][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 606.948308][ T149] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 606.956528][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 606.965151][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 606.973975][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 606.982578][ T149] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 606.991917][ T1475] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 607.000030][ T1475] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 607.009159][ T1475] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 607.017296][ T1475] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 607.066157][ T1475] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 607.083405][ T1475] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 607.101228][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6444'. [ 607.101375][ T1475] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 607.420477][T18943] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6451'. [ 607.518929][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6454'. [ 607.570965][T18958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 607.803526][ T36] audit: type=1400 audit(1775088381.017:90420): avc: granted { setsecparam } for pid=18989 comm="syz.5.6468" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 607.863257][T19000] overlayfs: failed to clone upperpath [ 608.008179][T19015] netlink: 'syz.4.6477': attribute type 4 has an invalid length. [ 608.022183][T19015] netlink: 'syz.4.6477': attribute type 4 has an invalid length. [ 608.076853][T19018] vlan1: entered allmulticast mode [ 608.087806][T19018] veth0_vlan: entered allmulticast mode [ 608.107543][T19017] vlan1: left allmulticast mode [ 608.120674][T19017] veth0_vlan: left allmulticast mode [ 608.879810][T19042] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6488'. [ 608.900321][ T1475] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 609.052628][ T1475] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.064456][ T1475] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 609.076344][ T1475] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 609.086880][ T1475] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 609.102108][ T1475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.130420][ T8186] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 609.193073][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6502'. [ 609.290381][ T8186] usb 6-1: Using ep0 maxpacket: 16 [ 609.296908][ T8186] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.307155][ T8186] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.316953][ T1475] usb 4-1: string descriptor 0 read error: -71 [ 609.323579][ T1475] hub 4-1:32.0: USB hub found [ 609.328719][ T8186] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.338057][ T8186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.346221][ T1475] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 609.354400][ T8186] usb 6-1: Product: syz [ 609.358646][ T8186] usb 6-1: Manufacturer: syz [ 609.364151][ T8186] usb 6-1: SerialNumber: syz [ 609.400634][ T1475] usb 4-1: USB disconnect, device number 12 [ 609.580472][ T8186] usb 6-1: 0:2 : does not exist [ 609.587592][ T8186] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 609.599742][ T8186] usb 6-1: USB disconnect, device number 12 [ 609.611692][T17703] udevd[17703]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 609.735955][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 609.745476][T19090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6508'. [ 610.099702][T19100] bridge0: port 3(dummy0) entered blocking state [ 610.100361][ T436] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 610.106144][T19100] bridge0: port 3(dummy0) entered disabled state [ 610.106214][T19100] dummy0: entered allmulticast mode [ 610.106652][T19100] dummy0: entered promiscuous mode [ 610.130702][T19100] bridge0: port 3(dummy0) entered blocking state [ 610.137297][T19100] bridge0: port 3(dummy0) entered forwarding state [ 610.235020][T19116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 610.261706][ T436] usb 4-1: unable to get BOS descriptor or descriptor too short [ 610.306167][ T436] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.316803][ T436] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 610.326454][ T436] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 610.347047][ T436] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 610.359229][ T436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.367493][ T436] usb 4-1: Product: syz [ 610.378491][ T436] usb 4-1: Manufacturer: syz [ 610.383275][ T436] usb 4-1: SerialNumber: syz [ 610.593527][ T436] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 610.604869][ T436] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 610.612197][ T436] usb 4-1: 1:1 : unsupported format bits 0x33820006 [ 610.619204][ T436] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 610.629449][ T436] usb 4-1: unit 2 not found! [ 610.634261][ T436] usb 4-1: unit 0 not found! [ 610.644675][ T436] usb 4-1: USB disconnect, device number 13 [ 610.667541][T19146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 610.682836][T19148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8465 sclass=netlink_route_socket pid=19148 comm=syz.5.6534 [ 610.740961][T19150] netlink: 'syz.5.6535': attribute type 12 has an invalid length. [ 611.199609][T19160] overlayfs: failed to resolve './file0/file1': -2 [ 611.311070][T19169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 611.580638][ T8186] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 611.714520][T19184] vlan1: entered allmulticast mode [ 611.719820][T19184] veth0_vlan: entered allmulticast mode [ 611.726713][T19183] vlan1: left allmulticast mode [ 611.731868][T19183] veth0_vlan: left allmulticast mode [ 611.770989][T19186] rust_binder: Error while translating object. [ 611.771036][T19186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 611.777485][T19186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 611.780339][ T36] audit: type=1400 audit(1775088384.987:90421): avc: denied { transfer } for pid=19185 comm="syz.3.6552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 611.830711][ T8186] usb 6-1: Using ep0 maxpacket: 16 [ 611.837246][ T8186] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 611.846309][ T8186] usb 6-1: config 1 has no interface number 0 [ 611.853217][ T8186] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 611.863650][ T8186] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 611.884540][ T8186] usb 6-1: config 1 interface 105 has no altsetting 0 [ 611.897774][ T8186] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 611.907802][ T8186] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 611.929362][ T8186] usb 6-1: Product: syz [ 611.945535][ T8186] usb 6-1: Manufacturer: syz [ 611.951132][ T8186] usb 6-1: SerialNumber: syz [ 611.980012][T19173] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 612.000420][T19173] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 612.289543][ T65] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 612.431681][T19173] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 612.439062][T19173] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 612.445275][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 612.452907][ T65] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 612.461304][ T65] usb 4-1: config 0 has no interface number 0 [ 612.467423][ T65] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 612.477398][ T65] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 612.489124][ T65] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 612.498224][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.506388][ T65] usb 4-1: Product: syz [ 612.511740][ T65] usb 4-1: Manufacturer: syz [ 612.516608][ T65] usb 4-1: SerialNumber: syz [ 612.525420][ T65] usb 4-1: config 0 descriptor?? [ 612.530834][T19202] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 612.538310][T19202] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 612.747968][T19202] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 612.755459][T19202] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 612.847728][ T8186] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 613.059667][ T8186] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 613.072822][ T8186] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:8e:41:c2:6f:fc [ 613.087101][ T8186] usb 6-1: USB disconnect, device number 13 [ 613.094299][ T8186] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 613.150984][ T8186] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 613.161494][ T8186] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 613.171199][ T8186] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 613.181765][ T65] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 613.195882][ T65] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 613.213141][ T65] asix 4-1:0.251: probe with driver asix failed with error -61 [ 613.384900][ T65] usb 4-1: USB disconnect, device number 14 [ 613.996219][T19254] __nla_validate_parse: 5 callbacks suppressed [ 613.996245][T19254] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6580'. [ 614.130368][ T8186] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 614.300327][ T8186] usb 4-1: Using ep0 maxpacket: 16 [ 614.306630][ T8186] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 614.314926][ T8186] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.325062][ T8186] usb 4-1: config 0 has no interface number 0 [ 614.332959][ T8186] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 614.334547][T19256] Invalid ELF header type: 2 != 1 [ 614.342133][ T36] audit: type=1400 audit(1775088387.547:90422): avc: denied { module_load } for pid=19255 comm="syz.5.6581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 614.367076][ T8186] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 614.380060][ T8186] usb 4-1: Product: syz [ 614.384520][ T8186] usb 4-1: Manufacturer: syz [ 614.389221][ T8186] usb 4-1: SerialNumber: syz [ 614.408625][ T8186] usb 4-1: config 0 descriptor?? [ 614.418488][ T8186] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 614.426944][ T8186] uvcvideo 4-1:0.105: Entity type for entity Output 1 was not initialized! [ 614.436159][ T8186] usb 4-1: Failed to create links for entity 1 [ 614.442474][ T8186] usb 4-1: Failed to register entities (-22). [ 614.468076][T19266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 614.617353][ T436] usb 4-1: USB disconnect, device number 15 [ 614.643051][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6592'. [ 614.790567][ T65] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 614.940339][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 614.946508][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.957597][ T65] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 614.970505][ T65] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 614.979552][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.988662][ T65] usb 6-1: config 0 descriptor?? [ 615.148768][T19286] FAULT_INJECTION: forcing a failure. [ 615.148768][T19286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.162000][T19286] CPU: 0 UID: 0 PID: 19286 Comm: syz.3.6594 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 615.162038][T19286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.162051][T19286] Call Trace: [ 615.162057][T19286] [ 615.162065][T19286] __dump_stack+0x21/0x30 [ 615.162098][T19286] dump_stack_lvl+0x140/0x1c0 [ 615.162130][T19286] ? __cfi_dump_stack_lvl+0x10/0x10 [ 615.162155][T19286] ? _parse_integer+0x2e/0x40 [ 615.162178][T19286] ? kstrtoull+0x13b/0x1e0 [ 615.162204][T19286] dump_stack+0x19/0x20 [ 615.162228][T19286] should_fail_ex+0x3d7/0x530 [ 615.162253][T19286] should_fail+0xf/0x20 [ 615.162275][T19286] should_fail_usercopy+0x1e/0x30 [ 615.162300][T19286] _copy_from_user+0x20/0xa0 [ 615.162317][T19286] ___sys_sendmsg+0x1c7/0x370 [ 615.162344][T19286] ? __sys_sendmsg+0x2a0/0x2a0 [ 615.162371][T19286] ? proc_fail_nth_write+0x184/0x220 [ 615.162393][T19286] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 615.162421][T19286] __x64_sys_sendmsg+0x1fb/0x2d0 [ 615.162446][T19286] ? fput+0x1a4/0x240 [ 615.162466][T19286] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 615.162490][T19286] ? ksys_write+0x1f3/0x260 [ 615.162518][T19286] ? __kasan_check_read+0x15/0x20 [ 615.162544][T19286] x64_sys_call+0x2a4c/0x2ee0 [ 615.162570][T19286] do_syscall_64+0x57/0xf0 [ 615.162596][T19286] ? clear_bhb_loop+0x50/0xa0 [ 615.162613][T19286] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 615.162640][T19286] RIP: 0033:0x7f6b0c19c819 [ 615.162659][T19286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.162677][T19286] RSP: 002b:00007f6b0d02f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.162699][T19286] RAX: ffffffffffffffda RBX: 00007f6b0c415fa0 RCX: 00007f6b0c19c819 [ 615.162715][T19286] RDX: 00000000200048c4 RSI: 00002000000006c0 RDI: 0000000000000005 [ 615.162729][T19286] RBP: 00007f6b0d02f090 R08: 0000000000000000 R09: 0000000000000000 [ 615.162741][T19286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.162754][T19286] R13: 00007f6b0c416038 R14: 00007f6b0c415fa0 R15: 00007ffcb45bc418 [ 615.162771][T19286] [ 615.195078][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.384118][T19294] netlink: 