last executing test programs: 20m12.4342518s ago: executing program 1 (id=13303): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r5, 0x1, 0x26, &(0x7f0000000600)=0xdfa, 0x4) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "5205bb5d42650792", "3a18a1e35a9c49050100000400", "a5b6b1df", "0bfa2e7129b73960"}, 0x28) sendto$inet6(r2, 0x0, 0x0, 0x1, 0x0, 0x0) 20m12.414262952s ago: executing program 1 (id=13304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1401, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, 0x0) 20m12.361827377s ago: executing program 1 (id=13305): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 20m12.313484172s ago: executing program 1 (id=13306): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) 20m12.23436561s ago: executing program 1 (id=13307): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040)=0x2, 0x4) 20m12.126022061s ago: executing program 1 (id=13310): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 20m12.064692477s ago: executing program 32 (id=13310): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) 5m25.367754188s ago: executing program 4 (id=35119): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INTERRUPT(r4, &(0x7f0000000200)={0x10}, 0x10) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000100), 0x18, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@cache_loose}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x505, 0x0) write$FUSE_DIRENT(r5, 0x0, 0x0) 5m25.15109866s ago: executing program 4 (id=35129): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r4) sendmsg$IEEE802154_DISASSOCIATE_REQ(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010129bd70fb979b76e424"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) 5m25.137419821s ago: executing program 4 (id=35131): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa0, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x18}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20044095}, 0x40004) 5m25.107376324s ago: executing program 4 (id=35133): openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000240)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x75, 0x5, 0x8, 0x4, 0xfffffff8, 0x586e, "14f0050ea82fd243f1266a908912a93f25b75c67e541a3fce7b77ae2df43b0eec58939adc9dc81f44545962b41f65f542c6f53c26945639a9bb5f3e9d23595448e697bf72685e93186f86e762f2e9cef9144167bb91f6df34bc54b3b61b029a9352f0003651ecc9635429178675ae892b5558d60b1"}}, 0x18d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fc, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200047fc, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020) 5m24.998114115s ago: executing program 4 (id=35135): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) 5m24.958593849s ago: executing program 4 (id=35137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) 5m24.894818046s ago: executing program 33 (id=35137): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r5) sendmsg$IEEE802154_DISASSOCIATE_REQ(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4810) 3.329711585s ago: executing program 5 (id=43578): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 3.28783345s ago: executing program 5 (id=43579): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r2 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) 2.459301433s ago: executing program 5 (id=43594): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 1.39769939s ago: executing program 5 (id=43621): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0xfcee) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) 1.153516044s ago: executing program 5 (id=43629): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 1.102182549s ago: executing program 3 (id=43631): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockname$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0xfcee) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1.101313779s ago: executing program 3 (id=43633): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 1.045920645s ago: executing program 3 (id=43635): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 990.44141ms ago: executing program 3 (id=43639): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0xfcee) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 906.125259ms ago: executing program 3 (id=43641): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockname$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0xfcee) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 746.150385ms ago: executing program 2 (id=43645): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 724.366657ms ago: executing program 2 (id=43646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 614.125898ms ago: executing program 2 (id=43648): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 601.17054ms ago: executing program 2 (id=43650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockname$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0xfcee) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 531.418486ms ago: executing program 2 (id=43652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 469.158323ms ago: executing program 2 (id=43654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 238.496556ms ago: executing program 5 (id=43660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x80, 0x0, 0xfcee) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 157.379345ms ago: executing program 0 (id=43661): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 156.805314ms ago: executing program 0 (id=43662): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 78.007292ms ago: executing program 0 (id=43663): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 77.506352ms ago: executing program 0 (id=43664): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 52.637985ms ago: executing program 3 (id=43665): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 50.291045ms ago: executing program 0 (id=43666): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockname$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0xfcee) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 0s ago: executing program 0 (id=43667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) getsockname$inet(r2, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): 44][ T4386] __dump_stack+0x21/0x30 [ 1323.516083][ T4386] dump_stack_lvl+0x10c/0x190 [ 1323.516113][ T4386] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1323.516142][ T4386] ? handle_mm_fault+0x169b/0x1b90 [ 1323.516170][ T4386] dump_stack+0x19/0x20 [ 1323.516199][ T4386] should_fail_ex+0x3d9/0x530 [ 1323.516224][ T4386] should_failslab+0xac/0x100 [ 1323.516251][ T4386] kmem_cache_alloc_noprof+0x42/0x430 [ 1323.516274][ T4386] ? lock_vma_under_rcu+0x49d/0x540 [ 1323.516300][ T4386] ? getname_flags+0xc6/0x710 [ 1323.516325][ T4386] getname_flags+0xc6/0x710 [ 1323.516348][ T4386] ? build_open_flags+0x487/0x600 [ 1323.516378][ T4386] getname+0x1b/0x30 [ 1323.516409][ T4386] do_sys_openat2+0xcb/0x1c0 [ 1323.516440][ T4386] ? do_sys_open+0x100/0x100 [ 1323.516470][ T4386] ? __kasan_check_write+0x18/0x20 [ 1323.516504][ T4386] ? do_user_addr_fault+0xbc4/0x1200 [ 1323.516538][ T4386] ? __cfi_ksys_write+0x10/0x10 [ 1323.516561][ T4386] __x64_sys_openat+0x13a/0x170 [ 1323.516598][ T4386] x64_sys_call+0xe69/0x2ee0 [ 1323.516633][ T4386] do_syscall_64+0x58/0xf0 [ 1323.516663][ T4386] ? clear_bhb_loop+0x50/0xa0 [ 1323.516689][ T4386] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1323.516714][ T4386] RIP: 0033:0x7f952e98df10 [ 1323.516734][ T4386] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1323.516755][ T4386] RSP: 002b:00007f952f846ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1323.516781][ T4386] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f952e98df10 [ 1323.516798][ T4386] RDX: 0000000000000002 RSI: 00007f952ea11c6c RDI: 00000000ffffff9c [ 1323.516815][ T4386] RBP: 00007f952ea11c6c R08: 0000000000000000 R09: 0000000000000000 [ 1323.516831][ T4386] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1323.516846][ T4386] R13: 0000000000000036 R14: 0000200000000200 R15: 00007ffcdbc8bf58 [ 1323.516866][ T4386] [ 1324.166107][ T36] audit: type=1400 audit(1763078084.670:438): avc: denied { create } for pid=4392 comm="syz.3.33248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 1324.208717][ T4393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1324.395850][ T4408] netlink: 'syz.2.33254': attribute type 28 has an invalid length. [ 1324.404071][ T4407] netlink: 'syz.4.33255': attribute type 28 has an invalid length. [ 1324.536173][ T1126] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1324.601890][ T4442] 9pnet_fd: Insufficient options for proto=fd [ 1324.699856][ T1126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1324.717478][ T1126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1324.735420][ T1126] usb 4-1: can't read configurations, error -71 [ 1324.939877][ T4467] netlink: 'syz.0.33283': attribute type 28 has an invalid length. [ 1325.126819][T10522] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1325.289589][T10522] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1325.306674][T10522] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1325.314530][T10522] usb 3-1: can't read configurations, error -71 [ 1325.590809][ T4486] netlink: 'syz.3.33292': attribute type 28 has an invalid length. [ 1325.652113][ T4488] netlink: 'syz.3.33293': attribute type 28 has an invalid length. [ 1325.827740][ T4494] FAULT_INJECTION: forcing a failure. [ 1325.827740][ T4494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.845771][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.2.33297 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1325.845815][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1325.845831][ T4494] Call Trace: [ 1325.845839][ T4494] [ 1325.845850][ T4494] __dump_stack+0x21/0x30 [ 1325.845892][ T4494] dump_stack_lvl+0x10c/0x190 [ 1325.845922][ T4494] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1325.845953][ T4494] ? check_stack_object+0x12c/0x140 [ 1325.845979][ T4494] dump_stack+0x19/0x20 [ 1325.846008][ T4494] should_fail_ex+0x3d9/0x530 [ 1325.846038][ T4494] should_fail+0xf/0x20 [ 1325.846057][ T4494] should_fail_usercopy+0x1e/0x30 [ 1325.846082][ T4494] _copy_to_user+0x24/0xa0 [ 1325.846110][ T4494] simple_read_from_buffer+0xed/0x160 [ 1325.846138][ T4494] proc_fail_nth_read+0x19e/0x210 [ 1325.846167][ T4494] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1325.846194][ T4494] ? bpf_lsm_file_permission+0xd/0x20 [ 1325.846223][ T4494] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1325.846251][ T4494] vfs_read+0x27d/0xc70 [ 1325.846268][ T4494] ? __cfi_do_mmap+0x10/0x10 [ 1325.846288][ T4494] ? __cfi_down_write_killable+0x10/0x10 [ 1325.846312][ T4494] ? __cfi_vfs_read+0x10/0x10 [ 1325.846330][ T4494] ? __kasan_check_write+0x18/0x20 [ 1325.846421][ T4494] ? mutex_lock+0x92/0x1c0 [ 1325.846441][ T4494] ? __cfi_mutex_lock+0x10/0x10 [ 1325.846459][ T4494] ? __fget_files+0x2c5/0x340 [ 1325.846485][ T4494] ksys_read+0x141/0x250 [ 1325.846505][ T4494] ? __cfi_ksys_read+0x10/0x10 [ 1325.846523][ T4494] ? __kasan_check_read+0x15/0x20 [ 1325.846554][ T4494] __x64_sys_read+0x7f/0x90 [ 1325.846574][ T4494] x64_sys_call+0x2638/0x2ee0 [ 1325.846605][ T4494] do_syscall_64+0x58/0xf0 [ 1325.846633][ T4494] ? clear_bhb_loop+0x50/0xa0 [ 1325.846660][ T4494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1325.846684][ T4494] RIP: 0033:0x7f1f6998e0dc [ 1325.846704][ T4494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1325.846724][ T4494] RSP: 002b:00007f1f6a78a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1325.846750][ T4494] RAX: ffffffffffffffda RBX: 00007f1f69be5fa0 RCX: 00007f1f6998e0dc [ 1325.846768][ T4494] RDX: 000000000000000f RSI: 00007f1f6a78a0a0 RDI: 0000000000000007 [ 1325.846784][ T4494] RBP: 00007f1f6a78a090 R08: 0000000000000000 R09: 0000000081c5e000 [ 1325.846800][ T4494] R10: 0000000000082013 R11: 0000000000000246 R12: 0000000000000001 [ 1325.846814][ T4494] R13: 00007f1f69be6038 R14: 00007f1f69be5fa0 R15: 00007ffd443cff98 [ 1325.846834][ T4494] [ 1326.052731][ T4499] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1326.175461][ T4505] rust_binder: 745: no such ref 1 [ 1326.256573][ T4499] rust_binder: 745: no such ref 3 [ 1326.271985][ T4499] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 1326.284846][ T4499] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1326.299260][ T4499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:745 [ 1326.561239][ T4523] FAULT_INJECTION: forcing a failure. [ 1326.561239][ T4523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.584879][T32394] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1326.617777][ T4523] CPU: 1 UID: 0 PID: 4523 Comm: syz.3.33308 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1326.617819][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1326.617835][ T4523] Call Trace: [ 1326.617844][ T4523] [ 1326.617854][ T4523] __dump_stack+0x21/0x30 [ 1326.617892][ T4523] dump_stack_lvl+0x10c/0x190 [ 1326.617922][ T4523] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1326.617955][ T4523] ? kstrtoull+0x13b/0x1e0 [ 1326.617977][ T4523] dump_stack+0x19/0x20 [ 1326.618006][ T4523] should_fail_ex+0x3d9/0x530 [ 1326.618032][ T4523] should_fail+0xf/0x20 [ 1326.618053][ T4523] should_fail_usercopy+0x1e/0x30 [ 1326.618079][ T4523] _copy_from_user+0x22/0xb0 [ 1326.618109][ T4523] ___sys_sendmsg+0x159/0x2a0 [ 1326.618154][ T4523] ? __sys_sendmsg+0x280/0x280 [ 1326.618193][ T4523] ? proc_fail_nth_write+0x17e/0x210 [ 1326.618226][ T4523] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1326.618264][ T4523] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1326.618298][ T4523] ? fput+0x1a5/0x240 [ 1326.618327][ T4523] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1326.618360][ T4523] ? ksys_write+0x1ef/0x250 [ 1326.618385][ T4523] ? __kasan_check_read+0x15/0x20 [ 1326.618422][ T4523] x64_sys_call+0x2a4c/0x2ee0 [ 1326.618457][ T4523] do_syscall_64+0x58/0xf0 [ 1326.618487][ T4523] ? clear_bhb_loop+0x50/0xa0 [ 1326.618515][ T4523] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1326.618540][ T4523] RIP: 0033:0x7f0a9938f6c9 [ 1326.618560][ T4523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.618580][ T4523] RSP: 002b:00007f0a9a293038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.618607][ T4523] RAX: ffffffffffffffda RBX: 00007f0a995e5fa0 RCX: 00007f0a9938f6c9 [ 1326.618626][ T4523] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1326.618642][ T4523] RBP: 00007f0a9a293090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.618658][ T4523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.618673][ T4523] R13: 00007f0a995e6038 R14: 00007f0a995e5fa0 R15: 00007fff31f3c428 [ 1326.618694][ T4523] [ 1326.938687][T32394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1326.949231][T32394] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1326.957276][T32394] usb 5-1: can't read configurations, error -71 [ 1327.058292][ T4545] FAULT_INJECTION: forcing a failure. [ 1327.058292][ T4545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1327.072561][ T4545] CPU: 1 UID: 0 PID: 4545 Comm: syz.3.33319 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1327.072600][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1327.072616][ T4545] Call Trace: [ 1327.072625][ T4545] [ 1327.072634][ T4545] __dump_stack+0x21/0x30 [ 1327.072672][ T4545] dump_stack_lvl+0x10c/0x190 [ 1327.072698][ T4545] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1327.072729][ T4545] ? unwind_get_return_address+0x51/0x90 [ 1327.072757][ T4545] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1327.072815][ T4545] dump_stack+0x19/0x20 [ 1327.072843][ T4545] should_fail_ex+0x3d9/0x530 [ 1327.072870][ T4545] should_fail_alloc_page+0xeb/0x110 [ 1327.072897][ T4545] __alloc_pages_noprof+0x19b/0x7b0 [ 1327.072929][ T4545] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1327.072959][ T4545] ? avc_policy_seqno+0xd/0x30 [ 1327.072990][ T4545] ? selinux_file_permission+0x309/0xb30 [ 1327.073132][ T4545] ? __cfi_selinux_file_permission+0x10/0x10 [ 1327.073159][ T4545] ? __import_iovec+0x5ad/0x7d0 [ 1327.073190][ T4545] get_zeroed_page_noprof+0x1f/0x50 [ 1327.073223][ T4545] simple_transaction_get+0x5e/0x1e0 [ 1327.073253][ T4545] selinux_transaction_write+0xd6/0x180 [ 1327.073283][ T4545] ? __cfi_selinux_transaction_write+0x10/0x10 [ 1327.073312][ T4545] vfs_writev+0x603/0xcf0 [ 1327.073340][ T4545] ? do_writev+0x2d0/0x2d0 [ 1327.073364][ T4545] ? vfs_write+0x93e/0xf30 [ 1327.073385][ T4545] ? __kasan_check_write+0x18/0x20 [ 1327.073417][ T4545] ? mutex_lock+0x92/0x1c0 [ 1327.073437][ T4545] ? __cfi_mutex_lock+0x10/0x10 [ 1327.073458][ T4545] do_writev+0x14d/0x2d0 [ 1327.073482][ T4545] ? vfs_readv+0xa50/0xa50 [ 1327.073508][ T4545] ? __kasan_check_read+0x15/0x20 [ 1327.073542][ T4545] __x64_sys_writev+0x81/0x90 [ 1327.073565][ T4545] x64_sys_call+0x1fbb/0x2ee0 [ 1327.073618][ T4545] do_syscall_64+0x58/0xf0 [ 1327.073646][ T4545] ? clear_bhb_loop+0x50/0xa0 [ 1327.073670][ T4545] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1327.073694][ T4545] RIP: 0033:0x7f0a9938f6c9 [ 1327.073713][ T4545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.073734][ T4545] RSP: 002b:00007f0a9a293038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1327.073758][ T4545] RAX: ffffffffffffffda RBX: 00007f0a995e5fa0 RCX: 00007f0a9938f6c9 [ 1327.073776][ T4545] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1327.073797][ T4545] RBP: 00007f0a9a293090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.073812][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.073827][ T4545] R13: 00007f0a995e6038 R14: 00007f0a995e5fa0 R15: 00007fff31f3c428 [ 1327.073847][ T4545] [ 1327.569117][ T4560] FAULT_INJECTION: forcing a failure. [ 1327.569117][ T4560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.583425][ T4560] CPU: 0 UID: 0 PID: 4560 Comm: syz.0.33326 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1327.583465][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1327.583481][ T4560] Call Trace: [ 1327.583489][ T4560] [ 1327.583500][ T4560] __dump_stack+0x21/0x30 [ 1327.583537][ T4560] dump_stack_lvl+0x10c/0x190 [ 1327.583568][ T4560] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1327.583601][ T4560] ? kstrtoull+0x13b/0x1e0 [ 1327.583622][ T4560] dump_stack+0x19/0x20 [ 1327.583651][ T4560] should_fail_ex+0x3d9/0x530 [ 1327.583677][ T4560] should_fail+0xf/0x20 [ 1327.583698][ T4560] should_fail_usercopy+0x1e/0x30 [ 1327.583724][ T4560] _copy_from_user+0x22/0xb0 [ 1327.583752][ T4560] ___sys_sendmsg+0x159/0x2a0 [ 1327.583788][ T4560] ? __sys_sendmsg+0x280/0x280 [ 1327.583832][ T4560] ? proc_fail_nth_write+0x17e/0x210 [ 1327.583864][ T4560] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1327.583902][ T4560] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1327.583935][ T4560] ? fput+0x1a5/0x240 [ 1327.583964][ T4560] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1327.583999][ T4560] ? ksys_write+0x1ef/0x250 [ 1327.584022][ T4560] ? __kasan_check_read+0x15/0x20 [ 1327.584058][ T4560] x64_sys_call+0x2a4c/0x2ee0 [ 1327.584092][ T4560] do_syscall_64+0x58/0xf0 [ 1327.584122][ T4560] ? clear_bhb_loop+0x50/0xa0 [ 1327.584148][ T4560] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1327.584173][ T4560] RIP: 0033:0x7f5ad7f8f6c9 [ 1327.584192][ T4560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1327.584213][ T4560] RSP: 002b:00007f5ad8ec6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.584239][ T4560] RAX: ffffffffffffffda RBX: 00007f5ad81e5fa0 RCX: 00007f5ad7f8f6c9 [ 1327.584257][ T4560] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1327.584273][ T4560] RBP: 00007f5ad8ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.584289][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.584304][ T4560] R13: 00007f5ad81e6038 R14: 00007f5ad81e5fa0 R15: 00007ffe012839b8 [ 1327.584324][ T4560] [ 1328.037271][ T4596] netlink: 'syz.3.33342': attribute type 28 has an invalid length. [ 1328.116183][T10522] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1328.266168][T32394] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1328.290633][T10522] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1328.301463][T10522] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1328.309440][T10522] usb 3-1: can't read configurations, error -71 [ 1328.418711][T32394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1328.428652][T32394] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1328.436349][T32394] usb 5-1: can't read configurations, error -71 [ 1328.442857][T32394] usb usb5-port1: attempt power cycle [ 1328.493296][ T4607] tipc: Started in network mode [ 1328.498363][ T4607] tipc: Node identity ac14142f, cluster identity 4711 [ 1328.505357][ T4607] tipc: New replicast peer: 0.0.0.0 [ 1328.510988][ T4607] tipc: Enabled bearer , priority 10 [ 1328.565610][ T4609] FAULT_INJECTION: forcing a failure. [ 1328.565610][ T4609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.579313][ T4609] CPU: 1 UID: 0 PID: 4609 Comm: syz.3.33347 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1328.579350][ T4609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1328.579365][ T4609] Call Trace: [ 1328.579373][ T4609] [ 1328.579383][ T4609] __dump_stack+0x21/0x30 [ 1328.579420][ T4609] dump_stack_lvl+0x10c/0x190 [ 1328.579450][ T4609] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1328.579479][ T4609] ? check_stack_object+0x107/0x140 [ 1328.579500][ T4609] dump_stack+0x19/0x20 [ 1328.579527][ T4609] should_fail_ex+0x3d9/0x530 [ 1328.579550][ T4609] should_fail+0xf/0x20 [ 1328.579570][ T4609] should_fail_usercopy+0x1e/0x30 [ 1328.579592][ T4609] _copy_from_user+0x22/0xb0 [ 1328.579622][ T4609] copy_clone_args_from_user+0x1ec/0x6a0 [ 1328.579653][ T4609] ? __delayed_free_task+0x40/0x40 [ 1328.579681][ T4609] ? proc_fail_nth_write+0x17e/0x210 [ 1328.579728][ T4609] ? bpf_lsm_file_permission+0xd/0x20 [ 1328.579763][ T4609] __se_sys_clone3+0xf2/0x2d0 [ 1328.579792][ T4609] ? __x64_sys_clone3+0x80/0x80 [ 1328.579821][ T4609] ? __kasan_check_write+0x18/0x20 [ 1328.579853][ T4609] ? fput+0x1a5/0x240 [ 1328.579881][ T4609] ? __kasan_check_read+0x15/0x20 [ 1328.579914][ T4609] __x64_sys_clone3+0x5f/0x80 [ 1328.579941][ T4609] x64_sys_call+0x28fc/0x2ee0 [ 1328.579971][ T4609] do_syscall_64+0x58/0xf0 [ 1328.579998][ T4609] ? clear_bhb_loop+0x50/0xa0 [ 1328.580020][ T4609] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1328.580043][ T4609] RIP: 0033:0x7f0a9938f6c9 [ 1328.580064][ T4609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.580084][ T4609] RSP: 002b:00007f0a9a292f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1328.580108][ T4609] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00007f0a9938f6c9 [ 1328.580126][ T4609] RDX: 00007f0a9a292f20 RSI: 0000000000000040 RDI: 00007f0a9a292f20 [ 1328.580142][ T4609] RBP: 00007f0a9a293090 R08: 0000000000000000 R09: 0000000000000040 [ 1328.580158][ T4609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.580169][ T4609] R13: 00007f0a995e6038 R14: 00007f0a995e5fa0 R15: 00007fff31f3c428 [ 1328.580184][ T4609] [ 1329.354969][ T4626] FAULT_INJECTION: forcing a failure. [ 1329.354969][ T4626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.375310][ T4626] CPU: 1 UID: 0 PID: 4626 Comm: syz.3.33356 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1329.375348][ T4626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1329.375363][ T4626] Call Trace: [ 1329.375372][ T4626] [ 1329.375382][ T4626] __dump_stack+0x21/0x30 [ 1329.375425][ T4626] dump_stack_lvl+0x10c/0x190 [ 1329.375456][ T4626] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1329.375488][ T4626] ? check_stack_object+0x12c/0x140 [ 1329.375512][ T4626] dump_stack+0x19/0x20 [ 1329.375541][ T4626] should_fail_ex+0x3d9/0x530 [ 1329.375565][ T4626] should_fail+0xf/0x20 [ 1329.375584][ T4626] should_fail_usercopy+0x1e/0x30 [ 1329.375606][ T4626] _copy_to_user+0x24/0xa0 [ 1329.375633][ T4626] simple_read_from_buffer+0xed/0x160 [ 1329.375673][ T4626] proc_fail_nth_read+0x19e/0x210 [ 1329.375705][ T4626] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1329.375737][ T4626] ? bpf_lsm_file_permission+0xd/0x20 [ 1329.375769][ T4626] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1329.375800][ T4626] vfs_read+0x27d/0xc70 [ 1329.375822][ T4626] ? __cfi_vfs_read+0x10/0x10 [ 1329.375840][ T4626] ? __kasan_check_write+0x18/0x20 [ 1329.375874][ T4626] ? mutex_lock+0x92/0x1c0 [ 1329.375895][ T4626] ? __cfi_mutex_lock+0x10/0x10 [ 1329.375916][ T4626] ? __fget_files+0x2c5/0x340 [ 1329.375943][ T4626] ksys_read+0x141/0x250 [ 1329.375963][ T4626] ? __cfi_ksys_read+0x10/0x10 [ 1329.375984][ T4626] ? __kasan_check_read+0x15/0x20 [ 1329.376018][ T4626] __x64_sys_read+0x7f/0x90 [ 1329.376043][ T4626] x64_sys_call+0x2638/0x2ee0 [ 1329.376077][ T4626] do_syscall_64+0x58/0xf0 [ 1329.376105][ T4626] ? clear_bhb_loop+0x50/0xa0 [ 1329.376131][ T4626] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1329.376155][ T4626] RIP: 0033:0x7f0a9938e0dc [ 1329.376174][ T4626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1329.376195][ T4626] RSP: 002b:00007f0a9a293030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1329.376221][ T4626] RAX: ffffffffffffffda RBX: 00007f0a995e5fa0 RCX: 00007f0a9938e0dc [ 1329.376240][ T4626] RDX: 000000000000000f RSI: 00007f0a9a2930a0 RDI: 0000000000000006 [ 1329.376255][ T4626] RBP: 00007f0a9a293090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.376272][ T4626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.376287][ T4626] R13: 00007f0a995e6038 R14: 00007f0a995e5fa0 R15: 00007fff31f3c428 [ 1329.376307][ T4626] [ 1329.637215][ T1126] tipc: Node number set to 2886997039 [ 1329.681023][ T4632] 9pnet_fd: Insufficient options for proto=fd [ 1329.696116][T32394] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1329.737763][T32394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1329.756096][T32394] usb 5-1: not running at top speed; connect to a high speed hub [ 1329.765228][T32394] usb 5-1: config 7 has an invalid interface number: 85 but max is 0 [ 1329.786114][T32394] usb 5-1: config 7 has no interface number 0 [ 1329.792488][T32394] usb 5-1: config 7 interface 85 has no altsetting 0 [ 1329.807647][T32394] usb 5-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 1329.831628][T32394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.846141][T32394] usb 5-1: Product: syz [ 1329.850461][T32394] usb 5-1: Manufacturer: syz [ 1329.855135][T32394] usb 5-1: SerialNumber: syz [ 1330.071927][T32394] usb-storage 5-1:7.85: USB Mass Storage device detected [ 1330.121434][T32394] usb 5-1: USB disconnect, device number 43 [ 1330.202316][ T4678] netlink: 'syz.3.33379': attribute type 28 has an invalid length. [ 1331.050129][ T4722] netlink: 'syz.4.33404': attribute type 28 has an invalid length. [ 1331.680585][ T4812] 9pnet_fd: Insufficient options for proto=fd [ 1332.506108][T29688] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1332.679690][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1332.701388][T29688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1332.712842][T29688] usb 1-1: can't read configurations, error -71 [ 1333.327578][ T4907] netlink: 'syz.2.33493': attribute type 28 has an invalid length. [ 1333.887090][ T4985] FAULT_INJECTION: forcing a failure. [ 1333.887090][ T4985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1333.906966][ T4985] CPU: 1 UID: 0 PID: 4985 Comm: syz.2.33530 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1333.907004][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1333.907019][ T4985] Call Trace: [ 1333.907028][ T4985] [ 1333.907037][ T4985] __dump_stack+0x21/0x30 [ 1333.907081][ T4985] dump_stack_lvl+0x10c/0x190 [ 1333.907131][ T4985] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1333.907168][ T4985] ? check_stack_object+0x12c/0x140 [ 1333.907193][ T4985] dump_stack+0x19/0x20 [ 1333.907244][ T4985] should_fail_ex+0x3d9/0x530 [ 1333.907277][ T4985] should_fail+0xf/0x20 [ 1333.907301][ T4985] should_fail_usercopy+0x1e/0x30 [ 1333.907327][ T4985] _copy_to_user+0x24/0xa0 [ 1333.907357][ T4985] simple_read_from_buffer+0xed/0x160 [ 1333.907401][ T4985] proc_fail_nth_read+0x19e/0x210 [ 1333.907434][ T4985] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1333.907466][ T4985] ? selinux_perf_event_alloc+0x110/0x110 [ 1333.907494][ T4985] ? bpf_lsm_file_permission+0xd/0x20 [ 1333.907527][ T4985] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1333.907558][ T4985] vfs_read+0x27d/0xc70 [ 1333.907590][ T4985] ? __cfi_vfs_read+0x10/0x10 [ 1333.907610][ T4985] ? __kasan_check_write+0x18/0x20 [ 1333.907661][ T4985] ? mutex_lock+0x92/0x1c0 [ 1333.907683][ T4985] ? __cfi_mutex_lock+0x10/0x10 [ 1333.907703][ T4985] ? __fget_files+0x2c5/0x340 [ 1333.907736][ T4985] ksys_read+0x141/0x250 [ 1333.907757][ T4985] ? __cfi_ksys_read+0x10/0x10 [ 1333.907778][ T4985] ? __kasan_check_read+0x15/0x20 [ 1333.907812][ T4985] __x64_sys_read+0x7f/0x90 [ 1333.907832][ T4985] x64_sys_call+0x2638/0x2ee0 [ 1333.907865][ T4985] do_syscall_64+0x58/0xf0 [ 1333.907893][ T4985] ? clear_bhb_loop+0x50/0xa0 [ 1333.907918][ T4985] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1333.907942][ T4985] RIP: 0033:0x7f1f6998e0dc [ 1333.907962][ T4985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1333.907984][ T4985] RSP: 002b:00007f1f6a78a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1333.908017][ T4985] RAX: ffffffffffffffda RBX: 00007f1f69be5fa0 RCX: 00007f1f6998e0dc [ 1333.908035][ T4985] RDX: 000000000000000f RSI: 00007f1f6a78a0a0 RDI: 0000000000000005 [ 1333.908051][ T4985] RBP: 00007f1f6a78a090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.908065][ T4985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.908080][ T4985] R13: 00007f1f69be6038 R14: 00007f1f69be5fa0 R15: 00007ffd443cff98 [ 1333.908100][ T4985] [ 1334.537154][ T5016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33545'. [ 1335.126143][T13105] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1335.288094][T13105] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1335.296763][T13105] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1335.304618][T13105] usb 1-1: can't read configurations, error -71 [ 1336.416137][T29688] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1336.566102][T13105] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1336.578641][T29688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1336.587524][T29688] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1336.595190][T29688] usb 3-1: can't read configurations, error -71 [ 1336.716077][T13105] usb 4-1: Using ep0 maxpacket: 8 [ 1336.727144][T13105] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1336.735475][T13105] usb 4-1: config 0 has no interface number 0 [ 1336.757085][T13105] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1336.766474][T13105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.774521][T13105] usb 4-1: Product: syz [ 1336.780111][T13105] usb 4-1: Manufacturer: syz [ 1336.784738][T13105] usb 4-1: SerialNumber: syz [ 1336.790477][T13105] usb 4-1: config 0 descriptor?? [ 1336.997524][T13105] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1337.010550][T13105] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 1337.024868][T13105] usb 4-1: USB disconnect, device number 36 [ 1337.159476][ T5113] 9pnet_fd: Insufficient options for proto=fd [ 1337.426148][T28076] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1337.535257][ T5134] 9pnet_fd: Insufficient options for proto=fd [ 1337.580130][T28076] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1337.597579][T28076] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1337.605323][T28076] usb 5-1: can't read configurations, error -71 [ 1337.926121][T32394] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1338.105512][T32394] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1338.120193][T32394] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1338.136307][T32394] usb 1-1: can't read configurations, error -71 [ 1339.094837][ T5239] netlink: 'syz.3.33654': attribute type 28 has an invalid length. [ 1339.186093][T32394] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1339.357168][T32394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.386092][T32394] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1339.387344][ T5256] netlink: 'syz.2.33663': attribute type 28 has an invalid length. [ 1339.405634][T32394] usb 1-1: config 1 has no interface number 1 [ 1339.415713][T32394] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1339.450180][T32394] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1339.472404][T32394] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1339.482470][T32394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.493418][T32394] usb 1-1: Product: syz [ 1339.497938][T32394] usb 1-1: Manufacturer: syz [ 1339.504314][T32394] usb 1-1: SerialNumber: syz [ 1339.511362][ T5218] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1339.726084][ T1126] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1339.734987][T32394] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1339.746134][T32394] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1339.772649][T32394] usb 1-1: USB disconnect, device number 36 [ 1339.794461][ T1875] udevd[1875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1339.907423][ T1126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1339.923348][ T1126] usb 4-1: config 2 has an invalid interface number: 34 but max is 2 [ 1339.932052][ T1126] usb 4-1: config 2 has an invalid interface number: 6 but max is 2 [ 1339.946208][ T1126] usb 4-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1339.960672][ T1126] usb 4-1: config 2 has no interface number 0 [ 1339.967452][ T1126] usb 4-1: config 2 has no interface number 2 [ 1339.973740][ T1126] usb 4-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1339.985870][ T1126] usb 4-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1339.997531][ T1126] usb 4-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1339.998482][ T5301] netlink: 'syz.2.33684': attribute type 28 has an invalid length. [ 1340.010983][ T1126] usb 4-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1340.033290][ T1126] usb 4-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1340.046597][ T1126] usb 4-1: config 2 interface 1 has no altsetting 0 [ 1340.063972][ T1126] usb 4-1: config 2 interface 34 has no altsetting 0 [ 1340.070966][ T1126] usb 4-1: config 2 interface 6 has no altsetting 0 [ 1340.082602][ T1126] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1340.091980][ T1126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.100400][ T1126] usb 4-1: Product: syz [ 1340.104837][ T1126] usb 4-1: Manufacturer: syz [ 1340.109942][ T1126] usb 4-1: SerialNumber: syz [ 1340.215619][ T5324] netlink: 'syz.4.33695': attribute type 28 has an invalid length. [ 1340.322259][ T1126] usb 4-1: selecting invalid altsetting 0 [ 1340.337560][ T1126] usb 4-1: USB disconnect, device number 37 [ 1340.362059][ T1366] udevd[1366]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1340.538131][ T5347] netlink: 'syz.4.33706': attribute type 28 has an invalid length. [ 1341.626075][ T1126] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1341.787641][ T1126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1341.796646][ T1126] usb 1-1: config 2 has an invalid interface number: 34 but max is 2 [ 1341.806797][ T1126] usb 1-1: config 2 has an invalid interface number: 6 but max is 2 [ 1341.817668][ T1126] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1341.828564][ T1126] usb 1-1: config 2 has no interface number 0 [ 1341.835439][ T1126] usb 1-1: config 2 has no interface number 2 [ 1341.842709][ T1126] usb 1-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1341.854358][ T1126] usb 1-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1341.867670][ T1126] usb 1-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1341.882204][ T1126] usb 1-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1341.895867][ T1126] usb 1-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1341.916325][ T1126] usb 1-1: config 2 interface 1 has no altsetting 0 [ 1341.927436][ T1126] usb 1-1: config 2 interface 34 has no altsetting 0 [ 1341.934716][ T1126] usb 1-1: config 2 interface 6 has no altsetting 0 [ 1341.944378][ T1126] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1341.959686][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.970372][ T1126] usb 1-1: Product: syz [ 1341.974782][ T1126] usb 1-1: Manufacturer: syz [ 1341.981777][ T1126] usb 1-1: SerialNumber: syz [ 1342.200933][ T1126] usb 1-1: selecting invalid altsetting 0 [ 1342.232709][ T1126] usb 1-1: USB disconnect, device number 37 [ 1342.409135][ T5440] netlink: 'syz.4.33751': attribute type 28 has an invalid length. [ 1342.656573][ T5459] 9pnet_fd: Insufficient options for proto=fd [ 1342.978380][ T5478] 9pnet_fd: Insufficient options for proto=fd [ 1343.257575][ T5493] 9pnet_fd: Insufficient options for proto=fd [ 1343.276134][ T1126] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1343.457449][ T1126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1343.466562][ T1126] usb 3-1: config 2 has an invalid interface number: 34 but max is 2 [ 1343.474778][ T1126] usb 3-1: config 2 has an invalid interface number: 6 but max is 2 [ 1343.506136][ T1126] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1343.526234][ T1126] usb 3-1: config 2 has no interface number 0 [ 1343.532475][ T1126] usb 3-1: config 2 has no interface number 2 [ 1343.546086][ T1126] usb 3-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1343.566235][ T1126] usb 3-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1343.586214][ T1126] usb 3-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1343.616080][ T1126] usb 3-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1343.636214][ T1126] usb 3-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1343.666072][ T1126] usb 3-1: config 2 interface 1 has no altsetting 0 [ 1343.672924][ T1126] usb 3-1: config 2 interface 34 has no altsetting 0 [ 1343.696071][ T1126] usb 3-1: config 2 interface 6 has no altsetting 0 [ 1343.704155][ T1126] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1343.716064][ T1126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.724123][ T1126] usb 3-1: Product: syz [ 1343.746084][ T1126] usb 3-1: Manufacturer: syz [ 1343.750770][ T1126] usb 3-1: SerialNumber: syz [ 1343.980340][ T1126] usb 3-1: selecting invalid altsetting 0 [ 1344.017328][ T1126] usb 3-1: USB disconnect, device number 53 [ 1344.041984][ T1366] udevd[1366]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1345.366135][ T1126] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1345.416599][T10427] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1345.527976][ T1126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1345.537626][ T1126] usb 1-1: config 2 has an invalid interface number: 34 but max is 2 [ 1345.546866][ T1126] usb 1-1: config 2 has an invalid interface number: 6 but max is 2 [ 1345.555079][ T1126] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1345.565451][ T1126] usb 1-1: config 2 has no interface number 0 [ 1345.571884][ T1126] usb 1-1: config 2 has no interface number 2 [ 1345.578305][ T1126] usb 1-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1345.589662][ T1126] usb 1-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1345.601095][ T1126] usb 1-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1345.614250][ T1126] usb 1-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1345.625263][ T1126] usb 1-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1345.625362][T10427] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.648605][ T1126] usb 1-1: config 2 interface 1 has no altsetting 0 [ 1345.655763][ T1126] usb 1-1: config 2 interface 34 has no altsetting 0 [ 1345.662855][ T1126] usb 1-1: config 2 interface 6 has no altsetting 0 [ 1345.670953][T10427] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1345.680268][T10427] usb 5-1: config 1 has no interface number 1 [ 1345.686825][T10427] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1345.700292][T10427] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1345.712064][ T1126] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1345.722464][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.731636][ T1126] usb 1-1: Product: syz [ 1345.736575][ T1126] usb 1-1: Manufacturer: syz [ 1345.741359][ T1126] usb 1-1: SerialNumber: syz [ 1345.746116][T10427] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.755188][T10427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.763736][T10427] usb 5-1: Product: syz [ 1345.768526][T10427] usb 5-1: Manufacturer: syz [ 1345.773221][T10427] usb 5-1: SerialNumber: syz [ 1345.784535][ T5596] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1345.983075][ T1126] usb 1-1: selecting invalid altsetting 0 [ 1345.999906][T10427] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1346.008112][T10427] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 1346.026935][T10427] usb 5-1: USB disconnect, device number 46 [ 1346.045412][ T1126] usb 1-1: USB disconnect, device number 38 [ 1346.080290][ T1366] udevd[1366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1347.697028][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.704242][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.738666][ T5662] bridge_slave_0: entered allmulticast mode [ 1347.745616][ T5662] bridge_slave_0: entered promiscuous mode [ 1347.793682][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.823429][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.837529][ T5662] bridge_slave_1: entered allmulticast mode [ 1347.852292][ T5662] bridge_slave_1: entered promiscuous mode [ 1348.169777][T10937] veth1_macvtap: left promiscuous mode [ 1348.186320][T10937] veth0_vlan: left promiscuous mode [ 1348.419971][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.432689][ T5662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.440525][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.448967][ T5662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.519143][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.536541][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.568631][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.578812][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.607935][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.616251][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.707650][ T5662] veth0_vlan: entered promiscuous mode [ 1348.739422][ T5662] veth1_macvtap: entered promiscuous mode [ 1349.419232][ T5757] 9pnet_fd: Insufficient options for proto=fd [ 1349.886575][T13105] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1350.064770][T13105] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1350.085932][T13105] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1350.095470][T13105] usb 3-1: can't read configurations, error -71 [ 1351.421284][ T5855] 9pnet_fd: Insufficient options for proto=fd [ 1351.592359][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 1351.688119][ T5869] netlink: 'syz.2.33948': attribute type 28 has an invalid length. [ 1351.955652][ T5888] 9pnet_fd: Insufficient options for proto=fd [ 1352.017776][ T5898] netlink: 'syz.2.33959': attribute type 28 has an invalid length. [ 1352.106081][T13105] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1352.259181][T13105] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1352.273929][T13105] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1352.283926][T13105] usb 4-1: can't read configurations, error -71 [ 1353.258625][ T5953] 9pnet_fd: Insufficient options for proto=fd [ 1354.048227][ T6001] netlink: 'syz.3.34006': attribute type 28 has an invalid length. [ 1355.486096][T13105] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1355.636083][T13105] usb 1-1: Using ep0 maxpacket: 8 [ 1355.648215][T13105] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1355.666220][T13105] usb 1-1: config 0 has no interface number 0 [ 1355.678549][T13105] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1355.688281][T13105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.706444][T13105] usb 1-1: Product: syz [ 1355.712254][T13105] usb 1-1: Manufacturer: syz [ 1355.721559][T13105] usb 1-1: SerialNumber: syz [ 1355.731844][T13105] usb 1-1: config 0 descriptor?? [ 1355.950676][T13105] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1355.958069][T13105] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1355.975043][T13105] usb 1-1: USB disconnect, device number 39 [ 1356.116289][T28076] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1356.146087][T10522] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1356.267330][T28076] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.279550][T28076] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1356.290341][T28076] usb 4-1: config 1 has no interface number 1 [ 1356.298280][T28076] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1356.309704][T10522] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1356.314415][T28076] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1356.326729][T10522] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1356.332878][T28076] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.346214][T10522] usb 5-1: can't read configurations, error -71 [ 1356.348215][T28076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.362530][T28076] usb 4-1: Product: syz [ 1356.367015][T28076] usb 4-1: Manufacturer: syz [ 1356.373110][T28076] usb 4-1: SerialNumber: syz [ 1356.384867][ T6075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1356.598969][T28076] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1356.607635][T28076] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1356.641809][T28076] usb 4-1: USB disconnect, device number 40 [ 1357.226094][T28076] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1357.386076][T28076] usb 3-1: Using ep0 maxpacket: 8 [ 1357.392593][T28076] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1357.401886][T28076] usb 3-1: config 0 has no interface number 0 [ 1357.418449][T28076] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1357.432999][T28076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.441521][T28076] usb 3-1: Product: syz [ 1357.446349][T28076] usb 3-1: Manufacturer: syz [ 1357.453275][T28076] usb 3-1: SerialNumber: syz [ 1357.465542][T28076] usb 3-1: config 0 descriptor?? [ 1357.675169][T28076] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1357.683111][T28076] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1357.698750][T28076] usb 3-1: USB disconnect, device number 56 [ 1358.546075][T32394] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1358.662714][ T6240] netlink: 'syz.3.34121': attribute type 28 has an invalid length. [ 1358.713270][T32394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1358.731869][T32394] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1358.746078][T32394] usb 5-1: can't read configurations, error -71 [ 1359.097930][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.105052][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.112598][ T6254] bridge_slave_0: entered allmulticast mode [ 1359.119357][ T6254] bridge_slave_0: entered promiscuous mode [ 1359.126626][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.133714][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.141145][ T6254] bridge_slave_1: entered allmulticast mode [ 1359.147803][ T6254] bridge_slave_1: entered promiscuous mode [ 1359.329812][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.336966][ T6254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.344400][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.351526][ T6254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.360016][ T6269] netlink: 'syz.4.34131': attribute type 28 has an invalid length. [ 1359.677926][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.696795][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.722822][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.730440][T10928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.749177][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.756648][T10928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.786889][T10937] tipc: Disabling bearer [ 1359.799862][T10937] tipc: Left network mode [ 1359.851256][ T6254] veth0_vlan: entered promiscuous mode [ 1359.878073][T10937] veth1_macvtap: left promiscuous mode [ 1359.885735][T10937] veth0_vlan: left promiscuous mode [ 1360.000605][ T6254] veth1_macvtap: entered promiscuous mode [ 1360.053481][ T6303] netlink: 'syz.0.34146': attribute type 28 has an invalid length. [ 1360.176222][T28076] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1360.356074][T28076] usb 3-1: Using ep0 maxpacket: 8 [ 1360.367567][T28076] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1360.376560][T28076] usb 3-1: config 0 has no interface number 0 [ 1360.386741][T28076] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1360.397702][T28076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.405938][T28076] usb 3-1: Product: syz [ 1360.421817][T28076] usb 3-1: Manufacturer: syz [ 1360.429402][T28076] usb 3-1: SerialNumber: syz [ 1360.434970][T28076] usb 3-1: config 0 descriptor?? [ 1360.547586][T29688] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1360.642328][T28076] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1360.649608][T28076] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1360.676518][T28076] usb 3-1: USB disconnect, device number 57 [ 1360.718982][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1360.727702][T29688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1360.735497][T29688] usb 1-1: can't read configurations, error -71 [ 1361.058537][ T6350] 9pnet_fd: Insufficient options for proto=fd [ 1361.181249][ T6364] netlink: 'syz.2.34175': attribute type 28 has an invalid length. [ 1361.255792][ T6375] netlink: 'syz.0.34182': attribute type 28 has an invalid length. [ 1361.333109][ T6390] 9pnet_fd: Insufficient options for proto=fd [ 1361.587160][T28076] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1361.780948][T28076] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1361.791083][T28076] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1361.798899][T28076] usb 4-1: can't read configurations, error -71 [ 1362.320139][ T6412] 9pnet_fd: Insufficient options for proto=fd [ 1362.372510][ T6416] netlink: 'syz.4.34202': attribute type 28 has an invalid length. [ 1364.436103][T10427] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1364.611143][T10427] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1364.627383][T10427] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1364.646117][T10427] usb 4-1: can't read configurations, error -71 [ 1365.050557][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.061277][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.069787][ T6578] bridge_slave_0: entered allmulticast mode [ 1365.077122][ T6578] bridge_slave_0: entered promiscuous mode [ 1365.088205][T10937] veth1_macvtap: left promiscuous mode [ 1365.106141][T10937] veth0_vlan: left promiscuous mode [ 1365.210814][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.221219][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.239997][ T6578] bridge_slave_1: entered allmulticast mode [ 1365.248435][ T6578] bridge_slave_1: entered promiscuous mode [ 1365.368882][ T6626] netlink: 'syz.0.34300': attribute type 28 has an invalid length. [ 1365.412053][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.420383][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.427908][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.435021][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.471882][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.497357][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.511817][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.519661][T10928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.533866][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.541181][T10928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.599098][ T6578] veth0_vlan: entered promiscuous mode [ 1365.625444][ T6578] veth1_macvtap: entered promiscuous mode [ 1365.670537][ T6652] netlink: 'syz.2.34310': attribute type 28 has an invalid length. [ 1365.837114][ T6671] netlink: 'syz.4.34319': attribute type 28 has an invalid length. [ 1366.180916][ T6715] netlink: 'syz.3.34330': attribute type 28 has an invalid length. [ 1366.508322][ T6742] netlink: 'syz.0.34353': attribute type 28 has an invalid length. [ 1366.796100][T32394] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1366.979550][T32394] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1366.996489][T32394] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1367.004418][T32394] usb 5-1: can't read configurations, error -71 [ 1367.028224][ T6762] 9pnet_fd: Insufficient options for proto=fd [ 1367.107323][T29688] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1367.227539][ T6784] 9pnet_fd: Insufficient options for proto=fd [ 1367.270232][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1367.278811][T29688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1367.286427][T29688] usb 1-1: can't read configurations, error -71 [ 1367.396323][T28076] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1367.506100][ T6799] netlink: 'syz.3.34380': attribute type 28 has an invalid length. [ 1367.547127][T28076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.574485][T28076] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1367.585429][T28076] usb 3-1: config 1 has no interface number 1 [ 1367.591919][T28076] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1367.606420][T28076] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1367.620549][T28076] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1367.630146][T28076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.638840][T28076] usb 3-1: Product: syz [ 1367.644679][T28076] usb 3-1: Manufacturer: syz [ 1367.649520][T28076] usb 3-1: SerialNumber: syz [ 1367.655280][ T6776] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1367.731291][ T6817] netlink: 'syz.4.34390': attribute type 28 has an invalid length. [ 1367.760203][ T6820] netlink: 'syz.4.34391': attribute type 28 has an invalid length. [ 1367.871327][T28076] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1367.873361][ T6840] netlink: 'syz.3.34402': attribute type 28 has an invalid length. [ 1367.879539][T28076] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1367.901843][T28076] usb 3-1: USB disconnect, device number 58 [ 1367.918458][ T1875] udevd[1875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1367.951721][ T6847] netlink: 'syz.4.34399': attribute type 28 has an invalid length. [ 1368.885302][ T6926] 9pnet_fd: Insufficient options for proto=fd [ 1369.936179][T32394] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1370.096088][T32394] usb 5-1: Using ep0 maxpacket: 8 [ 1370.111926][T32394] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1370.120800][T32394] usb 5-1: config 0 has no interface number 0 [ 1370.137720][T32394] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1370.156066][T32394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.166227][T32394] usb 5-1: Product: syz [ 1370.170623][T32394] usb 5-1: Manufacturer: syz [ 1370.185728][T32394] usb 5-1: SerialNumber: syz [ 1370.206486][T32394] usb 5-1: config 0 descriptor?? [ 1370.428727][T32394] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1370.456354][T32394] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1370.487911][T32394] usb 5-1: USB disconnect, device number 53 [ 1372.966110][T28076] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1373.136395][T28076] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1373.154699][T28076] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1373.164035][T28076] usb 4-1: can't read configurations, error -71 [ 1373.176068][T29688] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1373.336456][T29688] usb 5-1: Using ep0 maxpacket: 8 [ 1373.342813][T29688] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1373.351159][T29688] usb 5-1: config 0 has no interface number 0 [ 1373.361332][T29688] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1373.370569][T29688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.378956][T29688] usb 5-1: Product: syz [ 1373.383168][T29688] usb 5-1: Manufacturer: syz [ 1373.388130][T29688] usb 5-1: SerialNumber: syz [ 1373.393679][T29688] usb 5-1: config 0 descriptor?? [ 1373.603738][T29688] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1373.612250][T29688] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1373.624636][T29688] usb 5-1: USB disconnect, device number 54 [ 1374.556076][ T1126] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1374.579072][ T7144] validate_nla: 3 callbacks suppressed [ 1374.579097][ T7144] netlink: 'syz.3.34552': attribute type 28 has an invalid length. [ 1374.709622][ T1126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1374.726787][ T1126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1374.734568][ T1126] usb 1-1: can't read configurations, error -71 [ 1374.856117][T32394] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1375.006817][T32394] usb 4-1: Using ep0 maxpacket: 8 [ 1375.015386][T32394] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1375.026616][T32394] usb 4-1: config 0 has no interface number 0 [ 1375.043759][T32394] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1375.054880][T32394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.064591][T32394] usb 4-1: Product: syz [ 1375.071193][T32394] usb 4-1: Manufacturer: syz [ 1375.076555][T32394] usb 4-1: SerialNumber: syz [ 1375.083698][T32394] usb 4-1: config 0 descriptor?? [ 1375.292893][T32394] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1375.310207][T32394] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 1375.328316][T32394] usb 4-1: USB disconnect, device number 47 [ 1375.386193][T28076] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1375.551677][T28076] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1375.561256][T28076] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1375.569657][T28076] usb 5-1: can't read configurations, error -71 [ 1376.616098][T28076] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1376.790010][T28076] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1376.816655][T28076] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1376.825885][T28076] usb 5-1: can't read configurations, error -71 [ 1376.844443][T28076] usb usb5-port1: attempt power cycle [ 1377.216157][ T1126] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1377.390537][ T1126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1377.403253][ T1126] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1377.426105][ T1126] usb 3-1: can't read configurations, error -71 [ 1377.497602][T10928] tipc: Disabling bearer [ 1377.505127][T10928] tipc: Left network mode [ 1377.530583][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.537901][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.556125][ T7250] bridge_slave_0: entered allmulticast mode [ 1377.562627][ T7250] bridge_slave_0: entered promiscuous mode [ 1377.570903][T10928] veth1_macvtap: left promiscuous mode [ 1377.586127][T10928] veth0_vlan: left promiscuous mode [ 1377.700735][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.716074][ T7250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.731632][ T7250] bridge_slave_1: entered allmulticast mode [ 1377.749274][ T7250] bridge_slave_1: entered promiscuous mode [ 1377.851054][ T7250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.858727][ T7250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.866100][ T7250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.873177][ T7250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.924757][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.949567][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.973560][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.980782][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1378.001201][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.008451][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.085013][ T7250] veth0_vlan: entered promiscuous mode [ 1378.116276][ T7250] veth1_macvtap: entered promiscuous mode [ 1378.486161][ T1126] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1378.536322][T28076] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1378.596182][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1378.657617][ T1126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.669890][ T1126] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1378.679271][ T1126] usb 3-1: config 1 has no interface number 1 [ 1378.685501][ T1126] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1378.691273][T28076] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1378.699733][ T1126] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1378.719725][T28076] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1378.721295][ T1126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1378.727900][T28076] usb 1-1: can't read configurations, error -71 [ 1378.736839][ T1126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.751217][ T1126] usb 3-1: Product: syz [ 1378.755782][ T1126] usb 3-1: Manufacturer: syz [ 1378.760840][ T1126] usb 3-1: SerialNumber: syz [ 1378.769702][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1378.777162][ T7287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1378.780170][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1378.793142][ T9] usb 5-1: can't read configurations, error -71 [ 1378.993454][ T1126] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1379.004163][ T1126] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1379.031187][ T1126] usb 3-1: USB disconnect, device number 60 [ 1379.796390][T28076] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1379.971370][T28076] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1379.986686][T28076] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1379.994818][T28076] usb 1-1: can't read configurations, error -71 [ 1380.014980][T28076] usb usb1-port1: attempt power cycle [ 1380.506528][ T7353] netlink: 'syz.0.34651': attribute type 28 has an invalid length. [ 1380.996119][ T1126] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1381.162787][ T1126] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1381.176852][ T1126] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1381.196757][ T1126] usb 4-1: can't read configurations, error -71 [ 1381.786194][T28076] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1381.961333][T28076] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1381.976736][T28076] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1381.994733][T28076] usb 1-1: can't read configurations, error -71 [ 1383.296054][ T1126] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1383.457097][ T1126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.486082][ T1126] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1383.515796][ T1126] usb 1-1: config 1 has no interface number 1 [ 1383.537210][ T1126] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1383.566080][ T1126] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1383.587730][ T1126] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1383.606084][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.616251][ T1126] usb 1-1: Product: syz [ 1383.620584][ T1126] usb 1-1: Manufacturer: syz [ 1383.635663][ T1126] usb 1-1: SerialNumber: syz [ 1383.657060][ T7461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1383.868075][ T1126] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1383.880495][ T1126] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 1383.902514][ T1126] usb 1-1: USB disconnect, device number 51 [ 1384.636084][T10427] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1384.806063][T10427] usb 1-1: Using ep0 maxpacket: 8 [ 1384.817159][T10427] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1384.836057][T10427] usb 1-1: config 0 has no interface number 0 [ 1384.854767][T10427] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1384.864305][T10427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.884348][T10427] usb 1-1: Product: syz [ 1384.889101][T10427] usb 1-1: Manufacturer: syz [ 1384.896216][T10427] usb 1-1: SerialNumber: syz [ 1384.915154][T10427] usb 1-1: config 0 descriptor?? [ 1384.967449][ T7530] netlink: 'syz.4.34738': attribute type 28 has an invalid length. [ 1385.126251][T10427] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1385.133707][T10427] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1385.181186][T10427] usb 1-1: USB disconnect, device number 52 [ 1385.557468][ T7549] netlink: 'syz.3.34747': attribute type 28 has an invalid length. [ 1387.316062][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1387.490561][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1387.500956][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1387.519083][ T9] usb 5-1: can't read configurations, error -71 [ 1388.506178][T29688] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1388.702938][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1388.726682][T29688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1388.756443][T29688] usb 1-1: can't read configurations, error -71 [ 1389.556104][ T1126] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1389.721922][ T1126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1389.742045][ T1126] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1389.756149][ T1126] usb 3-1: can't read configurations, error -71 [ 1389.889769][ T7681] netlink: 'syz.3.34813': attribute type 28 has an invalid length. [ 1390.116140][ T7685] netlink: 'syz.4.34815': attribute type 28 has an invalid length. [ 1390.582508][ T7713] 9pnet_fd: Insufficient options for proto=fd [ 1391.176177][ T7733] 9pnet_fd: Insufficient options for proto=fd [ 1391.399236][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 1391.511291][ T7755] netlink: 'syz.0.34841': attribute type 28 has an invalid length. [ 1391.643800][ T7761] FAULT_INJECTION: forcing a failure. [ 1391.643800][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1391.675657][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.3.34854 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1391.675694][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1391.675709][ T7761] Call Trace: [ 1391.675718][ T7761] [ 1391.675728][ T7761] __dump_stack+0x21/0x30 [ 1391.675765][ T7761] dump_stack_lvl+0x10c/0x190 [ 1391.675796][ T7761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1391.675828][ T7761] ? kstrtoull+0x13b/0x1e0 [ 1391.675851][ T7761] dump_stack+0x19/0x20 [ 1391.675880][ T7761] should_fail_ex+0x3d9/0x530 [ 1391.675904][ T7761] should_fail+0xf/0x20 [ 1391.675926][ T7761] should_fail_usercopy+0x1e/0x30 [ 1391.675951][ T7761] _copy_from_user+0x22/0xb0 [ 1391.675980][ T7761] ___sys_sendmsg+0x159/0x2a0 [ 1391.676019][ T7761] ? __sys_sendmsg+0x280/0x280 [ 1391.676052][ T7761] ? proc_fail_nth_write+0x17e/0x210 [ 1391.676080][ T7761] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1391.676115][ T7761] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1391.676146][ T7761] ? fput+0x1a5/0x240 [ 1391.676172][ T7761] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1391.676205][ T7761] ? ksys_write+0x1ef/0x250 [ 1391.676227][ T7761] ? __kasan_check_read+0x15/0x20 [ 1391.676263][ T7761] x64_sys_call+0x2a4c/0x2ee0 [ 1391.676297][ T7761] do_syscall_64+0x58/0xf0 [ 1391.676325][ T7761] ? clear_bhb_loop+0x50/0xa0 [ 1391.676350][ T7761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1391.676374][ T7761] RIP: 0033:0x7f01f1b8f6c9 [ 1391.676392][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.676411][ T7761] RSP: 002b:00007f01f05f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.676436][ T7761] RAX: ffffffffffffffda RBX: 00007f01f1de5fa0 RCX: 00007f01f1b8f6c9 [ 1391.676453][ T7761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1391.676468][ T7761] RBP: 00007f01f05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.676483][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1391.676498][ T7761] R13: 00007f01f1de6038 R14: 00007f01f1de5fa0 R15: 00007fff1b7779f8 [ 1391.676518][ T7761] [ 1391.998004][ T7770] 9pnet_fd: Insufficient options for proto=fd [ 1392.527255][ T7791] 9pnet_fd: Insufficient options for proto=fd [ 1394.006093][ T1126] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1394.166047][ T1126] usb 5-1: Using ep0 maxpacket: 8 [ 1394.177690][ T1126] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1394.186657][ T1126] usb 5-1: config 0 has no interface number 0 [ 1394.197408][ T1126] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1394.216067][ T1126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.234748][ T1126] usb 5-1: Product: syz [ 1394.239447][ T1126] usb 5-1: Manufacturer: syz [ 1394.244188][ T1126] usb 5-1: SerialNumber: syz [ 1394.260354][ T1126] usb 5-1: config 0 descriptor?? [ 1394.467461][ T1126] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1394.486071][ T1126] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1394.508940][ T1126] usb 5-1: USB disconnect, device number 62 [ 1395.226228][ T7845] netlink: 'syz.4.34896': attribute type 28 has an invalid length. [ 1395.916066][T29688] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1396.079745][T29688] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1396.088129][T29688] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1396.116183][T29688] usb 5-1: can't read configurations, error -71 [ 1396.609102][ T7879] netlink: 'syz.4.34914': attribute type 28 has an invalid length. [ 1396.756837][ T7885] netlink: 'syz.4.34917': attribute type 28 has an invalid length. [ 1397.073542][ T7919] FAULT_INJECTION: forcing a failure. [ 1397.073542][ T7919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.086724][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.2.34932 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1397.086763][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1397.086779][ T7919] Call Trace: [ 1397.086788][ T7919] [ 1397.086797][ T7919] __dump_stack+0x21/0x30 [ 1397.086834][ T7919] dump_stack_lvl+0x10c/0x190 [ 1397.086865][ T7919] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1397.086920][ T7919] ? kstrtoull+0x13b/0x1e0 [ 1397.086942][ T7919] dump_stack+0x19/0x20 [ 1397.086971][ T7919] should_fail_ex+0x3d9/0x530 [ 1397.086996][ T7919] should_fail+0xf/0x20 [ 1397.087017][ T7919] should_fail_usercopy+0x1e/0x30 [ 1397.087042][ T7919] _copy_from_user+0x22/0xb0 [ 1397.087071][ T7919] ___sys_sendmsg+0x159/0x2a0 [ 1397.087107][ T7919] ? __sys_sendmsg+0x280/0x280 [ 1397.087141][ T7919] ? proc_fail_nth_write+0x17e/0x210 [ 1397.087173][ T7919] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1397.087212][ T7919] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1397.087253][ T7919] ? fput+0x1a5/0x240 [ 1397.087281][ T7919] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1397.087315][ T7919] ? ksys_write+0x1ef/0x250 [ 1397.087345][ T7919] ? __kasan_check_read+0x15/0x20 [ 1397.087382][ T7919] x64_sys_call+0x2a4c/0x2ee0 [ 1397.087416][ T7919] do_syscall_64+0x58/0xf0 [ 1397.087446][ T7919] ? clear_bhb_loop+0x50/0xa0 [ 1397.087471][ T7919] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1397.087496][ T7919] RIP: 0033:0x7fd717d8f6c9 [ 1397.087517][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.087537][ T7919] RSP: 002b:00007fd718c66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.087562][ T7919] RAX: ffffffffffffffda RBX: 00007fd717fe5fa0 RCX: 00007fd717d8f6c9 [ 1397.087581][ T7919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1397.087596][ T7919] RBP: 00007fd718c66090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.087612][ T7919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.087627][ T7919] R13: 00007fd717fe6038 R14: 00007fd717fe5fa0 R15: 00007ffe42fef198 [ 1397.087648][ T7919] [ 1397.366798][T29688] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1397.425951][ T7936] 9pnet_fd: Insufficient options for proto=fd [ 1397.436091][T28076] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1397.526094][T29688] usb 5-1: Using ep0 maxpacket: 8 [ 1397.537060][T29688] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1397.545219][T29688] usb 5-1: config 0 has no interface number 0 [ 1397.567477][T29688] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1397.576878][T29688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.584914][T29688] usb 5-1: Product: syz [ 1397.589315][T29688] usb 5-1: Manufacturer: syz [ 1397.593952][T29688] usb 5-1: SerialNumber: syz [ 1397.602706][T28076] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1397.620297][T28076] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1397.628667][T29688] usb 5-1: config 0 descriptor?? [ 1397.636464][T28076] usb 4-1: can't read configurations, error -71 [ 1397.835282][T29688] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1397.842951][T29688] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1397.855802][T29688] usb 5-1: USB disconnect, device number 64 [ 1398.516058][ T7993] 9pnet_fd: Insufficient options for proto=fd [ 1398.876085][T28076] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1399.036085][T28076] usb 5-1: Using ep0 maxpacket: 8 [ 1399.047180][T28076] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1399.055485][T28076] usb 5-1: config 0 has no interface number 0 [ 1399.081798][T28076] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1399.091409][T28076] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.111587][T28076] usb 5-1: Product: syz [ 1399.116142][T28076] usb 5-1: Manufacturer: syz [ 1399.120799][T28076] usb 5-1: SerialNumber: syz [ 1399.136763][T28076] usb 5-1: config 0 descriptor?? [ 1399.348090][T28076] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1399.358622][T28076] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 1399.378121][T28076] usb 5-1: USB disconnect, device number 65 [ 1399.577272][ T8028] netlink: 'syz.2.34983': attribute type 28 has an invalid length. [ 1399.692484][ T8054] netlink: 'syz.3.34999': attribute type 28 has an invalid length. [ 1399.887673][ T8077] netlink: 'syz.4.35010': attribute type 28 has an invalid length. [ 1399.928151][ T8082] netlink: 'syz.2.35012': attribute type 28 has an invalid length. [ 1400.076064][T28076] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1400.240600][T28076] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1400.256680][T28076] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1400.264431][T28076] usb 4-1: can't read configurations, error -71 [ 1400.386094][ T1126] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1400.536084][ T1126] usb 3-1: Using ep0 maxpacket: 8 [ 1400.543970][ T1126] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1400.552741][ T1126] usb 3-1: config 0 has no interface number 