404 bytes leftover after parsing attributes in process `syz.0.6597'. [ 615.388346][ T36] audit: type=1326 audit(1775088388.587:90423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19279 comm="syz.0.6592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab4219c819 code=0x7fc00000 [ 615.400479][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.441332][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.450792][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.460083][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.469436][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.478702][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.488197][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.488202][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6601'. [ 615.501770][T19307] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6602'. [ 615.506256][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.523506][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.552666][ T65] usbhid 6-1:0.0: can't add hid device: -71 [ 615.558781][ T65] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 615.575094][ T65] usb 6-1: USB disconnect, device number 14 [ 615.670372][ T45] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 615.820424][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 615.826902][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.838694][ T45] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 615.847967][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.856092][ T45] usb 4-1: Product: syz [ 615.860392][ T45] usb 4-1: Manufacturer: syz [ 615.865009][ T45] usb 4-1: SerialNumber: syz [ 615.872548][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 615.880242][ T45] usb 4-1: config 0 descriptor?? [ 615.886237][ T45] usb 4-1: bad CDC descriptors [ 615.891340][ T45] usb 4-1: unsupported MDLM descriptors [ 616.030381][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 616.036681][ T65] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 616.050386][ T65] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 616.061100][ T65] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 616.070524][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.078655][ T65] usb 6-1: Product: syz [ 616.083261][ T65] usb 6-1: Manufacturer: syz [ 616.087900][ T65] usb 6-1: SerialNumber: syz [ 616.121735][ T45] usb 4-1: USB disconnect, device number 16 [ 616.161494][ T36] audit: type=1400 audit(1775088389.367:90424): avc: denied { lock } for pid=19319 comm="syz.4.6607" path="socket:[108030]" dev="sockfs" ino=108030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 616.215728][T19329] overlayfs: failed to clone upperpath [ 616.334610][ T65] usb 6-1: 0:2 : does not exist [ 616.339579][ T65] usb 6-1: unit 9 not found! [ 616.347131][ T65] usb 6-1: USB disconnect, device number 15 [ 616.695136][T19337] kvm: kvm [19336]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 616.703780][T19337] kvm: kvm [19336]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 616.916186][T19350] overlayfs: disabling nfs_export due to verity=require [ 616.923665][T19350] overlayfs: failed to clone upperpath [ 616.971749][T19359] overlayfs: failed to clone upperpath [ 617.113043][T19387] overlayfs: failed to clone upperpath [ 617.263966][ T45] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 617.420324][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 617.428893][ T45] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.450335][ T45] usb 4-1: config 0 has no interfaces? [ 617.647248][ T36] audit: type=1400 audit(1775088390.857:90425): avc: denied { read } for pid=19402 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 617.958907][T19420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=19420 comm=syz.0.6649 [ 618.021210][ T45] usb 4-1: string descriptor 0 read error: -71 [ 618.024112][ T36] audit: type=1400 audit(1775088391.237:90426): avc: denied { read write } for pid=15347 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.027601][ T45] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 618.152478][T19432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34580 sclass=netlink_tcpdiag_socket pid=19432 comm=syz.4.6653 [ 618.163976][T19435] overlayfs: failed to clone upperpath [ 618.176770][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.180511][ T36] audit: type=1400 audit(1775088391.237:90427): avc: denied { open } for pid=15347 