0 [ 1400.560524][ T1126] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1400.569937][ T1126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.579097][ T1126] usb 3-1: Product: syz [ 1400.583417][ T1126] usb 3-1: Manufacturer: syz [ 1400.588315][ T1126] usb 3-1: SerialNumber: syz [ 1400.593800][ T1126] usb 3-1: config 0 descriptor?? [ 1400.606098][T10522] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1400.767462][T10522] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1400.776113][T10522] usb 1-1: config 2 has an invalid interface number: 34 but max is 2 [ 1400.789854][T10522] usb 1-1: config 2 has an invalid interface number: 6 but max is 2 [ 1400.806947][T10522] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1400.817378][ T1126] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1400.823881][ T1126] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1400.833060][T10522] usb 1-1: config 2 has no interface number 0 [ 1400.839279][T10522] usb 1-1: config 2 has no interface number 2 [ 1400.846132][T10522] usb 1-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1400.858365][ T1126] usb 3-1: USB disconnect, device number 63 [ 1400.870167][T10522] usb 1-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1400.888931][T10522] usb 1-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1400.903217][T10522] usb 1-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1400.914596][T10522] usb 1-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1400.928365][T10522] usb 1-1: config 2 interface 1 has no altsetting 0 [ 1400.935374][T10522] usb 1-1: config 2 interface 34 has no altsetting 0 [ 1400.944100][T10522] usb 1-1: config 2 interface 6 has no altsetting 0 [ 1400.952406][T10522] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1400.961769][T10522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.970210][T10522] usb 1-1: Product: syz [ 1400.980197][T10522] usb 1-1: Manufacturer: syz [ 1400.996074][T10522] usb 1-1: SerialNumber: syz [ 1401.206750][T10522] usb 1-1: selecting invalid altsetting 0 [ 1401.223594][T10522] usb 1-1: USB disconnect, device number 55 [ 1401.856770][ T8198] netlink: 'syz.4.35070': attribute type 28 has an invalid length. [ 1402.046056][ T1126] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1402.116115][T28076] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1402.129064][ T8227] netlink: 'syz.4.35082': attribute type 28 has an invalid length. [ 1402.199570][ T1126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1402.210105][ T1126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1402.221179][ T1126] usb 1-1: can't read configurations, error -71 [ 1402.267444][T28076] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1402.281702][T28076] usb 3-1: config 2 has an invalid interface number: 34 but max is 2 [ 1402.294623][T28076] usb 3-1: config 2 has an invalid interface number: 6 but max is 2 [ 1402.303248][T28076] usb 3-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1402.316396][T28076] usb 3-1: config 2 has no interface number 0 [ 1402.323429][T28076] usb 3-1: config 2 has no interface number 2 [ 1402.329982][T28076] usb 3-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1402.341740][T28076] usb 3-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1402.353521][T28076] usb 3-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1402.367209][T28076] usb 3-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1402.378552][T28076] usb 3-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1402.404764][T28076] usb 3-1: config 2 interface 1 has no altsetting 0 [ 1402.413792][T28076] usb 3-1: config 2 interface 34 has no altsetting 0 [ 1402.421425][T28076] usb 3-1: config 2 interface 6 has no altsetting 0 [ 1402.430695][T28076] usb 3-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1402.446051][T28076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.458911][T28076] usb 3-1: Product: syz [ 1402.463705][T28076] usb 3-1: Manufacturer: syz [ 1402.479053][T28076] usb 3-1: SerialNumber: syz [ 1402.701088][T28076] usb 3-1: selecting invalid altsetting 0 [ 1402.722319][T28076] usb 3-1: USB disconnect, device number 64 [ 1402.872506][ T8298] netlink: 'syz.3.35121': attribute type 28 has an invalid length. [ 1403.057347][ T8318] netlink: 'syz.0.35130': attribute type 28 has an invalid length. [ 1403.093566][T28076] hid (null): unknown global tag 0xe [ 1403.101178][T28076] hid (null): invalid report_count 16683 [ 1403.112605][T28076] hid-generic 0005:0008:0004.0004: unexpected long global item [ 1403.128692][T28076] hid-generic 0005:0008:0004.0004: probe with driver hid-generic failed with error -22 [ 1403.154601][ T36] audit: type=1400 audit(1763078163.660:439): avc: denied { unmount } for pid=6578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1403.406769][ T8336] netlink: 'syz.0.35141': attribute type 28 has an invalid length. [ 1403.416833][T10928] bridge_slave_1: left allmulticast mode [ 1403.422541][T10928] bridge_slave_1: left promiscuous mode [ 1403.436853][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.444830][T10928] bridge_slave_0: left allmulticast mode [ 1403.458223][T10928] bridge_slave_0: left promiscuous mode [ 1403.464503][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.472281][T28076] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1403.601978][T10928] veth1_macvtap: left promiscuous mode [ 1403.607624][T10928] veth0_vlan: left promiscuous mode [ 1403.641713][T28076] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1403.656809][T28076] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1403.665240][T28076] usb 3-1: can't read configurations, error -71 [ 1403.710103][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.717664][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.725059][ T8337] bridge_slave_0: entered allmulticast mode [ 1403.732684][ T8337] bridge_slave_0: entered promiscuous mode [ 1403.739740][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.747709][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.755177][ T8337] bridge_slave_1: entered allmulticast mode [ 1403.762168][ T8337] bridge_slave_1: entered promiscuous mode [ 1403.768231][T29688] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1403.850192][ T8337] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.857355][ T8337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.866046][ T8337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.873131][ T8337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.901507][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.909534][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.922117][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.929729][T10937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.947617][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1403.956594][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.956607][T29688] usb 1-1: config 2 has an invalid interface number: 34 but max is 2 [ 1403.964383][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.986046][T29688] usb 1-1: config 2 has an invalid interface number: 6 but max is 2 [ 1404.004437][T29688] usb 1-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1404.008169][ T8337] veth0_vlan: entered promiscuous mode [ 1404.025577][T29688] usb 1-1: config 2 has no interface number 0 [ 1404.031467][ T8337] veth1_macvtap: entered promiscuous mode [ 1404.036059][T29688] usb 1-1: config 2 has no interface number 2 [ 1404.055419][T29688] usb 1-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1404.068560][T29688] usb 1-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 1404.080493][T29688] usb 1-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1404.093912][T29688] usb 1-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 1404.105320][T29688] usb 1-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1404.118885][T29688] usb 1-1: config 2 interface 1 has no altsetting 0 [ 1404.133306][T29688] usb 1-1: config 2 interface 34 has no altsetting 0 [ 1404.140470][T29688] usb 1-1: config 2 interface 6 has no altsetting 0 [ 1404.154072][T29688] usb 1-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 1404.166656][T29688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.192739][T29688] usb 1-1: Product: syz [ 1404.197343][T29688] usb 1-1: Manufacturer: syz [ 1404.202138][T29688] usb 1-1: SerialNumber: syz [ 1404.299372][ T8364] netlink: 'syz.5.35150': attribute type 28 has an invalid length. [ 1404.327063][ T8366] netlink: 'syz.5.35151': attribute type 28 has an invalid length. [ 1404.427012][T29688] usb 1-1: selecting invalid altsetting 0 [ 1404.455238][T29688] usb 1-1: USB disconnect, device number 58 [ 1404.739940][T28076] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1404.897668][T28076] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.925477][T28076] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1404.941987][T28076] usb 3-1: config 1 has no interface number 1 [ 1404.953223][T28076] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1404.975074][T28076] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1404.990697][T28076] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1405.000328][T28076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.017492][ T8406] netlink: 'syz.5.35171': attribute type 28 has an invalid length. [ 1405.026131][T28076] usb 3-1: Product: syz [ 1405.030978][T28076] usb 3-1: Manufacturer: syz [ 1405.047539][T28076] usb 3-1: SerialNumber: syz [ 1405.053740][ T8362] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1405.256660][ T8428] netlink: 'syz.5.35182': attribute type 28 has an invalid length. [ 1405.273724][T28076] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1405.307692][T28076] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 1405.329125][T28076] usb 3-1: USB disconnect, device number 66 [ 1405.346777][ T1875] udevd[1875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1405.489541][ T8443] netlink: 'syz.3.35188': attribute type 28 has an invalid length. [ 1405.546500][ T1126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1405.710157][ T1126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1405.720682][ T1126] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1405.729587][ T1126] usb 6-1: can't read configurations, error -71 [ 1407.106103][T28076] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1407.259891][T28076] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1407.277584][T28076] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1407.295840][T28076] usb 3-1: can't read configurations, error -71 [ 1407.600509][ T8529] netlink: 'syz.5.35231': attribute type 28 has an invalid length. [ 1407.827682][ T8551] netlink: 'syz.2.35242': attribute type 28 has an invalid length. [ 1407.928994][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35248'. [ 1408.196073][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1408.218150][ T8575] netlink: 'syz.0.35254': attribute type 28 has an invalid length. [ 1408.359904][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1408.377443][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1408.396159][ T9] usb 6-1: can't read configurations, error -71 [ 1408.526078][ T1126] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1408.686091][ T1126] usb 1-1: Using ep0 maxpacket: 8 [ 1408.692499][ T1126] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1408.701873][ T1126] usb 1-1: config 0 has no interface number 0 [ 1408.710788][ T1126] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1408.720499][ T1126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.731429][ T1126] usb 1-1: Product: syz [ 1408.736799][ T1126] usb 1-1: Manufacturer: syz [ 1408.741976][ T1126] usb 1-1: SerialNumber: syz [ 1408.749667][ T1126] usb 1-1: config 0 descriptor?? [ 1408.836091][T10522] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1408.960649][ T1126] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1408.971352][ T1126] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1408.991134][ T1126] usb 1-1: USB disconnect, device number 59 [ 1409.006738][T10522] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1409.020373][T10522] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1409.035298][T10522] usb 3-1: can't read configurations, error -71 [ 1409.246189][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1409.386092][ T9] usb 6-1: device descriptor read/64, error -71 [ 1409.636135][ T9] usb 6-1: device descriptor read/64, error -71 [ 1409.746247][ T9] usb usb6-port1: attempt power cycle [ 1410.086164][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1410.127254][ T9] usb 6-1: device descriptor read/8, error -71 [ 1410.176085][T10522] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1410.257218][ T9] usb 6-1: device descriptor read/8, error -71 [ 1410.326329][T10522] usb 3-1: Using ep0 maxpacket: 8 [ 1410.333225][T10522] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1410.356352][T10522] usb 3-1: config 0 has no interface number 0 [ 1410.367239][T10522] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1410.386062][T10522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.404778][T10522] usb 3-1: Product: syz [ 1410.413180][T10522] usb 3-1: Manufacturer: syz [ 1410.426089][T10522] usb 3-1: SerialNumber: syz [ 1410.436950][T10522] usb 3-1: config 0 descriptor?? [ 1410.506085][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1410.547086][ T9] usb 6-1: device descriptor read/8, error -71 [ 1410.647570][T10522] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1410.654919][T10522] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1410.677085][ T9] usb 6-1: device descriptor read/8, error -71 [ 1410.686297][T10522] usb 3-1: USB disconnect, device number 71 [ 1410.786737][ T9] usb usb6-port1: unable to enumerate USB device [ 1411.256069][T10522] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1411.419962][T10522] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1411.431266][T10522] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1411.439059][T10522] usb 1-1: can't read configurations, error -71 [ 1411.616130][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1411.766129][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1411.772677][ T9] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1411.781075][ T9] usb 3-1: config 0 has no interface number 0 [ 1411.789286][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1411.798716][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.807028][ T9] usb 3-1: Product: syz [ 1411.811393][ T9] usb 3-1: Manufacturer: syz [ 1411.816234][ T9] usb 3-1: SerialNumber: syz [ 1411.822423][ T9] usb 3-1: config 0 descriptor?? [ 1412.031746][ T9] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1412.051422][ T9] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1412.079133][ T9] usb 3-1: USB disconnect, device number 72 [ 1412.666056][T10522] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1412.816048][T10522] usb 4-1: device descriptor read/64, error -71 [ 1413.066043][T10522] usb 4-1: device descriptor read/64, error -71 [ 1413.311259][T10522] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1413.456059][T10522] usb 4-1: device descriptor read/64, error -71 [ 1413.713104][T10522] usb 4-1: device descriptor read/64, error -71 [ 1413.778080][ T8789] netlink: 'syz.2.35359': attribute type 28 has an invalid length. [ 1413.829931][T10522] usb usb4-port1: attempt power cycle [ 1414.166073][T10522] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1414.197073][T10522] usb 4-1: device descriptor read/8, error -71 [ 1414.337148][T10522] usb 4-1: device descriptor read/8, error -71 [ 1414.576250][T10522] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1414.597699][T10522] usb 4-1: device descriptor read/8, error -71 [ 1414.727063][T10522] usb 4-1: device descriptor read/8, error -71 [ 1414.776098][T29688] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1414.846165][T10522] usb usb4-port1: unable to enumerate USB device [ 1414.941146][T29688] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1414.956661][T29688] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1414.974543][T29688] usb 1-1: can't read configurations, error -71 [ 1415.846058][T28076] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1415.986057][T28076] usb 4-1: device descriptor read/64, error -71 [ 1416.226057][T28076] usb 4-1: device descriptor read/64, error -71 [ 1416.496082][T28076] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1416.617095][ T9040] netlink: 'syz.2.35478': attribute type 28 has an invalid length. [ 1416.626368][T28076] usb 4-1: device descriptor read/64, error -71 [ 1416.656059][ T1126] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1416.828950][ T1126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1416.845482][ T1126] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1416.862819][ T1126] usb 6-1: can't read configurations, error -71 [ 1416.876056][T28076] usb 4-1: device descriptor read/64, error -71 [ 1417.006194][T28076] usb usb4-port1: attempt power cycle [ 1417.346064][T28076] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1417.398323][T28076] usb 4-1: device descriptor read/8, error -71 [ 1417.527525][T28076] usb 4-1: device descriptor read/8, error -71 [ 1417.779164][T28076] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1417.828039][T28076] usb 4-1: device descriptor read/8, error -71 [ 1417.957078][T28076] usb 4-1: device descriptor read/8, error -71 [ 1418.066186][T28076] usb usb4-port1: unable to enumerate USB device [ 1418.068841][ T9153] netlink: 'syz.0.35533': attribute type 28 has an invalid length. [ 1418.156121][T29688] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1418.308702][T29688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1418.327302][T29688] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1418.334953][T29688] usb 3-1: can't read configurations, error -71 [ 1418.993706][ T9196] netlink: 'syz.0.35547': attribute type 28 has an invalid length. [ 1420.286099][T10522] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1420.454821][T10522] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1420.476748][T10522] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1420.485099][T10522] usb 1-1: can't read configurations, error -71 [ 1421.726167][T10522] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1421.910338][T10522] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1421.936331][T10522] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1421.944127][T10522] usb 6-1: can't read configurations, error -71 [ 1422.519611][ T9370] 9pnet_fd: Insufficient options for proto=fd [ 1422.787711][ T9391] 9pnet_fd: Insufficient options for proto=fd [ 1423.686346][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1423.818732][ T9472] 9pnet_fd: Insufficient options for proto=fd [ 1423.859873][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1423.878693][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1423.896071][ T10] usb 6-1: can't read configurations, error -71 [ 1424.227564][ T9491] 9pnet_fd: Insufficient options for proto=fd [ 1426.056080][T29688] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1426.220509][T29688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1426.256195][T29688] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1426.263839][T29688] usb 6-1: can't read configurations, error -71 [ 1427.236124][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1427.400748][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1427.412210][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1427.431580][ T10] usb 3-1: can't read configurations, error -71 [ 1427.996063][T29688] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1428.169282][T29688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1428.191040][T29688] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1428.208263][T29688] usb 6-1: can't read configurations, error -71 [ 1428.546079][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1428.741346][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1428.760600][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1428.776691][ T10] usb 3-1: can't read configurations, error -71 [ 1430.356083][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1430.521572][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1430.531769][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1430.547421][ T10] usb 1-1: can't read configurations, error -71 [ 1430.616055][ T1126] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1430.777359][ T1126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.796079][ T1126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1430.815525][ T1126] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1430.837518][ T1126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1430.847302][ T1126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.855683][ T1126] usb 3-1: Product: syz [ 1430.876044][ T1126] usb 3-1: Manufacturer: syz [ 1430.886046][ T1126] usb 3-1: SerialNumber: syz [ 1430.902470][ T9811] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1431.115055][ T1126] usb 3-1: 0:2 : does not exist [ 1431.129544][ T1126] usb 3-1: USB disconnect, device number 79 [ 1431.268557][T29688] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1431.429478][T29688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1431.447542][T29688] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1431.460872][T29688] usb 4-1: can't read configurations, error -71 [ 1432.831022][T29688] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1432.999497][T29688] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1433.012439][T29688] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1433.023853][T29688] usb 6-1: can't read configurations, error -71 [ 1443.558211][ T6281] bridge_slave_1: left allmulticast mode [ 1443.563944][ T6281] bridge_slave_1: left promiscuous mode [ 1443.570697][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.600693][ T6281] bridge_slave_0: left allmulticast mode [ 1443.610372][ T6281] bridge_slave_0: left promiscuous mode [ 1443.620799][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.790852][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.806071][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.823974][T10769] bridge_slave_0: entered allmulticast mode [ 1443.836748][T10769] bridge_slave_0: entered promiscuous mode [ 1443.847780][ T6281] veth1_macvtap: left promiscuous mode [ 1443.863539][ T6281] veth0_vlan: left promiscuous mode [ 1443.896511][ T1126] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1443.987131][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.994754][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.004302][T10769] bridge_slave_1: entered allmulticast mode [ 1444.023613][T10769] bridge_slave_1: entered promiscuous mode [ 1444.080020][ T1126] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1444.097869][ T1126] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1444.105860][ T1126] usb 1-1: can't read configurations, error -71 [ 1444.214246][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.221422][T10769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.228885][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.235948][T10769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.278151][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.288802][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.316531][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.324823][T10937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.337172][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.344377][T10928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.393847][T10769] veth0_vlan: entered promiscuous mode [ 1444.409419][T10769] veth1_macvtap: entered promiscuous mode [ 1445.657134][T29688] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1445.810747][T29688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1445.827044][T29688] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1445.841291][T29688] usb 4-1: can't read configurations, error -71 [ 1446.896448][T29688] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1447.072006][T29688] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1447.090835][T29688] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1447.106074][T29688] usb 4-1: can't read configurations, error -71 [ 1447.123393][T29688] usb usb4-port1: attempt power cycle [ 1453.426043][ T1126] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1453.597434][ T1126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1453.606566][ T1126] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1453.624547][ T1126] usb 6-1: can't read configurations, error -71 [ 1454.876042][T30322] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1455.030208][T30322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1455.046751][T30322] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1455.066078][T30322] usb 6-1: can't read configurations, error -71 [ 1458.876625][ T8088] bridge_slave_1: left allmulticast mode [ 1458.882565][ T8088] bridge_slave_1: left promiscuous mode [ 1458.906124][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.926574][ T8088] bridge_slave_0: left allmulticast mode [ 1458.932295][ T8088] bridge_slave_0: left promiscuous mode [ 1458.966142][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.100505][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.118027][T11743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.125283][T11743] bridge_slave_0: entered allmulticast mode [ 1459.156533][T11743] bridge_slave_0: entered promiscuous mode [ 1459.176865][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.202743][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.216091][T11743] bridge_slave_1: entered allmulticast mode [ 1459.232936][T11743] bridge_slave_1: entered promiscuous mode [ 1459.247251][ T8088] veth1_macvtap: left promiscuous mode [ 1459.256458][ T8088] veth0_vlan: left promiscuous mode [ 1459.607160][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.614357][T11743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.621771][T11743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.629401][T11743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.718318][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.726633][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.758406][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.765502][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.787602][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.794755][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.829192][T11743] veth0_vlan: entered promiscuous mode [ 1459.843935][T11743] veth1_macvtap: entered promiscuous mode [ 1460.056263][T30322] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1460.219748][T30322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1460.229911][T30322] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1460.246094][T30322] usb 3-1: can't read configurations, error -71 [ 1460.469534][ T8088] bridge_slave_1: left allmulticast mode [ 1460.475254][ T8088] bridge_slave_1: left promiscuous mode [ 1460.483173][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.492044][ T8088] bridge_slave_0: left allmulticast mode [ 1460.500998][ T8088] bridge_slave_0: left promiscuous mode [ 1460.510697][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.667461][ T8088] veth1_macvtap: left promiscuous mode [ 1460.673532][ T8088] veth0_vlan: left promiscuous mode [ 1460.807270][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.822813][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.836069][T11826] bridge_slave_0: entered allmulticast mode [ 1460.843107][T11826] bridge_slave_0: entered promiscuous mode [ 1460.855590][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.863927][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.874036][T11826] bridge_slave_1: entered allmulticast mode [ 1460.899073][T11826] bridge_slave_1: entered promiscuous mode [ 1461.109492][T10937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.117648][T10937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.135155][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.143451][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.196391][T11826] veth0_vlan: entered promiscuous mode [ 1461.230136][T11826] veth1_macvtap: entered promiscuous mode [ 1464.466061][T30322] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1464.641751][T30322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1464.664613][T30322] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1464.674272][T30322] usb 3-1: can't read configurations, error -71 [ 1468.266065][T30322] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1468.430527][T30322] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1468.459223][T30322] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1468.467074][T30322] usb 3-1: can't read configurations, error -71 [ 1469.320111][T12420] 9pnet_fd: Insufficient options for proto=fd [ 1470.176049][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1470.341442][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1470.356647][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1470.364565][ T9] usb 1-1: can't read configurations, error -71 [ 1475.306084][T30322] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1475.476109][T30322] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1475.495204][T30322] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1475.513693][T30322] usb 4-1: can't read configurations, error -71 [ 1484.779279][T13592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.793905][T13592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.806528][T13592] bridge_slave_0: entered allmulticast mode [ 1484.813787][T13592] bridge_slave_0: entered promiscuous mode [ 1484.821157][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.828485][T13592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.835702][T13592] bridge_slave_1: entered allmulticast mode [ 1484.842449][T13592] bridge_slave_1: entered promiscuous mode [ 1484.998908][T13592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.006034][T13592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.013474][T13592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.020584][T13592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.220412][T10937] bridge_slave_1: left allmulticast mode [ 1485.226598][T10937] bridge_slave_1: left promiscuous mode [ 1485.232264][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.245874][T10937] bridge_slave_0: left allmulticast mode [ 1485.254246][T10937] bridge_slave_0: left promiscuous mode [ 1485.266098][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.336347][ T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1485.370860][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.381734][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.395356][T10937] veth1_macvtap: left promiscuous mode [ 1485.403423][T10937] veth0_vlan: left promiscuous mode [ 1485.475535][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.482674][T10928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.497241][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.504429][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.527009][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1485.546298][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1485.554113][ T10] usb 1-1: can't read configurations, error -71 [ 1485.557924][T13592] veth0_vlan: entered promiscuous mode [ 1485.581468][T13592] veth1_macvtap: entered promiscuous mode [ 1489.818973][T13880] can0: slcan on ttyS3. [ 1489.908691][T13879] can0 (unregistered): slcan off ttyS3. [ 1490.155323][ T36] audit: type=1400 audit(1763078250.660:440): avc: denied { connect } for pid=13940 comm="syz.3.37652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.884216][T14072] overlayfs: overlapping lowerdir path [ 1492.274090][ T36] audit: type=1400 audit(1763078252.780:441): avc: denied { shutdown } for pid=14139 comm="syz.0.37732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1492.348545][T14148] FAULT_INJECTION: forcing a failure. [ 1492.348545][T14148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1492.367044][T14148] CPU: 1 UID: 0 PID: 14148 Comm: syz.5.37735 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1492.367084][T14148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1492.367107][T14148] Call Trace: [ 1492.367115][T14148] [ 1492.367125][T14148] __dump_stack+0x21/0x30 [ 1492.367162][T14148] dump_stack_lvl+0x10c/0x190 [ 1492.367193][T14148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1492.367224][T14148] ? selinux_file_open+0x457/0x610 [ 1492.367255][T14148] dump_stack+0x19/0x20 [ 1492.367284][T14148] should_fail_ex+0x3d9/0x530 [ 1492.367308][T14148] should_fail_alloc_page+0xeb/0x110 [ 1492.367336][T14148] __alloc_pages_noprof+0x19b/0x7b0 [ 1492.367369][T14148] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1492.367401][T14148] ? is_bpf_text_address+0x17b/0x1a0 [ 1492.367429][T14148] ? __kernel_text_address+0x11/0x40 [ 1492.367458][T14148] ? unwind_get_return_address+0x51/0x90 [ 1492.367486][T14148] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1492.367520][T14148] ? arch_stack_walk+0x10b/0x170 [ 1492.367541][T14148] __folio_alloc_noprof+0x14/0x80 [ 1492.367573][T14148] folio_prealloc+0x46/0x240 [ 1492.367600][T14148] do_pte_missing+0x164c/0x4240 [ 1492.367629][T14148] ? _parse_integer+0x2e/0x40 [ 1492.367666][T14148] ? pte_marker_clear+0x1b0/0x1b0 [ 1492.367693][T14148] ? kstrtouint_from_user+0xfb/0x150 [ 1492.367714][T14148] ? __x64_sys_openat+0x13a/0x170 [ 1492.367743][T14148] ? x64_sys_call+0xe69/0x2ee0 [ 1492.367777][T14148] ? selinux_file_permission+0x309/0xb30 [ 1492.367803][T14148] ? __pte_offset_map+0x1b0/0x230 [ 1492.367836][T14148] ? pte_offset_map_rw_nolock+0xba/0x110 [ 1492.367871][T14148] handle_mm_fault+0x1166/0x1b90 [ 1492.367912][T14148] ? __cfi_handle_mm_fault+0x10/0x10 [ 1492.367938][T14148] ? lock_vma_under_rcu+0x49d/0x540 [ 1492.367967][T14148] ? __kasan_check_write+0x18/0x20 [ 1492.368002][T14148] do_user_addr_fault+0x96c/0x1200 [ 1492.368034][T14148] ? __cfi_ksys_write+0x10/0x10 [ 1492.368059][T14148] exc_page_fault+0x59/0xc0 [ 1492.368082][T14148] asm_exc_page_fault+0x2b/0x30 [ 1492.368103][T14148] RIP: 0033:0x7f8784e5a5ab [ 1492.368121][T14148] Code: 00 00 00 48 8d 3d 8d 3b 19 00 48 89 c1 31 c0 e8 db 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 3b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1492.368143][T14148] RSP: 002b:00007f8785e43fb0 EFLAGS: 00010202 [ 1492.368164][T14148] RAX: 0000000000000000 RBX: 00007f87851e5fa0 RCX: 0000000000000000 [ 1492.368180][T14148] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1492.368196][T14148] RBP: 00007f8785e45090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.368211][T14148] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1492.368226][T14148] R13: 00007f87851e6038 R14: 00007f87851e5fa0 R15: 00007fff33fd8478 [ 1492.368246][T14148] [ 1492.368259][T14148] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1492.449058][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1492.661193][T14160] overlayfs: failed to resolve 'smackfshat=cpuacct.usage_percpu': -2 [ 1492.811758][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1492.822059][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1492.830320][ T10] usb 4-1: can't read configurations, error -71 [ 1495.196031][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1495.296985][T14285] rust_binder: 541: no such ref 2 [ 1495.352157][T14289] rust_binder: 541: no such ref 3 [ 1495.362239][T14289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1495.379771][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1495.393125][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1495.403816][T14293] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1495.404084][T14293] rust_binder: Write failure EINVAL in pid:541 [ 1495.424230][ T10] usb 6-1: can't read configurations, error -71 [ 1496.237295][T14401] FAULT_INJECTION: forcing a failure. [ 1496.237295][T14401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.258379][T14401] CPU: 1 UID: 0 PID: 14401 Comm: syz.0.37839 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1496.258420][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1496.258435][T14401] Call Trace: [ 1496.258444][T14401] [ 1496.258454][T14401] __dump_stack+0x21/0x30 [ 1496.258492][T14401] dump_stack_lvl+0x10c/0x190 [ 1496.258523][T14401] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1496.258588][T14401] ? vfs_write+0x93e/0xf30 [ 1496.258611][T14401] dump_stack+0x19/0x20 [ 1496.258641][T14401] should_fail_ex+0x3d9/0x530 [ 1496.258665][T14401] should_fail+0xf/0x20 [ 1496.258686][T14401] should_fail_usercopy+0x1e/0x30 [ 1496.258712][T14401] _copy_from_user+0x22/0xb0 [ 1496.258741][T14401] get_timespec64+0x8f/0x1a0 [ 1496.258767][T14401] ? __cfi_get_timespec64+0x10/0x10 [ 1496.258794][T14401] __x64_sys_recvmmsg+0x144/0x240 [ 1496.258817][T14401] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 1496.258840][T14401] ? __kasan_check_read+0x15/0x20 [ 1496.258875][T14401] x64_sys_call+0x292c/0x2ee0 [ 1496.258909][T14401] do_syscall_64+0x58/0xf0 [ 1496.258939][T14401] ? clear_bhb_loop+0x50/0xa0 [ 1496.258965][T14401] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1496.258990][T14401] RIP: 0033:0x7f5e0fb8f6c9 [ 1496.259010][T14401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.259031][T14401] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1496.259058][T14401] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1496.259076][T14401] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000006 [ 1496.259092][T14401] RBP: 00007f5e1099a090 R08: 0000200000000480 R09: 0000000000000000 [ 1496.259110][T14401] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000001 [ 1496.259125][T14401] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1496.259145][T14401] [ 1496.767509][T14410] FAULT_INJECTION: forcing a failure. [ 1496.767509][T14410] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.796069][T14410] CPU: 1 UID: 0 PID: 14410 Comm: syz.0.37844 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1496.796118][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1496.796135][T14410] Call Trace: [ 1496.796143][T14410] [ 1496.796153][T14410] __dump_stack+0x21/0x30 [ 1496.796192][T14410] dump_stack_lvl+0x10c/0x190 [ 1496.796223][T14410] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1496.796255][T14410] ? release_sock+0x171/0x1f0 [ 1496.796286][T14410] dump_stack+0x19/0x20 [ 1496.796314][T14410] should_fail_ex+0x3d9/0x530 [ 1496.796341][T14410] should_failslab+0xac/0x100 [ 1496.796368][T14410] kmem_cache_alloc_node_noprof+0x45/0x440 [ 1496.796392][T14410] ? netlink_data_ready+0x20/0x20 [ 1496.796423][T14410] ? __alloc_skb+0x10c/0x370 [ 1496.796452][T14410] __alloc_skb+0x10c/0x370 [ 1496.796480][T14410] netlink_alloc_large_skb+0xf7/0x1b0 [ 1496.796510][T14410] netlink_sendmsg+0x586/0xaf0 [ 1496.796543][T14410] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1496.796578][T14410] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 1496.796616][T14410] ? security_socket_sendmsg+0x33/0xd0 [ 1496.796639][T14410] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1496.796672][T14410] ____sys_sendmsg+0xa15/0xa70 [ 1496.796708][T14410] ? __sys_sendmsg_sock+0x50/0x50 [ 1496.796744][T14410] ? import_iovec+0x81/0xb0 [ 1496.796775][T14410] ___sys_sendmsg+0x220/0x2a0 [ 1496.796810][T14410] ? __sys_sendmsg+0x280/0x280 [ 1496.796844][T14410] ? proc_fail_nth_write+0x17e/0x210 [ 1496.796876][T14410] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1496.796914][T14410] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1496.796948][T14410] ? fput+0x1a5/0x240 [ 1496.796976][T14410] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1496.797009][T14410] ? ksys_write+0x1ef/0x250 [ 1496.797033][T14410] ? __kasan_check_read+0x15/0x20 [ 1496.797068][T14410] x64_sys_call+0x2a4c/0x2ee0 [ 1496.797101][T14410] do_syscall_64+0x58/0xf0 [ 1496.797133][T14410] ? clear_bhb_loop+0x50/0xa0 [ 1496.797159][T14410] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1496.797183][T14410] RIP: 0033:0x7f5e0fb8f6c9 [ 1496.797204][T14410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.797225][T14410] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1496.797251][T14410] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1496.797269][T14410] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1496.797285][T14410] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.797300][T14410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.797314][T14410] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1496.797334][T14410] [ 1497.308513][T14431] FAULT_INJECTION: forcing a failure. [ 1497.308513][T14431] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.347788][T14431] CPU: 0 UID: 0 PID: 14431 Comm: syz.0.37852 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1497.347831][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1497.347847][T14431] Call Trace: [ 1497.347855][T14431] [ 1497.347866][T14431] __dump_stack+0x21/0x30 [ 1497.347903][T14431] dump_stack_lvl+0x10c/0x190 [ 1497.347934][T14431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1497.347967][T14431] ? __kasan_check_write+0x18/0x20 [ 1497.348002][T14431] dump_stack+0x19/0x20 [ 1497.348031][T14431] should_fail_ex+0x3d9/0x530 [ 1497.348056][T14431] should_failslab+0xac/0x100 [ 1497.348082][T14431] kmem_cache_alloc_noprof+0x42/0x430 [ 1497.348104][T14431] ? getname_flags+0xc6/0x710 [ 1497.348127][T14431] ? __cfi_ksys_write+0x10/0x10 [ 1497.348150][T14431] getname_flags+0xc6/0x710 [ 1497.348173][T14431] __x64_sys_mkdirat+0x7e/0xa0 [ 1497.348203][T14431] x64_sys_call+0x2ba8/0x2ee0 [ 1497.348237][T14431] do_syscall_64+0x58/0xf0 [ 1497.348267][T14431] ? clear_bhb_loop+0x50/0xa0 [ 1497.348293][T14431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1497.348318][T14431] RIP: 0033:0x7f5e0fb8f6c9 [ 1497.348337][T14431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.348357][T14431] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1497.348382][T14431] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1497.348400][T14431] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffffff [ 1497.348416][T14431] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.348431][T14431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.348446][T14431] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1497.348466][T14431] [ 1497.817183][T14460] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1497.828664][T14464] FAULT_INJECTION: forcing a failure. [ 1497.828664][T14464] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.852099][T14464] CPU: 1 UID: 0 PID: 14464 Comm: syz.5.37868 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1497.852136][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1497.852152][T14464] Call Trace: [ 1497.852159][T14464] [ 1497.852169][T14464] __dump_stack+0x21/0x30 [ 1497.852206][T14464] dump_stack_lvl+0x10c/0x190 [ 1497.852237][T14464] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1497.852270][T14464] ? __kasan_check_write+0x18/0x20 [ 1497.852307][T14464] ? mutex_unlock+0x8b/0x240 [ 1497.852330][T14464] dump_stack+0x19/0x20 [ 1497.852359][T14464] should_fail_ex+0x3d9/0x530 [ 1497.852384][T14464] should_failslab+0xac/0x100 [ 1497.852410][T14464] kmem_cache_alloc_noprof+0x42/0x430 [ 1497.852433][T14464] ? getname_flags+0xc6/0x710 [ 1497.852457][T14464] getname_flags+0xc6/0x710 [ 1497.852492][T14464] ? __kasan_check_read+0x15/0x20 [ 1497.852526][T14464] __x64_sys_unlink+0x3e/0x60 [ 1497.852557][T14464] x64_sys_call+0x286c/0x2ee0 [ 1497.852592][T14464] do_syscall_64+0x58/0xf0 [ 1497.852622][T14464] ? clear_bhb_loop+0x50/0xa0 [ 1497.852650][T14464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1497.852675][T14464] RIP: 0033:0x7f8784f8f6c9 [ 1497.852695][T14464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.852715][T14464] RSP: 002b:00007f8785e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1497.852740][T14464] RAX: ffffffffffffffda RBX: 00007f87851e5fa0 RCX: 00007f8784f8f6c9 [ 1497.852758][T14464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1497.852774][T14464] RBP: 00007f8785e45090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.852789][T14464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.852804][T14464] R13: 00007f87851e6038 R14: 00007f87851e5fa0 R15: 00007fff33fd8478 [ 1497.852823][T14464] [ 1499.895994][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1502.348291][T14619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1502.348344][T14619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679 [ 1502.549376][T14636] 9pnet_fd: Insufficient options for proto=fd [ 1503.055630][T14655] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1503.258902][T14662] 9pnet_fd: Insufficient options for proto=fd [ 1504.077185][T14733] tipc: Failed to remove unknown binding: 66,1,1/0:1587847110/1587847112 [ 1504.096760][T14733] tipc: Failed to remove unknown binding: 66,1,1/0:1587847110/1587847112 [ 1504.105440][T14733] tipc: Failed to remove unknown binding: 66,1,1/0:1587847110/1587847112 [ 1504.676465][T14757] rust_binder: 725: no such ref 0 [ 1504.887902][T14770] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1504.937521][T14778] FAULT_INJECTION: forcing a failure. [ 1504.937521][T14778] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.960705][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.0.38006 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1504.960746][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1504.960763][T14778] Call Trace: [ 1504.960770][T14778] [ 1504.960779][T14778] __dump_stack+0x21/0x30 [ 1504.960813][T14778] dump_stack_lvl+0x10c/0x190 [ 1504.960840][T14778] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1504.960868][T14778] ? release_sock+0x171/0x1f0 [ 1504.960894][T14778] dump_stack+0x19/0x20 [ 1504.960930][T14778] should_fail_ex+0x3d9/0x530 [ 1504.960952][T14778] should_failslab+0xac/0x100 [ 1504.960975][T14778] kmem_cache_alloc_node_noprof+0x45/0x440 [ 1504.960996][T14778] ? netlink_data_ready+0x20/0x20 [ 1504.961024][T14778] ? __alloc_skb+0x10c/0x370 [ 1504.961048][T14778] __alloc_skb+0x10c/0x370 [ 1504.961074][T14778] netlink_alloc_large_skb+0xf7/0x1b0 [ 1504.961100][T14778] netlink_sendmsg+0x586/0xaf0 [ 1504.961131][T14778] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1504.961161][T14778] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 1504.961214][T14778] ? security_socket_sendmsg+0x33/0xd0 [ 1504.961235][T14778] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1504.961265][T14778] ____sys_sendmsg+0xa15/0xa70 [ 1504.961295][T14778] ? __sys_sendmsg_sock+0x50/0x50 [ 1504.961327][T14778] ? import_iovec+0x81/0xb0 [ 1504.961354][T14778] ___sys_sendmsg+0x220/0x2a0 [ 1504.961385][T14778] ? __sys_sendmsg+0x280/0x280 [ 1504.961416][T14778] ? proc_fail_nth_write+0x17e/0x210 [ 1504.961444][T14778] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1504.961479][T14778] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1504.961509][T14778] ? fput+0x1a5/0x240 [ 1504.961532][T14778] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1504.961564][T14778] ? ksys_write+0x1ef/0x250 [ 1504.961585][T14778] ? __kasan_check_read+0x15/0x20 [ 1504.961619][T14778] x64_sys_call+0x2a4c/0x2ee0 [ 1504.961648][T14778] do_syscall_64+0x58/0xf0 [ 1504.961676][T14778] ? clear_bhb_loop+0x50/0xa0 [ 1504.961700][T14778] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1504.961723][T14778] RIP: 0033:0x7f5e0fb8f6c9 [ 1504.961740][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1504.961758][T14778] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1504.961782][T14778] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1504.961798][T14778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1504.961812][T14778] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.961826][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.961839][T14778] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1504.961857][T14778] [ 1505.983495][T14860] FAULT_INJECTION: forcing a failure. [ 1505.983495][T14860] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.006067][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.5.38042 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1506.006121][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1506.006136][T14860] Call Trace: [ 1506.006145][T14860] [ 1506.006154][T14860] __dump_stack+0x21/0x30 [ 1506.006192][T14860] dump_stack_lvl+0x10c/0x190 [ 1506.006223][T14860] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1506.006255][T14860] ? __kasan_check_write+0x18/0x20 [ 1506.006290][T14860] ? mutex_unlock+0x8b/0x240 [ 1506.006313][T14860] dump_stack+0x19/0x20 [ 1506.006342][T14860] should_fail_ex+0x3d9/0x530 [ 1506.006368][T14860] should_failslab+0xac/0x100 [ 1506.006394][T14860] kmem_cache_alloc_noprof+0x42/0x430 [ 1506.006417][T14860] ? getname_flags+0xc6/0x710 [ 1506.006442][T14860] getname_flags+0xc6/0x710 [ 1506.006463][T14860] ? __kasan_check_read+0x15/0x20 [ 1506.006498][T14860] __x64_sys_unlink+0x3e/0x60 [ 1506.006528][T14860] x64_sys_call+0x286c/0x2ee0 [ 1506.006562][T14860] do_syscall_64+0x58/0xf0 [ 1506.006592][T14860] ? clear_bhb_loop+0x50/0xa0 [ 1506.006618][T14860] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1506.006643][T14860] RIP: 0033:0x7f8784f8f6c9 [ 1506.006663][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1506.006683][T14860] RSP: 002b:00007f8785e45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1506.006709][T14860] RAX: ffffffffffffffda RBX: 00007f87851e5fa0 RCX: 00007f8784f8f6c9 [ 1506.006727][T14860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1506.006743][T14860] RBP: 00007f8785e45090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.006758][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.006773][T14860] R13: 00007f87851e6038 R14: 00007f87851e5fa0 R15: 00007fff33fd8478 [ 1506.006794][T14860] [ 1506.586017][T30322] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1506.746008][T30322] usb 4-1: Using ep0 maxpacket: 32 [ 1506.757344][T30322] usb 4-1: config 7 has an invalid interface number: 209 but max is 1 [ 1506.769166][T30322] usb 4-1: config 7 has an invalid interface number: 190 but max is 1 [ 1506.796011][T30322] usb 4-1: config 7 has an invalid descriptor of length 1, skipping remainder of the config [ 1506.816197][T30322] usb 4-1: config 7 has no interface number 0 [ 1506.836034][T30322] usb 4-1: config 7 has no interface number 1 [ 1506.846248][T30322] usb 4-1: config 7 interface 209 altsetting 8 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1506.866029][T30322] usb 4-1: config 7 interface 190 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1506.896032][T30322] usb 4-1: config 7 interface 190 altsetting 4 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1506.919842][T30322] usb 4-1: config 7 interface 190 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 1506.937125][T30322] usb 4-1: config 7 interface 209 has no altsetting 0 [ 1506.944403][T30322] usb 4-1: config 7 interface 190 has no altsetting 0 [ 1506.953020][T30322] usb 4-1: New USB device found, idVendor=257a, idProduct=3606, bcdDevice=41.15 [ 1506.962461][T30322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.982448][T30322] usb 4-1: Product: syz [ 1506.996200][T30322] usb 4-1: Manufacturer: syz [ 1507.000994][T30322] usb 4-1: SerialNumber: syz [ 1507.264027][T14940] FAULT_INJECTION: forcing a failure. [ 1507.264027][T14940] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.316026][T14940] CPU: 1 UID: 0 PID: 14940 Comm: syz.0.38080 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1507.316065][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.316081][T14940] Call Trace: [ 1507.316089][T14940] [ 1507.316103][T14940] __dump_stack+0x21/0x30 [ 1507.316139][T14940] dump_stack_lvl+0x10c/0x190 [ 1507.316171][T14940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1507.316202][T14940] ? __kasan_check_write+0x18/0x20 [ 1507.316237][T14940] ? mutex_unlock+0x8b/0x240 [ 1507.316259][T14940] dump_stack+0x19/0x20 [ 1507.316300][T14940] should_fail_ex+0x3d9/0x530 [ 1507.316324][T14940] should_failslab+0xac/0x100 [ 1507.316351][T14940] kmem_cache_alloc_noprof+0x42/0x430 [ 1507.316373][T14940] ? getname_flags+0xc6/0x710 [ 1507.316397][T14940] getname_flags+0xc6/0x710 [ 1507.316419][T14940] ? __kasan_check_read+0x15/0x20 [ 1507.316454][T14940] __x64_sys_unlink+0x3e/0x60 [ 1507.316483][T14940] x64_sys_call+0x286c/0x2ee0 [ 1507.316518][T14940] do_syscall_64+0x58/0xf0 [ 1507.316547][T14940] ? clear_bhb_loop+0x50/0xa0 [ 1507.316573][T14940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1507.316598][T14940] RIP: 0033:0x7f5e0fb8f6c9 [ 1507.316617][T14940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.316637][T14940] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1507.316662][T14940] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1507.316680][T14940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1507.316696][T14940] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.316711][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.316726][T14940] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1507.316747][T14940] [ 1507.519826][ T36] audit: type=1400 audit(1763078268.030:442): avc: denied { ioctl } for pid=14876 comm="syz.3.38049" path="socket:[512614]" dev="sockfs" ino=512614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1507.728244][T30322] usb 4-1: USB disconnect, device number 71 [ 1509.666018][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1509.833255][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1509.846590][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1509.854246][ T9] usb 4-1: can't read configurations, error -71 [ 1509.861557][T15056] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1511.273009][T15165] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1512.802747][T15325] rust_binder: Write failure EFAULT in pid:449 [ 1512.883441][T15334] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1513.127031][T15365] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1513.807389][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.38303'. [ 1516.717709][T15594] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1517.179837][T15624] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1518.006015][ T1126] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1518.112847][ T36] audit: type=1400 audit(1763078278.620:443): avc: denied { append } for pid=15663 comm="syz.3.38416" name="event2" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1518.166025][ T36] audit: type=1400 audit(1763078278.670:444): avc: denied { create } for pid=15672 comm="syz.2.38422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1518.197257][ T1126] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1518.206462][ T1126] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1518.214769][ T1126] usb 6-1: can't read configurations, error -71 [ 1518.539797][T29688] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1518.558535][T15706] netlink: 140 bytes leftover after parsing attributes in process `syz.2.38438'. [ 1518.602351][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38439'. [ 1518.622436][T15708] bridge_slave_1: left allmulticast mode [ 1518.636038][T15708] bridge_slave_1: left promiscuous mode [ 1518.646814][T15708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.665056][T15708] bridge_slave_0: left allmulticast mode [ 1518.674572][T15708] bridge_slave_0: left promiscuous mode [ 1518.681126][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.697088][T29688] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1518.709486][T29688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1518.729332][T29688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1518.747810][T29688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1518.781279][T29688] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1518.791888][T29688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.806115][T29688] usb 1-1: config 0 descriptor?? [ 1519.214789][T29688] usbhid 1-1:0.0: can't add hid device: -71 [ 1519.221062][T29688] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1519.236138][T29688] usb 1-1: USB disconnect, device number 74 [ 1519.946031][T29688] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1520.120405][T29688] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1520.129023][T29688] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1520.146785][T29688] usb 3-1: can't read configurations, error -71 [ 1520.996059][T29688] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1521.167416][T29688] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1521.186015][T29688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1521.207550][T29688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1521.238249][T29688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1521.266049][T29688] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1521.285538][T29688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.313071][T29688] usb 3-1: config 0 descriptor?? [ 1521.727777][T29688] usbhid 3-1:0.0: can't add hid device: -71 [ 1521.734372][T29688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1521.757637][T29688] usb 3-1: USB disconnect, device number 87 [ 1522.796016][T10522] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1522.957183][T10522] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1522.976037][T10522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1522.996042][T10522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1523.026072][T10522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1523.046034][T10522] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1523.077149][T10522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.093561][T10522] usb 1-1: config 0 descriptor?? [ 1523.477219][T15864] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1523.516632][T10522] usbhid 1-1:0.0: can't add hid device: -71 [ 1523.523532][T10522] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1523.542565][T10522] usb 1-1: USB disconnect, device number 75 [ 1524.516066][T30322] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1524.697342][T30322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1524.716017][T30322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1524.736033][T30322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1524.756119][T30322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1524.786014][T30322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1524.805839][T30322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.823405][T30322] usb 4-1: config 0 descriptor?? [ 1525.234939][T30322] usbhid 4-1:0.0: can't add hid device: -71 [ 1525.246084][T30322] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1525.266742][T30322] usb 4-1: USB disconnect, device number 74 [ 1525.319223][T15950] FAULT_INJECTION: forcing a failure. [ 1525.319223][T15950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1525.366060][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.0.38553 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1525.366126][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1525.366142][T15950] Call Trace: [ 1525.366151][T15950] [ 1525.366161][T15950] __dump_stack+0x21/0x30 [ 1525.366198][T15950] dump_stack_lvl+0x10c/0x190 [ 1525.366230][T15950] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1525.366262][T15950] ? check_stack_object+0x12c/0x140 [ 1525.366291][T15950] dump_stack+0x19/0x20 [ 1525.366321][T15950] should_fail_ex+0x3d9/0x530 [ 1525.366346][T15950] should_fail+0xf/0x20 [ 1525.366365][T15950] should_fail_usercopy+0x1e/0x30 [ 1525.366387][T15950] _copy_to_user+0x24/0xa0 [ 1525.366412][T15950] simple_read_from_buffer+0xed/0x160 [ 1525.366442][T15950] proc_fail_nth_read+0x19e/0x210 [ 1525.366474][T15950] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1525.366505][T15950] ? bpf_lsm_file_permission+0xd/0x20 [ 1525.366538][T15950] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1525.366569][T15950] vfs_read+0x27d/0xc70 [ 1525.366590][T15950] ? __kasan_check_write+0x18/0x20 [ 1525.366626][T15950] ? __cfi_vfs_read+0x10/0x10 [ 1525.366645][T15950] ? __kasan_check_write+0x18/0x20 [ 1525.366680][T15950] ? mutex_lock+0x92/0x1c0 [ 1525.366701][T15950] ? __cfi_mutex_lock+0x10/0x10 [ 1525.366722][T15950] ? __fget_files+0x2c5/0x340 [ 1525.366749][T15950] ksys_read+0x141/0x250 [ 1525.366770][T15950] ? __cfi_ksys_read+0x10/0x10 [ 1525.366792][T15950] ? __kasan_check_read+0x15/0x20 [ 1525.366827][T15950] __x64_sys_read+0x7f/0x90 [ 1525.366848][T15950] x64_sys_call+0x2638/0x2ee0 [ 1525.366882][T15950] do_syscall_64+0x58/0xf0 [ 1525.366911][T15950] ? clear_bhb_loop+0x50/0xa0 [ 1525.366937][T15950] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1525.366962][T15950] RIP: 0033:0x7f5e0fb8e0dc [ 1525.366982][T15950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1525.367002][T15950] RSP: 002b:00007f5e1099a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1525.367028][T15950] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8e0dc [ 1525.367045][T15950] RDX: 000000000000000f RSI: 00007f5e1099a0a0 RDI: 0000000000000005 [ 1525.367060][T15950] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1525.367076][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.367091][T15950] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1525.367121][T15950] [ 1525.916627][T15958] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1525.998677][ T36] audit: type=1400 audit(1763078286.510:445): avc: denied { load_policy } for pid=15963 comm="syz.5.38560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1526.070738][T15964] SELinux: failed to load policy [ 1526.156527][T15978] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1527.257452][T16035] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1527.560420][T16061] SELinux: failed to load policy [ 1527.795108][ T36] audit: type=1326 audit(1763078288.300:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16094 comm="syz.3.38622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921538f6c9 code=0x0 [ 1527.896114][T16103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.38627'. [ 1527.921422][T16103] netlink: 17 bytes leftover after parsing attributes in process `syz.5.38627'. [ 1527.933236][T16103] tipc: Invalid UDP bearer configuration [ 1527.933271][T16103] tipc: Enabling of bearer rejected, failed to enable media [ 1527.969091][T16103] bridge0: entered allmulticast mode [ 1527.991389][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.38627'. [ 1528.016029][T16103] bridge_slave_1: left allmulticast mode [ 1528.033481][T16103] bridge_slave_1: left promiscuous mode [ 1528.049478][T16103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.067020][T16103] bridge_slave_0: left allmulticast mode [ 1528.083646][T16103] bridge_slave_0: left promiscuous mode [ 1528.096106][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.118843][T16103] bridge0 (unregistering): left allmulticast mode [ 1528.183684][T16118] netlink: 'syz.2.38633': attribute type 4 has an invalid length. [ 1528.546800][T16166] FAULT_INJECTION: forcing a failure. [ 1528.546800][T16166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1528.570622][T16166] CPU: 0 UID: 0 PID: 16166 Comm: syz.2.38657 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1528.570664][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1528.570680][T16166] Call Trace: [ 1528.570689][T16166] [ 1528.570698][T16166] __dump_stack+0x21/0x30 [ 1528.570736][T16166] dump_stack_lvl+0x10c/0x190 [ 1528.570767][T16166] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1528.570800][T16166] ? kstrtoull+0x13b/0x1e0 [ 1528.570822][T16166] dump_stack+0x19/0x20 [ 1528.570851][T16166] should_fail_ex+0x3d9/0x530 [ 1528.570874][T16166] should_fail+0xf/0x20 [ 1528.570896][T16166] should_fail_usercopy+0x1e/0x30 [ 1528.570920][T16166] _copy_from_user+0x22/0xb0 [ 1528.570960][T16166] ___sys_sendmsg+0x159/0x2a0 [ 1528.570994][T16166] ? __sys_sendmsg+0x280/0x280 [ 1528.571026][T16166] ? proc_fail_nth_write+0x17e/0x210 [ 1528.571056][T16166] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1528.571096][T16166] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1528.571129][T16166] ? fput+0x1a5/0x240 [ 1528.571155][T16166] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1528.571189][T16166] ? ksys_write+0x1ef/0x250 [ 1528.571212][T16166] ? __kasan_check_read+0x15/0x20 [ 1528.571248][T16166] x64_sys_call+0x2a4c/0x2ee0 [ 1528.571289][T16166] do_syscall_64+0x58/0xf0 [ 1528.571319][T16166] ? clear_bhb_loop+0x50/0xa0 [ 1528.571344][T16166] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1528.571368][T16166] RIP: 0033:0x7fe3e3d8f6c9 [ 1528.571387][T16166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.571407][T16166] RSP: 002b:00007fe3e4ba0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1528.571432][T16166] RAX: ffffffffffffffda RBX: 00007fe3e3fe5fa0 RCX: 00007fe3e3d8f6c9 [ 1528.571449][T16166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1528.571464][T16166] RBP: 00007fe3e4ba0090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.571479][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.571493][T16166] R13: 00007fe3e3fe6038 R14: 00007fe3e3fe5fa0 R15: 00007ffced0ab418 [ 1528.571514][T16166] [ 1528.665778][T16168] SELinux: failed to load policy [ 1529.267344][T16212] netlink: 'syz.2.38680': attribute type 4 has an invalid length. [ 1529.472265][T16226] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1529.488623][T16226] SELinux: failed to load policy [ 1529.542716][T16232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38688'. [ 1529.554622][T16232] netlink: 17 bytes leftover after parsing attributes in process `syz.3.38688'. [ 1529.574349][T16232] tipc: Invalid UDP bearer configuration [ 1529.574378][T16232] tipc: Enabling of bearer rejected, failed to enable media [ 1529.805659][T16257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38701'. [ 1529.836083][T16257] netlink: 17 bytes leftover after parsing attributes in process `syz.2.38701'. [ 1529.866032][T16257] tipc: Invalid UDP bearer configuration [ 1529.866072][T16257] tipc: Enabling of bearer rejected, failed to enable media [ 1530.398633][T16278] netlink: 'syz.2.38710': attribute type 4 has an invalid length. [ 1530.536608][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38713'. [ 1530.556037][T16283] netlink: 17 bytes leftover after parsing attributes in process `syz.0.38713'. [ 1530.601553][T16283] tipc: Invalid UDP bearer configuration [ 1530.601588][T16283] tipc: Enabling of bearer rejected, failed to enable media [ 1532.210649][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.224669][T16354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.251137][T16354] bridge_slave_0: entered allmulticast mode [ 1532.264273][T16354] bridge_slave_0: entered promiscuous mode [ 1532.287379][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.294655][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.326076][T16354] bridge_slave_1: entered allmulticast mode [ 1532.332631][T16354] bridge_slave_1: entered promiscuous mode [ 1532.359081][T10937] veth1_macvtap: left promiscuous mode [ 1532.372391][T10937] veth0_vlan: left promiscuous mode [ 1532.539400][T16378] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1532.667579][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.674833][T16354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.682358][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.689459][T16354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.754496][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.773414][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.806083][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.813249][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.841640][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.849111][T10928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.923114][T16354] veth0_vlan: entered promiscuous mode [ 1532.954247][T16354] veth1_macvtap: entered promiscuous mode [ 1533.057798][ T36] audit: type=1400 audit(1763078293.570:447): avc: denied { ioctl } for pid=16429 comm="syz.3.38778" path="socket:[522658]" dev="sockfs" ino=522658 ioctlcmd=0x4b3a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1533.218462][T16444] netlink: 'syz.5.38784': attribute type 4 has an invalid length. [ 1533.430118][T16460] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1533.496523][ T36] audit: type=1326 audit(1763078294.010:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16463 comm="syz.2.38794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f3fb8f6c9 code=0x0 [ 1533.746180][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38800'. [ 1533.758399][T16478] netlink: 17 bytes leftover after parsing attributes in process `syz.2.38800'. [ 1533.780149][T16478] tipc: Invalid UDP bearer configuration [ 1533.780341][T16478] tipc: Enabling of bearer rejected, failed to enable media [ 1534.026553][ T36] audit: type=1326 audit(1763078294.540:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16489 comm="syz.5.38806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8784f8f6c9 code=0x0 [ 1534.188027][T16494] binder: Bad value for 'stats' [ 1534.287437][T16496] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1534.650358][ T36] audit: type=1400 audit(1763078295.160:450): avc: denied { shutdown } for pid=16504 comm="syz.3.38812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1535.706869][T16574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38844'. [ 1535.717417][T16574] netlink: 17 bytes leftover after parsing attributes in process `syz.3.38844'. [ 1535.727376][T16574] tipc: Invalid UDP bearer configuration [ 1535.727454][T16574] tipc: Enabling of bearer rejected, failed to enable media [ 1535.776970][T16576] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1536.005479][T16586] netlink: 'syz.0.38850': attribute type 4 has an invalid length. [ 1536.063745][T16590] FAULT_INJECTION: forcing a failure. [ 1536.063745][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.095991][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.0.38852 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1536.096034][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1536.096051][T16590] Call Trace: [ 1536.096060][T16590] [ 1536.096070][T16590] __dump_stack+0x21/0x30 [ 1536.096108][T16590] dump_stack_lvl+0x10c/0x190 [ 1536.096140][T16590] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1536.096172][T16590] ? kstrtoull+0x13b/0x1e0 [ 1536.096194][T16590] dump_stack+0x19/0x20 [ 1536.096237][T16590] should_fail_ex+0x3d9/0x530 [ 1536.096262][T16590] should_fail+0xf/0x20 [ 1536.096284][T16590] should_fail_usercopy+0x1e/0x30 [ 1536.096310][T16590] _copy_from_user+0x22/0xb0 [ 1536.096339][T16590] ___sys_sendmsg+0x159/0x2a0 [ 1536.096376][T16590] ? __sys_sendmsg+0x280/0x280 [ 1536.096409][T16590] ? proc_fail_nth_write+0x17e/0x210 [ 1536.096441][T16590] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1536.096477][T16590] __x64_sys_sendmsg+0x1eb/0x2c0 [ 1536.096511][T16590] ? fput+0x1a5/0x240 [ 1536.096538][T16590] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1536.096573][T16590] ? ksys_write+0x1ef/0x250 [ 1536.096596][T16590] ? __kasan_check_read+0x15/0x20 [ 1536.096632][T16590] x64_sys_call+0x2a4c/0x2ee0 [ 1536.096666][T16590] do_syscall_64+0x58/0xf0 [ 1536.096695][T16590] ? clear_bhb_loop+0x50/0xa0 [ 1536.096721][T16590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1536.096746][T16590] RIP: 0033:0x7f5e0fb8f6c9 [ 1536.096767][T16590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.096788][T16590] RSP: 002b:00007f5e1099a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.096813][T16590] RAX: ffffffffffffffda RBX: 00007f5e0fde5fa0 RCX: 00007f5e0fb8f6c9 [ 1536.096831][T16590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1536.096847][T16590] RBP: 00007f5e1099a090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.096863][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.096878][T16590] R13: 00007f5e0fde6038 R14: 00007f5e0fde5fa0 R15: 00007ffc31efd8f8 [ 1536.096899][T16590] [ 1536.698017][T16623] netlink: 'syz.3.38862': attribute type 4 has an invalid length. [ 1536.757002][ T36] audit: type=1326 audit(1763078297.270:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16628 comm="syz.3.38871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921538f6c9 code=0x0 [ 1537.447061][T16651] netlink: 'syz.5.38883': attribute type 4 has an invalid length. [ 1537.925000][ T1126] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1537.994054][T16682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38889'. [ 1538.007650][T16682] netlink: 17 bytes leftover after parsing attributes in process `syz.3.38889'. [ 1538.039982][T16682] tipc: Invalid UDP bearer configuration [ 1538.040021][T16682] tipc: Enabling of bearer rejected, failed to enable media [ 1538.102057][ T1126] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1538.134668][ T1126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1538.166542][T16686] SELinux: failed to load policy [ 1538.171894][ T1126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1538.183848][ T1126] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1538.217281][ T1126] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1538.228579][ T1126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.246234][ T1126] usb 6-1: config 0 descriptor?? [ 1538.327315][T16704] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1538.596155][T16716] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1538.687207][ T1126] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 1538.724523][ T1126] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1539.057572][T16739] SELinux: failed to load policy [ 1539.146222][T16741] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1539.720446][T16759] SELinux: policydb magic number 0x4271c does not match expected magic number 0xf97cff8c [ 1539.730764][T16759] SELinux: failed to load policy [ 1540.574667][T16791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.38951'. [ 1540.606165][T16791] netlink: 17 bytes leftover after parsing attributes in process `syz.5.38951'. [ 1540.619092][T16791] tipc: Invalid UDP bearer configuration [ 1540.619125][T16791] tipc: Enabling of bearer rejected, failed to enable media [ 1540.766466][ T9] usb 6-1: USB disconnect, device number 28 [ 1540.898379][T16812] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1540.929980][T16815] netlink: 16 bytes leftover after parsing attributes in process `syz.5.38963'. [ 1540.950892][T16815] netlink: 17 bytes leftover after parsing attributes in process `syz.5.38963'. [ 1540.976011][T16815] tipc: Invalid UDP bearer configuration [ 1540.976046][T16815] tipc: Enabling of bearer rejected, failed to enable media [ 1541.085676][T16818] SELinux: failed to load policy [ 1541.862278][T16871] SELinux: failed to load policy [ 