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.197711][ T45] usb 4-1: config 0 descriptor?? Stopping sshd: [ 618.296463][T19446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 618.301126][ T45] usb 4-1: can't set config #0, error -71 [ 618.313286][ T36] audit: type=1400 audit(1775088391.237:90428): avc: denied { ioctl } for pid=15347 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 618.348422][T19447] IPv6: NLM_F_CREATE should be specified when creating new route stopped /usr/sbin/sshd (pid 201)[ 618.396055][ T45] usb 4-1: USB disconnect, device number 17 OK [ 618.435998][ T36] audit: type=1400 audit(1775088391.457:90429): avc: denied { sys_admin } for pid=19433 comm="syz.0.6655" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 Stopping crond: [ 618.496701][T19458] netlink: 220 bytes leftover after parsing attributes in process `syz.5.6663'. [ 618.521052][T19463] overlayfs: failed to clone upperpath stopped /usr/sbin/crond (pid 194) OK [ 618.570314][ T36] audit: type=1400 audit(1775088391.577:90430): avc: denied { sys_ptrace } for pid=19422 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 [ 618.660377][T19471] overlayfs: failed to clone lowerpath [ 618.680319][ T36] audit: type=1400 audit(1775088391.757:90431): avc: denied { create } for pid=19456 comm="syz.5.6663" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 618.761573][T19478] netlink: 364 bytes leftover after parsing attributes in process `syz.3.6671'. [ 618.800966][ T436] usb 6-1: new high-speed USB device number 16 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 618.906620][T19474] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.907296][T19483] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6672'. [ 618.915627][T19474] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.932289][T19474] bridge_slave_0: entered allmulticast mode [ 618.938762][T19474] bridge_slave_0: entered promiscuous mode [ 618.959337][T19474] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.963656][T19481] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6672'. [ 618.980650][ T436] usb 6-1: Using ep0 maxpacket: 16 [ 618.991371][T19474] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.008812][T19474] bridge_slave_1: entered allmulticast mode [ 619.015104][ T436] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config Stopping network: [ 619.030304][ T436] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.041627][T19474] bridge_slave_1: entered promiscuous mode [ 619.078317][ T436] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.100336][ T436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.129369][ T436] usb 6-1: Product: syz [ 619.150336][ T436] usb 6-1: Manufacturer: syz [ 619.154998][ T436] usb 6-1: SerialNumber: syz [ 619.170790][ T36] audit: type=1400 audit(1775088392.387:90432): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 619.256823][ T36] audit: type=1400 audit(1775088392.467:90433): avc: denied { read write } for pid=19499 comm="ip" path="/dev/console" dev="rootfs" ino=1061 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 619.343527][T19503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:560 [ 619.347508][T19501] overlayfs: failed to clone upperpath [ 619.390600][T19474] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.397688][T19474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.405042][T19474] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.412112][T19474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.421404][ T436] usb 6-1: 0:2 : does not exist [ 619.429817][ T436] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 619.440237][ T36] audit: type=1400 audit(1775088392.657:90434): avc: denied { ioctl } for pid=19508 comm="syz.3.6677" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=110010 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 619.444154][ T436] usb 6-1: USB disconnect, device number 16 [ 619.501350][T19425] udevd[19425]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 619.590459][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.598350][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.611524][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.618649][T14641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.632136][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.639288][T14641] bridge0: port 2(bridge_slave_1) entered forwarding state OK [ 619.739805][T19474] veth0_vlan: entered promiscuous mode Stopping iptables: [ 619.754470][T14642] ------------[ cut here ]------------ [ 619.760003][T14642] WARNING: CPU: 1 PID: 14642 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 619.770289][T14642] Modules linked in: [ 619.774233][T14642] CPU: 1 UID: 0 PID: 14642 Comm: kworker/u8:23 Not tainted syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 619.786352][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 OK[ 619.796622][T14642] Workqueue: netns cleanup_net [ 619.801586][T14642] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 619.807602][T14642] Code: e8 41 4c d9 fc 4b 83 3c 3e 00 75 19 e8 e5 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 d7 1d 81 fc 49 83 c7 08 eb c9 e8 cc 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 619.827364][T14642] RSP: 0018:ffffc900015cfb90 EFLAGS: 00010293 [ 619.833797][T14642] RAX: ffffffff85068ce4 RBX: ffff8881285cc700 RCX: ffff88811f8a3900 [ 619.841862][T14642] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881200b4000 Stopping system [ 619.849873][T14642] RBP: ffffc900015cfbb0 R08: 0000000000000003 R09: 0000000000000004 message bus: [ 619.859422][T14642] R10: dffffc0000000000 R11: fffff520002b9f04 R12: dffffc0000000000 [ 619.868563][T14642] R13: dffffc0000000000 R14: ffff8881200b4000 R15: 0000000000000000 [ 619.876619][T14642] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 619.884010][T19474] veth1_macvtap: entered promiscuous mode [ 619.885856][T14642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.898111][T14642] CR2: 00007ffd20079118 CR3: 000000012b68e000 CR4: 00000000003526b0 [ 619.906257][T14642] Call Trace: [ 619.909564][T14642] [ 619.912564][T14642] cleanup_net+0x6bd/0xc90 [ 619.917090][T14642] ? __cfi_cleanup_net+0x10/0x10 [ 619.922086][T14642] ? kick_pool+0xb9/0x550 [ 619.926440][T14642] process_scheduled_works+0x7d1/0x1020 [ 619.932086][T14642] worker_thread+0xc70/0x10b0 [ 619.936807][T14642] kthread+0x2c9/0x370 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 619.940955][T14642] ? __cfi_worker_thread+0x10/0x10 [ 619.946100][T14642] ? __cfi_kthread+0x10/0x10 [ 619.950761][T14642] ret_from_fork+0x67/0xa0 [ 619.955204][T14642] ? __cfi_kthread+0x10/0x10 [ 619.959856][T14642] ret_from_fork_asm+0x1a/0x30 [ 619.964767][T14642] [ 619.967806][T14642] ---[ end trace 0000000000000000 ]--- [ 619.974988][T14642] ------------[ cut here ]------------ [ 619.980770][T14642] WARNING: CPU: 1 PID: 14642 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 619.991228][T14642] Modules linked in: [ 619.995165][T14642] CPU: 1 UID: 0 PID: 14642 Comm: kworker/u8:23 Tainted: G W syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 620.008696][T14642] Tainted: [W]=WARN [ 620.012626][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.022771][T14642] Workqueue: netns cleanup_net [ 620.027756][T14642] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 620.033887][T14642] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 1d 81 fc 49 81 ff f8 07 00 00 74 1b e8 82 1d 81 fc 49 83 c7 08 eb c5 e8 77 1d 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 1d 81 fc 5b 41 5c 41 5e 41 [ 620.053584][T14642] RSP: 0018:ffffc900015cfb90 EFLAGS: 00010293 [ 620.059772][T14642] RAX: ffffffff85068d39 RBX: ffff8881200b4800 RCX: ffff88811f8a3900 [ 620.067897][T14642] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881200b4810 [ 620.075982][T14642] RBP: ffffc900015cfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 620.084044][T14642] R10: dffffc0000000000 R11: fffff520002b9f04 R12: dffffc0000000000 [ 620.092085][T14642] R13: dffffc0000000000 R14: ffff8881200b4000 R15: 0000000000000010 [ 620.100083][T14642] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 620.109171][T14642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.115898][T14642] CR2: 00007ffd20079118 CR3: 000000012b68e000 CR4: 00000000003526b0 done[ 620.124148][T14642] Call Trace: [ 620.127539][T14642] [ 620.130570][T14642] cleanup_net+0x6bd/0xc90 [ 620.135159][T14642] ? __cfi_cleanup_net+0x10/0x10 [ 620.140129][T14642] ? kick_pool+0xb9/0x550 [ 620.144650][T14642] process_scheduled_works+0x7d1/0x1020 [ 620.150242][T14642] worker_thread+0xc70/0x10b0 [ 620.155018][T14642] kthread+0x2c9/0x370 [ 620.159125][T14642] ? __cfi_worker_thread+0x10/0x10 [ 620.164492][T14642] ? __cfi_kthread+0x10/0x10 [ 620.169121][T14642] ret_from_fork+0x67/0xa0 [ 620.173689][T14642] ? __cfi_kthread+0x10/0x10 [ 620.178314][T14642] ret_from_fork_asm+0x1a/0x30 [ 620.183208][T14642] [ 620.186256][T14642] ---[ end trace 0000000000000000 ]--- [ 620.202614][T14642] ------------[ cut here ]------------ [ 620.208127][T14642] WARNING: CPU: 1 PID: 14642 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 620.217862][T14642] Modules linked in: [ 620.221880][T14642] CPU: 1 UID: 0 PID: 14642 Comm: kworker/u8:23 Tainted: G W syzkaller #0 cb76c71933628f8d69c8d31cdfd2579bb1d1f37a [ 620.235355][T14642] Tainted: [W]=WARN [ 620.239186][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.249358][T14642] Workqueue: netns cleanup_net [ 620.254185][T14642] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 620.259782][T14642] Code: 3c 20 00 74 08 48 89 df e8 3f 18 f4 fc 48 8b 3b e8 a7 40 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c8 d1 b7 00 cc e8 d2 e9 9b fc <0f> 0b e9 b0 fd ff ff e8 c6 e9 9b fc 0f 0b e9 18 fe ff ff e8 ba e9 [ 620.279533][T14642] RSP: 0018:ffffc900015cfb70 EFLAGS: 00010293 [ 620.285725][T14642] RAX: ffffffff84ebc0de RBX: ffff8881285cc700 RCX: ffff88811f8a3900 [ 620.293879][T14642] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88811f8a3900 [ 620.302019][T14642] RBP: ffffc900015cfb98 R08: ffffffff87d38bc7 R09: 1ffffffff0fa7178 [ 620.310108][T14642] R10: dffffc0000000000 R11: fffffbfff0fa7179 R12: 1ffffffff0fa6ec8 [ 620.321222][T14642] R13: dffffc0000000000 R14: ffff8881285cd300 R15: dffffc0000000000 [ 620.329358][T14642] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 620.338383][T14642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.345304][T14642] CR2: 00007ffd20079118 CR3: 00000000074a8000 CR4: 00000000003526b0 [ 620.353522][T14642] Call Trace: [ 620.356826][T14642] [ 620.359874][T14642] xfrm_net_exit+0x31/0x80 [ 620.364449][T14642] cleanup_net+0x6bd/0xc90 [ 620.368904][T14642] ? __cfi_cleanup_net+0x10/0x10 [ 620.373951][T14642] ? kick_pool+0xb9/0x550 [ 620.378403][T14642] process_scheduled_works+0x7d1/0x1020 [ 620.384038][T14642] worker_thread+0xc70/0x10b0 [ 620.388757][T14642] kthread+0x2c9/0x370 killall: can't k[ 620.392955][T14642] ? __cfi_worker_thread+0x10/0x10 ill pid 17705: N[ 620.399557][T14642] ? __cfi_kthread+0x10/0x10 o such process[ 620.403902][ T110] printk: udevd: 2 output lines suppressed due to ratelimiting [ 620.405579][T14642] ret_from_fork+0x67/0xa0 [ 620.405613][T14642] ? __cfi_kthread+0x10/0x10 [ 620.405634][T14642] ret_from_fork_asm+0x1a/0x30 [ 620.405664][T14642] [ 620.405673][T14642] ---[ end trace 0000000000000000 ]--- killall: can't kill pid 17741: No such process killall: can't kill pid 19425: No such process Stopping klogd: OK Stopping acpid: [ 620.822279][T14642] tipc: Disabling bearer [ 620.840444][T14642] tipc: Disabling bearer [ 620.845808][T14642] tipc: Left network mode [ 620.854570][T14642] veth1_macvtap: left promiscuous mode [ 620.860224][T14642] veth0_vlan: left promiscuous mode [ 621.212459][T14642] dummy0: left allmulticast mode [ 621.217437][T14642] dummy0: left promiscuous mode [ 621.222584][T14642] bridge0: port 3(dummy0) entered disabled state [ 621.229420][T14642] bridge_slave_1: left allmulticast mode [ 621.235218][T14642] bridge_slave_1: left promiscuous mode [ 621.241036][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.248580][T14642] bridge_slave_0: left allmulticast mode [ 621.254254][T14642] bridge_slave_0: left promiscuous mode [ 621.259943][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.267801][T14642] bridge_slave_1: left allmulticast mode [ 621.273552][T14642] bridge_slave_1: left promiscuous mode [ 621.279412][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.287146][T14642] bridge_slave_0: left allmulticast mode [ 621.292886][T14642] bridge_slave_0: left promiscuous mode [ 621.298486][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.464607][T14642] veth1_macvtap: left promiscuous mode [ 621.470124][T14642] veth0_vlan: left promiscuous mode [ 621.475928][T14642] veth1_macvtap: left promiscuous mode [ 621.481541][T14642] veth0_vlan: left promiscuous mode [ 621.487173][T14642] veth1_macvtap: left promiscuous mode [ 621.492729][T14642] veth0_vlan: left promiscuous mode OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: devtmpfs busy - remounted read-only [ 621.862819][T19542] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1 ro. The system is going down NOW! Sent SIGKILL to all processes Requesting system poweroff [ 623.932150][T19543] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 623.939089][T19543] ACPI: PM: Preparing to enter system sleep state S5 [ 623.945950][T19543] kvm: exiting hardware virtualization [ 623.951514][T19543] reboot: Power down serialport: VM disconnected.