1544.650999][T16949] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1545.718990][ T36] audit: type=1326 audit(1763078306.230:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.5.39053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8784f8f6c9 code=0x0 [ 1546.024171][T17014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39055'. [ 1546.038366][T17014] netlink: 17 bytes leftover after parsing attributes in process `syz.0.39055'. [ 1546.048378][T17014] tipc: Invalid UDP bearer configuration [ 1546.048597][T17014] tipc: Enabling of bearer rejected, failed to enable media [ 1547.419484][T17088] SELinux: failed to load policy [ 1547.497603][T17090] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1547.680955][ T36] audit: type=1326 audit(1763078308.190:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.5.39102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8784f8f6c9 code=0x0 [ 1548.066058][T17122] SELinux: failed to load policy [ 1548.971197][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.978417][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.005913][T17155] bridge_slave_0: entered allmulticast mode [ 1549.012473][T17155] bridge_slave_0: entered promiscuous mode [ 1549.037172][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.064769][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.085057][T17155] bridge_slave_1: entered allmulticast mode [ 1549.095237][T17155] bridge_slave_1: entered promiscuous mode [ 1549.294688][ T36] audit: type=1326 audit(1763078309.800:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17159 comm="syz.5.39130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8784f8f6c9 code=0x0 [ 1549.337217][ T6281] bridge_slave_1: left allmulticast mode [ 1549.343019][ T6281] bridge_slave_1: left promiscuous mode [ 1549.366080][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.375419][ T6281] bridge_slave_0: left allmulticast mode [ 1549.385975][ T6281] bridge_slave_0: left promiscuous mode [ 1549.396118][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.509670][ T6281] veth1_macvtap: left promiscuous mode [ 1549.525288][ T6281] veth0_vlan: left promiscuous mode [ 1549.739387][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.746678][T17155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.754085][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.761892][T17155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.896372][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.904934][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.916646][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.924032][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.966346][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.975633][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.025791][T17155] veth0_vlan: entered promiscuous mode [ 1550.042940][T17155] veth1_macvtap: entered promiscuous mode [ 1550.288168][T17186] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1550.886000][T29688] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1551.037137][T29688] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1551.056009][T29688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1551.078961][T29688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1551.105985][T29688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1551.122750][T29688] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1551.133106][T29688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.147011][T29688] usb 6-1: config 0 descriptor?? [ 1551.556275][ T36] audit: type=1326 audit(1763078312.060:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.3.39161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921538f6c9 code=0x0 [ 1551.581832][T29688] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1551.600304][T29688] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1551.719139][T17237] SELinux: failed to load policy [ 1552.257712][T17247] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1552.621106][T17268] netlink: 'syz.3.39178': attribute type 4 has an invalid length. [ 1553.057176][ T8088] bridge_slave_1: left allmulticast mode [ 1553.063371][ T8088] bridge_slave_1: left promiscuous mode [ 1553.069979][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.086328][ T8088] bridge_slave_0: left allmulticast mode [ 1553.116077][ T8088] bridge_slave_0: left promiscuous mode [ 1553.122011][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.259678][ T8088] veth1_macvtap: left promiscuous mode [ 1553.265793][ T8088] veth0_vlan: left promiscuous mode [ 1553.386937][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.394248][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.432037][T17272] bridge_slave_0: entered allmulticast mode [ 1553.456539][T17272] bridge_slave_0: entered promiscuous mode [ 1553.463721][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.471045][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.478458][T17272] bridge_slave_1: entered allmulticast mode [ 1553.485281][T17272] bridge_slave_1: entered promiscuous mode [ 1553.620301][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.627455][T17272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.634805][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.641937][T17272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.650361][ T9] usb 6-1: USB disconnect, device number 29 [ 1553.711389][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.729310][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.750393][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.757772][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.784052][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.791414][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.826009][T28076] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1553.842791][T17272] veth0_vlan: entered promiscuous mode [ 1553.870734][T17272] veth1_macvtap: entered promiscuous mode [ 1553.986886][T28076] usb 1-1: Using ep0 maxpacket: 32 [ 1553.997262][T28076] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1554.006120][T28076] usb 1-1: config 0 has no interface number 0 [ 1554.012282][T28076] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1554.035989][T28076] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1554.054168][T28076] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1554.063566][T28076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.071930][T28076] usb 1-1: Product: syz [ 1554.076520][T28076] usb 1-1: Manufacturer: syz [ 1554.081504][T28076] usb 1-1: SerialNumber: syz [ 1554.096449][T28076] usb 1-1: config 0 descriptor?? [ 1554.103558][T17293] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1554.318460][T28076] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1554.336076][T28076] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1554.356169][T28076] usb 1-1: USB disconnect, device number 76 [ 1555.041486][T17330] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1555.164785][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39206'. [ 1555.196009][T17334] netlink: 17 bytes leftover after parsing attributes in process `syz.0.39206'. [ 1555.205458][T17334] tipc: Invalid UDP bearer configuration [ 1555.205490][T17334] tipc: Enabling of bearer rejected, failed to enable media [ 1555.726004][T17364] netlink: 'syz.0.39221': attribute type 4 has an invalid length. [ 1559.158408][T17506] netlink: 'syz.5.39282': attribute type 4 has an invalid length. [ 1560.002443][T17530] SELinux: failed to load policy [ 1560.100307][ T36] audit: type=1326 audit(1763078320.610:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.3.39304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a5198f6c9 code=0x0 [ 1560.144849][T17538] netlink: 'syz.0.39298': attribute type 4 has an invalid length. [ 1560.177556][T17540] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1560.276955][T17553] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1560.355650][T17558] SELinux: failed to load policy [ 1560.379821][T17560] netlink: 16 bytes leftover after parsing attributes in process `syz.5.39313'. [ 1560.389488][T17560] netlink: 17 bytes leftover after parsing attributes in process `syz.5.39313'. [ 1560.398861][T17560] tipc: Invalid UDP bearer configuration [ 1560.398890][T17560] tipc: Enabling of bearer rejected, failed to enable media [ 1560.449670][T17564] netlink: 'syz.5.39315': attribute type 4 has an invalid length. [ 1561.318458][T17604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39335'. [ 1561.331299][T17604] netlink: 17 bytes leftover after parsing attributes in process `syz.3.39335'. [ 1561.343403][T17604] tipc: Invalid UDP bearer configuration [ 1561.343443][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 1561.969230][T17644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.39355'. [ 1562.002650][T17644] netlink: 17 bytes leftover after parsing attributes in process `syz.5.39355'. [ 1562.028959][T17644] tipc: Invalid UDP bearer configuration [ 1562.028993][T17644] tipc: Enabling of bearer rejected, failed to enable media [ 1562.267274][T17666] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1564.306069][T30322] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1564.455995][T30322] usb 6-1: Using ep0 maxpacket: 32 [ 1564.462749][T30322] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1564.471887][T30322] usb 6-1: config 0 has no interface number 0 [ 1564.478883][T30322] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1564.490027][T30322] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1564.506470][T30322] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1564.517767][T30322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.526867][T30322] usb 6-1: Product: syz [ 1564.531621][T30322] usb 6-1: Manufacturer: syz [ 1564.537188][T30322] usb 6-1: SerialNumber: syz [ 1564.551192][T30322] usb 6-1: config 0 descriptor?? [ 1564.561407][T17849] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1564.773093][T30322] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1564.791894][T30322] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 1564.812501][T30322] usb 6-1: USB disconnect, device number 30 [ 1565.609828][T17895] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1565.910850][ T36] audit: type=1326 audit(1763078326.420:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17901 comm="syz.3.39480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a5198f6c9 code=0x0 [ 1565.981431][T17906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39482'. [ 1566.016063][T17906] netlink: 17 bytes leftover after parsing attributes in process `syz.0.39482'. [ 1566.045985][T17906] tipc: Invalid UDP bearer configuration [ 1566.046017][T17906] tipc: Enabling of bearer rejected, failed to enable media [ 1569.256514][T18068] netpci0: tun_chr_ioctl cmd 1074025672 [ 1569.276076][T18068] netpci0: ignored: set checksum enabled [ 1569.471807][T18080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39569'. [ 1569.503316][T18080] netlink: 17 bytes leftover after parsing attributes in process `syz.0.39569'. [ 1569.544406][T18080] tipc: Invalid UDP bearer configuration [ 1569.544441][T18080] tipc: Enabling of bearer rejected, failed to enable media [ 1571.007830][T18158] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1571.084064][T18166] netlink: 16 bytes leftover after parsing attributes in process `syz.5.39610'. [ 1571.094947][T18166] netlink: 17 bytes leftover after parsing attributes in process `syz.5.39610'. [ 1571.105085][T18166] tipc: Invalid UDP bearer configuration [ 1571.105110][T18166] tipc: Enabling of bearer rejected, failed to enable media [ 1572.053074][T18194] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1572.881974][T18219] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1572.894646][T18219] SELinux: failed to load policy [ 1573.124337][T18243] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1573.154861][T18243] SELinux: failed to load policy [ 1573.837569][T18279] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1573.872164][T18279] SELinux: failed to load policy [ 1575.151339][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39692'. [ 1575.181449][T18332] netlink: 17 bytes leftover after parsing attributes in process `syz.0.39692'. [ 1575.201266][T18332] tipc: Invalid UDP bearer configuration [ 1575.201303][T18332] tipc: Enabling of bearer rejected, failed to enable media [ 1575.700453][T18353] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1575.708181][T18356] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1575.728165][T18356] SELinux: failed to load policy [ 1575.960446][T18382] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1575.981685][T18382] SELinux: failed to load policy [ 1576.136417][ T36] audit: type=1400 audit(1763078336.650:458): avc: denied { read } for pid=18404 comm="syz.5.39725" dev="sockfs" ino=536013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1576.211877][T18415] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.222599][T18415] SELinux: failed to load policy [ 1576.416250][T18434] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.432497][T18434] SELinux: failed to load policy [ 1576.606352][T18452] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.626174][T18452] SELinux: failed to load policy [ 1576.754658][T18472] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.764418][T18472] SELinux: failed to load policy [ 1576.800984][T18480] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.810219][T18480] SELinux: failed to load policy [ 1576.840990][T18486] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1576.884589][T18488] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1576.887939][T18494] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1577.012376][T18511] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1577.859859][T18537] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1578.006312][T18549] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1578.023377][T18549] sel_write_load: 4 callbacks suppressed [ 1578.023404][T18549] SELinux: failed to load policy [ 1578.092055][T18555] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1578.171710][T18564] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1578.181408][T18564] SELinux: failed to load policy [ 1578.873141][ T36] audit: type=1400 audit(1763078339.380:459): avc: denied { ioctl } for pid=18603 comm="syz.5.39821" path="socket:[536523]" dev="sockfs" ino=536523 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1579.603850][T18643] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1579.625126][T18643] SELinux: failed to load policy [ 1580.254473][T18663] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1580.265770][T18663] SELinux: failed to load policy [ 1580.450250][T18673] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1580.825999][T28076] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1581.005966][T28076] usb 1-1: Using ep0 maxpacket: 32 [ 1581.017101][T28076] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1581.025524][T28076] usb 1-1: config 0 has no interface number 0 [ 1581.033144][T28076] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1581.034169][T18680] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1581.044717][T28076] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1581.071040][T28076] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1581.080848][T28076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.090274][T28076] usb 1-1: Product: syz [ 1581.094728][T28076] usb 1-1: Manufacturer: syz [ 1581.099530][T28076] usb 1-1: SerialNumber: syz [ 1581.105191][T28076] usb 1-1: config 0 descriptor?? [ 1581.111816][T18677] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1581.319212][T18693] tipc: Enabling of bearer rejected, failed to enable media [ 1581.340483][T28076] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1581.348458][T28076] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1581.360473][T28076] usb 1-1: USB disconnect, device number 77 [ 1581.774481][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.783383][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.791498][T18701] bridge_slave_0: entered allmulticast mode [ 1581.799432][T18701] bridge_slave_0: entered promiscuous mode [ 1581.809461][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.816756][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.825212][T18701] bridge_slave_1: entered allmulticast mode [ 1581.833136][T18701] bridge_slave_1: entered promiscuous mode [ 1581.863218][ T8088] veth1_macvtap: left promiscuous mode [ 1581.869723][ T8088] veth0_vlan: left promiscuous mode [ 1581.996847][T18701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.004607][T18701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.012658][T18701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.020042][T18701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.052964][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.062234][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1582.073622][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.081669][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.093430][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.100623][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.167090][T18701] veth0_vlan: entered promiscuous mode [ 1582.211610][T18701] veth1_macvtap: entered promiscuous mode [ 1582.406112][T18732] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1582.458174][T18734] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1582.488940][T18734] SELinux: failed to load policy [ 1582.724755][T18743] tipc: Enabling of bearer rejected, failed to enable media [ 1583.003886][T18753] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1583.367097][T18766] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1583.389398][T18766] SELinux: failed to load policy [ 1583.617173][T18774] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1584.023725][T18808] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1584.034798][T18808] SELinux: failed to load policy [ 1584.043526][T18812] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1584.282653][T18833] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1584.296588][T18833] SELinux: failed to load policy [ 1584.320258][T18836] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1584.330436][T18836] SELinux: failed to load policy [ 1584.591028][T18865] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1584.600515][T18865] SELinux: failed to load policy [ 1584.806656][T18883] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1584.986163][ T36] audit: type=1400 audit(1763078345.490:460): avc: denied { create } for pid=18891 comm="syz.2.39953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1585.315990][T10522] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1585.480204][T10522] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1585.494633][T10522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1585.506815][T10522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1585.517228][T10522] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1585.530890][T10522] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.540731][T10522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.550018][T18928] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1585.555370][T10522] usb 3-1: config 0 descriptor?? [ 1585.566465][T18928] SELinux: failed to load policy [ 1585.613950][T18932] SELinux: Context system_u:object_r:crond_exec_t:s0 is not valid (left unmapped). [ 1585.627048][ T36] audit: type=1400 audit(1763078346.140:461): avc: denied { relabelto } for pid=18931 comm="syz.3.39973" name="zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 1585.661500][ T36] audit: type=1400 audit(1763078346.170:462): avc: denied { associate } for pid=18931 comm="syz.3.39973" name="zero" dev="devtmpfs" ino=5 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_exec_t:s0" [ 1585.695646][ T36] audit: type=1400 audit(1763078346.170:463): avc: denied { ioctl } for pid=18931 comm="syz.3.39973" path="/dev/zero" dev="devtmpfs" ino=5 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_exec_t:s0" [ 1585.974876][T10522] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1586.001133][T10522] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1586.017209][T18955] tipc: Enabling of bearer rejected, failed to enable media [ 1586.075335][T18958] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1586.105515][T18958] SELinux: failed to load policy [ 1586.720194][T18962] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1587.361535][T18986] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1587.371170][T18986] SELinux: failed to load policy [ 1587.399069][T18988] __vm_enough_memory: pid: 18988, comm: syz.0.39998, bytes: 18014402804453376 not enough memory for the allocation [ 1587.636750][T19001] Invalid logical block size (34372) [ 1587.923576][T19022] tipc: Enabling of bearer rejected, failed to enable media [ 1587.944078][T19024] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1587.974580][T19024] SELinux: failed to load policy [ 1588.057647][T19028] Invalid logical block size (34372) [ 1588.086441][T10522] usb 3-1: USB disconnect, device number 88 [ 1588.437035][T19043] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1588.465982][T19043] SELinux: failed to load policy [ 1588.793332][T19069] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1588.802910][T19069] SELinux: failed to load policy [ 1588.875977][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1589.036026][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1589.053888][ T9] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1589.065973][ T9] usb 4-1: config 0 has no interface number 0 [ 1589.072741][ T9] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1589.103751][ T9] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1589.117395][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1589.126679][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.145132][ T9] usb 4-1: Product: syz [ 1589.155961][ T9] usb 4-1: Manufacturer: syz [ 1589.160929][ T9] usb 4-1: SerialNumber: syz [ 1589.164894][T19080] mmap: syz.5.40040 (19080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1589.181278][ T9] usb 4-1: config 0 descriptor?? [ 1589.196393][T19057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1589.408793][ T9] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1589.421494][ T9] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 1589.432579][ T9] usb 4-1: USB disconnect, device number 75 [ 1589.590882][T19103] Invalid logical block size (34372) [ 1589.628265][T19109] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1589.637481][T19109] SELinux: failed to load policy [ 1589.817258][T19117] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1589.845999][T19117] SELinux: failed to load policy [ 1590.114994][T19129] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1590.299619][T19136] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1590.323297][T19136] SELinux: failed to load policy [ 1590.401496][T19142] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1590.414014][T19142] SELinux: failed to load policy [ 1590.474744][T19151] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1590.484190][T19151] SELinux: failed to load policy [ 1590.781812][T19183] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1590.781849][T19183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 1590.863099][T19193] FAULT_INJECTION: forcing a failure. [ 1590.863099][T19193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.887719][T19193] CPU: 1 UID: 0 PID: 19193 Comm: syz.3.40085 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1590.887762][T19193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1590.887777][T19193] Call Trace: [ 1590.887785][T19193] [ 1590.887795][T19193] __dump_stack+0x21/0x30 [ 1590.887832][T19193] dump_stack_lvl+0x10c/0x190 [ 1590.887863][T19193] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1590.887894][T19193] ? vfs_write+0x93e/0xf30 [ 1590.887916][T19193] dump_stack+0x19/0x20 [ 1590.887944][T19193] should_fail_ex+0x3d9/0x530 [ 1590.887969][T19193] should_fail+0xf/0x20 [ 1590.887989][T19193] should_fail_usercopy+0x1e/0x30 [ 1590.888014][T19193] _copy_from_user+0x22/0xb0 [ 1590.888042][T19193] do_sock_getsockopt+0x1d7/0x6d0 [ 1590.888077][T19193] ? __cfi_do_sock_getsockopt+0x10/0x10 [ 1590.888110][T19193] ? __fget_files+0x2c5/0x340 [ 1590.888136][T19193] __x64_sys_getsockopt+0x1d5/0x280 [ 1590.888170][T19193] x64_sys_call+0x10db/0x2ee0 [ 1590.888203][T19193] do_syscall_64+0x58/0xf0 [ 1590.888232][T19193] ? clear_bhb_loop+0x50/0xa0 [ 1590.888258][T19193] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1590.888282][T19193] RIP: 0033:0x7f5a5198f6c9 [ 1590.888303][T19193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.888323][T19193] RSP: 002b:00007f5a52773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1590.888348][T19193] RAX: ffffffffffffffda RBX: 00007f5a51be5fa0 RCX: 00007f5a5198f6c9 [ 1590.888367][T19193] RDX: 0000000000000023 RSI: 000000000000011a RDI: 0000000000000005 [ 1590.888382][T19193] RBP: 00007f5a52773090 R08: 0000000000000000 R09: 0000000000000000 [ 1590.888398][T19193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.888413][T19193] R13: 00007f5a51be6038 R14: 00007f5a51be5fa0 R15: 00007ffdfb6f4e68 [ 1590.888433][T19193] [ 1591.237409][T19218] Invalid logical block size (34372) [ 1591.346370][T19236] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1591.363678][T19236] SELinux: failed to load policy [ 1591.452829][T19249] Invalid logical block size (34372) [ 1591.458941][T19251] bridge0: entered allmulticast mode [ 1591.473722][T19251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40120'. [ 1591.490809][T19251] bridge_slave_1: left allmulticast mode [ 1591.497332][T19251] bridge_slave_1: left promiscuous mode [ 1591.504012][T19251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.513968][T19251] bridge_slave_0: left allmulticast mode [ 1591.517218][T19253] Invalid logical block size (34372) [ 1591.529166][T19251] bridge_slave_0: left promiscuous mode [ 1591.545506][T19251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.562898][T19251] bridge0 (unregistering): left allmulticast mode [ 1591.666010][T29688] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1591.696270][T19262] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1591.775381][T19271] tc_dump_action: action bad kind [ 1591.825992][T29688] usb 3-1: Using ep0 maxpacket: 32 [ 1591.835499][T29688] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1591.844958][T29688] usb 3-1: config 0 has no interface number 0 [ 1591.851956][T29688] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1591.869072][T29688] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1591.881791][T29688] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1591.899494][T29688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.920464][T29688] usb 3-1: Product: syz [ 1591.925232][T29688] usb 3-1: Manufacturer: syz [ 1591.933038][T29688] usb 3-1: SerialNumber: syz [ 1591.941337][T29688] usb 3-1: config 0 descriptor?? [ 1591.949361][T19245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1591.959380][T19280] tipc: Enabling of bearer rejected, failed to enable media [ 1591.987399][T19283] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1591.998281][T19283] SELinux: failed to load policy [ 1592.033886][T19292] Invalid logical block size (34372) [ 1592.059889][T19296] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1592.069628][T19296] SELinux: failed to load policy [ 1592.092759][T19298] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1592.162031][T29688] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1592.169950][T29688] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 1592.192341][T29688] usb 3-1: USB disconnect, device number 89 [ 1592.244819][T19315] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1592.330976][T19323] FAULT_INJECTION: forcing a failure. [ 1592.330976][T19323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.345599][T19323] CPU: 1 UID: 0 PID: 19323 Comm: syz.3.40153 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1592.345640][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1592.345656][T19323] Call Trace: [ 1592.345664][T19323] [ 1592.345679][T19323] __dump_stack+0x21/0x30 [ 1592.345717][T19323] dump_stack_lvl+0x10c/0x190 [ 1592.345796][T19323] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1592.345830][T19323] dump_stack+0x19/0x20 [ 1592.345870][T19323] should_fail_ex+0x3d9/0x530 [ 1592.345895][T19323] should_fail+0xf/0x20 [ 1592.345921][T19323] should_fail_usercopy+0x1e/0x30 [ 1592.345946][T19323] _copy_from_user+0x22/0xb0 [ 1592.345973][T19323] sk_setsockopt+0x277/0x2970 [ 1592.346004][T19323] ? __cfi_sk_setsockopt+0x10/0x10 [ 1592.346034][T19323] ? selinux_socket_setsockopt+0x2ea/0x390 [ 1592.346074][T19323] ? __cfi_vfs_write+0x10/0x10 [ 1592.346095][T19323] ? __kasan_check_write+0x18/0x20 [ 1592.346131][T19323] sock_setsockopt+0x5e/0x70 [ 1592.346161][T19323] do_sock_setsockopt+0x202/0x400 [ 1592.346195][T19323] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 1592.346230][T19323] __x64_sys_setsockopt+0x1b8/0x250 [ 1592.346264][T19323] x64_sys_call+0x2adc/0x2ee0 [ 1592.346298][T19323] do_syscall_64+0x58/0xf0 [ 1592.346328][T19323] ? clear_bhb_loop+0x50/0xa0 [ 1592.346354][T19323] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1592.346379][T19323] RIP: 0033:0x7f5a5198f6c9 [ 1592.346399][T19323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1592.346420][T19323] RSP: 002b:00007f5a52773038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1592.346446][T19323] RAX: ffffffffffffffda RBX: 00007f5a51be5fa0 RCX: 00007f5a5198f6c9 [ 1592.346465][T19323] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000005 [ 1592.346480][T19323] RBP: 00007f5a52773090 R08: 0000000000000004 R09: 0000000000000000 [ 1592.346496][T19323] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1592.346511][T19323] R13: 00007f5a51be6038 R14: 00007f5a51be5fa0 R15: 00007ffdfb6f4e68 [ 1592.346532][T19323] [ 1592.671675][T19327] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1592.713085][T19331] tipc: Enabling of bearer rejected, failed to enable media [ 1592.745882][ T36] audit: type=1400 audit(1763078353.250:464): avc: denied { setopt } for pid=19332 comm="syz.2.40158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1592.971364][T19356] Invalid logical block size (34372) [ 1593.067413][T19364] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1593.093506][T19366] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1593.304030][T19387] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1593.526010][T10522] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1593.687147][T10522] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1593.705976][T10522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1593.727341][T10522] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1593.755994][T10522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1593.775983][T10522] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1593.795698][T10522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.816792][T10522] usb 1-1: config 0 descriptor?? [ 1594.225882][T10522] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 1594.257503][T10522] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1594.449444][T19431] Invalid logical block size (34372) [ 1594.831500][T19451] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1594.863815][T19451] sel_write_load: 6 callbacks suppressed [ 1594.863847][T19451] SELinux: failed to load policy [ 1595.986658][T19471] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1596.006020][T19471] SELinux: failed to load policy [ 1596.306572][T28076] usb 1-1: USB disconnect, device number 78 [ 1596.536008][T10522] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1596.700553][T10522] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1596.725961][T10522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1596.759995][T10522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1596.786016][T10522] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1596.815967][T10522] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1596.845824][T10522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.876942][T10522] usb 3-1: config 0 descriptor?? [ 1596.991882][T19510] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1597.075537][T19523] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1597.085675][T19523] SELinux: failed to load policy [ 1597.292556][T10522] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 1597.312087][T10522] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1597.562656][T19542] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1597.571908][T19542] SELinux: failed to load policy [ 1598.282839][T19571] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1598.415366][T19576] FAULT_INJECTION: forcing a failure. [ 1598.415366][T19576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.429367][T19576] CPU: 0 UID: 0 PID: 19576 Comm: syz.0.40273 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1598.429411][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1598.429426][T19576] Call Trace: [ 1598.429435][T19576] [ 1598.429445][T19576] __dump_stack+0x21/0x30 [ 1598.429482][T19576] dump_stack_lvl+0x10c/0x190 [ 1598.429512][T19576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1598.429544][T19576] ? kernel_text_address+0xa9/0xe0 [ 1598.429575][T19576] dump_stack+0x19/0x20 [ 1598.429604][T19576] should_fail_ex+0x3d9/0x530 [ 1598.429629][T19576] should_fail+0xf/0x20 [ 1598.429650][T19576] should_fail_usercopy+0x1e/0x30 [ 1598.429675][T19576] _copy_from_user+0x22/0xb0 [ 1598.429705][T19576] ___sys_sendmsg+0x159/0x2a0 [ 1598.429744][T19576] ? __sys_sendmsg+0x280/0x280 [ 1598.429777][T19576] ? kstrtouint+0x78/0xf0 [ 1598.429805][T19576] __sys_sendmmsg+0x271/0x470 [ 1598.429840][T19576] ? __cfi___sys_sendmmsg+0x10/0x10 [ 1598.429879][T19576] ? __cfi_ksys_write+0x10/0x10 [ 1598.429902][T19576] __x64_sys_sendmmsg+0xa4/0xc0 [ 1598.429934][T19576] x64_sys_call+0xfec/0x2ee0 [ 1598.429989][T19576] do_syscall_64+0x58/0xf0 [ 1598.430016][T19576] ? clear_bhb_loop+0x50/0xa0 [ 1598.430039][T19576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1598.430061][T19576] RIP: 0033:0x7ff5a978f6c9 [ 1598.430078][T19576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1598.430096][T19576] RSP: 002b:00007ff5a81f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1598.430120][T19576] RAX: ffffffffffffffda RBX: 00007ff5a99e5fa0 RCX: 00007ff5a978f6c9 [ 1598.430136][T19576] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 1598.430151][T19576] RBP: 00007ff5a81f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.430165][T19576] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 1598.430180][T19576] R13: 00007ff5a99e6038 R14: 00007ff5a99e5fa0 R15: 00007ffecdc91868 [ 1598.430207][T19576] [ 1598.533991][T19580] tipc: Enabling of bearer rejected, failed to enable media [ 1598.733237][T19592] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1598.742690][T19592] SELinux: failed to load policy [ 1598.883373][T19602] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1598.892879][T19602] SELinux: failed to load policy [ 1598.975667][T19606] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1598.986672][T19606] SELinux: failed to load policy [ 1599.130969][T19619] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1599.142971][T19619] SELinux: failed to load policy [ 1599.306506][T29688] usb 3-1: USB disconnect, device number 90 [ 1599.611754][T19645] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1599.626009][T19645] SELinux: failed to load policy [ 1599.795143][T19653] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1599.814616][T19653] SELinux: failed to load policy [ 1599.860313][T19655] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1599.894835][T19655] SELinux: failed to load policy [ 1600.353578][T19681] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1600.368646][T19681] SELinux: failed to load policy [ 1600.406384][T19685] Invalid logical block size (34372) [ 1600.548102][T19697] tipc: Enabling of bearer rejected, failed to enable media [ 1600.741736][T19711] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1600.758118][T19711] SELinux: failed to load policy [ 1600.806361][T19713] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1601.149548][ T36] audit: type=1400 audit(1763078361.660:465): avc: denied { create } for pid=19731 comm="syz.3.40349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1601.189925][ T36] audit: type=1400 audit(1763078361.700:466): avc: denied { create } for pid=19731 comm="syz.3.40349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1601.519034][T19756] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1601.545972][T19756] SELinux: failed to load policy [ 1601.554757][T19760] tipc: Enabling of bearer rejected, failed to enable media [ 1601.887307][T19780] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1601.915981][T19780] SELinux: failed to load policy [ 1602.023835][T19784] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1602.249950][T19792] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1602.269870][T19792] SELinux: failed to load policy [ 1602.476594][T19802] Invalid logical block size (34372) [ 1603.449878][T19830] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1603.545686][T19841] 9pnet_fd: Insufficient options for proto=fd [ 1603.604060][T19848] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1603.613668][T19848] SELinux: failed to load policy [ 1603.679826][T19859] Invalid logical block size (34372) [ 1604.209623][T19869] Invalid logical block size (34372) [ 1604.232884][T19871] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1604.242379][T19871] SELinux: failed to load policy [ 1604.312289][T19877] 9pnet_fd: Insufficient options for proto=fd [ 1604.526031][T32394] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1604.706042][T32394] usb 6-1: Using ep0 maxpacket: 32 [ 1604.717222][T32394] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 1604.737942][T32394] usb 6-1: config 0 has no interface number 0 [ 1604.744929][T32394] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1604.780437][T32394] usb 6-1: config 0 interface 196 has no altsetting 0 [ 1604.798211][T32394] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1604.809829][T32394] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.832224][T32394] usb 6-1: Product: syz [ 1604.845685][T19919] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1604.845988][T32394] usb 6-1: Manufacturer: syz [ 1604.866198][T19919] SELinux: failed to load policy [ 1604.874455][T32394] usb 6-1: SerialNumber: syz [ 1604.887345][T32394] usb 6-1: config 0 descriptor?? [ 1604.905222][T19875] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1605.126623][T32394] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1605.135225][T32394] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 1605.171302][T32394] usb 6-1: USB disconnect, device number 31 [ 1605.223649][T19937] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1605.254975][T19937] SELinux: failed to load policy [ 1605.827103][T19957] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1606.327469][T19970] tipc: Enabling of bearer rejected, failed to enable media [ 1606.393639][T19976] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1606.402830][T19976] SELinux: failed to load policy [ 1606.781825][T19990] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1606.796720][T19990] SELinux: failed to load policy [ 1606.975867][T20006] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1607.199790][T20009] Invalid logical block size (34372) [ 1607.477151][T20015] Invalid logical block size (34372) [ 1607.596156][T20019] tipc: Enabling of bearer rejected, failed to enable media [ 1607.991733][T20057] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1608.002797][T20057] SELinux: failed to load policy [ 1608.656800][T20103] Invalid logical block size (34372) [ 1608.877832][T20117] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1608.905998][T20117] SELinux: failed to load policy [ 1609.326667][T20143] tipc: Enabling of bearer rejected, failed to enable media [ 1609.345959][T10522] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1609.507654][T10522] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1609.527088][T10522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1609.549247][T10522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1609.569331][T10522] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1609.595449][T10522] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1609.614644][T10522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.635274][T10522] usb 6-1: config 0 descriptor?? [ 1609.636262][T20159] Invalid logical block size (34372) [ 1609.683995][T20163] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1609.693560][T20163] SELinux: failed to load policy [ 1609.857011][T20177] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1609.866574][T20177] SELinux: failed to load policy [ 1610.052603][T10522] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1610.070358][T10522] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1610.653971][T20194] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1610.663416][T20194] SELinux: failed to load policy [ 1610.715968][T20202] Invalid logical block size (34372) [ 1610.906357][T20224] Invalid logical block size (34372) [ 1610.931556][T20226] Invalid logical block size (34372) [ 1611.535961][T20244] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1611.546015][T20244] SELinux: failed to load policy [ 1611.897849][T20273] SELinux: failed to load policy [ 1611.907194][T20275] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1611.930089][T20275] SELinux: failed to load policy [ 1612.036307][T20283] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1612.136369][T28076] usb 6-1: USB disconnect, device number 32 [ 1612.622964][T20308] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1612.632410][T20308] SELinux: failed to load policy [ 1612.987165][T20328] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1613.015960][T20328] SELinux: failed to load policy [ 1613.023238][T20332] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1613.046263][T20332] SELinux: failed to load policy [ 1613.083020][T20336] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1613.249019][T20351] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1613.259218][T20351] SELinux: failed to load policy [ 1613.282740][T20353] SELinux: failed to load policy [ 1613.531711][T20397] SELinux: failed to load policy [ 1613.609588][T20415] Invalid logical block size (34372) [ 1613.670067][T20427] tipc: Enabling of bearer rejected, failed to enable media [ 1613.692916][T20425] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1614.092523][T20466] tipc: Enabling of bearer rejected, failed to enable media [ 1614.610929][T20486] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1615.649762][T20524] Invalid logical block size (34372) [ 1615.826719][T20532] sel_write_load: 4 callbacks suppressed [ 1615.826743][T20532] SELinux: failed to load policy [ 1615.890690][T20542] SELinux: failed to load policy [ 1615.955546][T20554] SELinux: failed to load policy [ 1616.085131][T20566] SELinux: failed to load policy [ 1616.096329][T20568] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1616.105471][T20568] SELinux: failed to load policy [ 1616.473964][T20588] SELinux: failed to load policy [ 1616.591026][T20596] SELinux: failed to load policy [ 1617.310434][T20620] SELinux: failed to load policy [ 1618.536173][T20637] SELinux: failed to load policy [ 1618.839131][T20656] Invalid logical block size (34372) [ 1618.909834][T20662] SELinux: policydb version -1943948188 does not match my version range 15-33 [ 1618.934363][T20662] SELinux: failed to load policy [ 1619.149489][T20682] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1620.245825][T20747] Invalid logical block size (34372) [ 1620.322486][T20755] Invalid logical block size (34372) [ 1620.415514][T20765] Invalid logical block size (34372) [ 1620.916672][T20793] sel_write_load: 4 callbacks suppressed [ 1620.916701][T20793] SELinux: failed to load policy [ 1620.993937][T20795] Invalid logical block size (34372) [ 1622.525971][ T9] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1622.675965][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1622.682959][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1622.692111][ T9] usb 1-1: config 0 has no interface number 0 [ 1622.705957][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1622.724728][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1622.735041][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1622.745205][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.753572][ T9] usb 1-1: Product: syz [ 1622.758109][ T9] usb 1-1: Manufacturer: syz [ 1622.763214][ T9] usb 1-1: SerialNumber: syz [ 1622.776097][ T9] usb 1-1: config 0 descriptor?? [ 1622.783904][T20823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1623.004264][ T9] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1623.019488][ T9] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 1623.041696][ T9] usb 1-1: USB disconnect, device number 79 [ 1623.800479][T20898] Invalid logical block size (34372) [ 1623.842539][T20903] SELinux: failed to load policy [ 1623.870215][T20907] SELinux: failed to load policy [ 1623.878090][T20906] Invalid logical block size (34372) [ 1624.175986][T10522] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1624.357053][T10522] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1624.385970][T10522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1624.415998][T10522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1624.425817][T10522] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1624.462836][T10522] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1624.482545][T10522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.496829][T10522] usb 6-1: config 0 descriptor?? [ 1624.918082][T10522] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1624.942542][T10522] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1626.212831][T21006] SELinux: failed to load policy [ 1626.959357][T21031] SELinux: failed to load policy [ 1626.994374][T21038] Invalid logical block size (34372) [ 1627.016630][ T9] usb 6-1: USB disconnect, device number 33 [ 1627.255986][T10522] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1627.426122][T10522] usb 3-1: Using ep0 maxpacket: 32 [ 1627.447246][T10522] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1627.465993][T10522] usb 3-1: config 0 has no interface number 0 [ 1627.473466][T10522] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1627.506010][T10522] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1627.516014][T10522] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1627.526586][T10522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.535269][T10522] usb 3-1: Product: syz [ 1627.546181][T10522] usb 3-1: Manufacturer: syz [ 1627.551092][T10522] usb 3-1: SerialNumber: syz [ 1627.571333][T10522] usb 3-1: config 0 descriptor?? [ 1627.586469][T21040] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1627.819151][T10522] ipheth 3-1:0.196: Unable to find endpoints [ 1627.847378][T10522] usb 3-1: USB disconnect, device number 91 [ 1628.134773][T21075] Invalid logical block size (34372) [ 1628.213621][T21084] Invalid logical block size (34372) [ 1628.294742][T21093] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1628.346778][T21106] Invalid logical block size (34372) [ 1628.564694][T21152] SELinux: failed to load policy [ 1628.671856][T21174] SELinux: failed to load policy [ 1628.697784][T21180] Invalid logical block size (34372) [ 1628.879423][T21206] SELinux: failed to load policy [ 1629.065489][T21236] Invalid logical block size (34372) [ 1629.251794][T21250] SELinux: failed to load policy [ 1629.356840][T21258] Invalid logical block size (34372) [ 1629.437068][T21262] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1629.447038][T21266] SELinux: failed to load policy [ 1629.661601][T21277] SELinux: failed to load policy [ 1630.062116][T21299] SELinux: failed to load policy [ 1631.412049][T21345] msdos: Unknown parameter '\^!+“-'[//^!' [ 1631.419096][ T36] audit: type=1400 audit(1763078391.920:467): avc: denied { watch_reads } for pid=21344 comm="syz.3.41137" path="/504/file0" dev="tmpfs" ino=3124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1632.126229][ T9] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1632.306200][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1632.313824][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1632.335275][ T9] usb 3-1: config 0 has no interface number 0 [ 1632.345397][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1632.367138][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1632.385963][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1632.395409][ T9] usb 3-1: Product: syz [ 1632.400384][ T9] usb 3-1: Manufacturer: syz [ 1632.405810][ T9] usb 3-1: SerialNumber: syz [ 1632.416675][ T9] usb 3-1: config 0 descriptor?? [ 1632.625093][ T9] ipheth 3-1:0.196: Unable to find endpoints [ 1632.660519][ T9] usb 3-1: USB disconnect, device number 92 [ 1632.688862][T21400] SELinux: failed to load policy [ 1632.797310][T21412] SELinux: failed to load policy [ 1632.860334][T21418] SELinux: failed to load policy [ 1633.171759][T21434] SELinux: failed to load policy [ 1633.421095][T21462] SELinux: failed to load policy [ 1633.567829][T21481] Invalid logical block size (34372) [ 1633.569521][T21485] SELinux: failed to load policy [ 1633.627727][T21487] SELinux: failed to load policy [ 1633.872367][T21515] Invalid logical block size (34372) [ 1633.962390][T21523] SELinux: failed to load policy [ 1634.458350][T21553] SELinux: failed to load policy [ 1634.846533][ T36] audit: type=1400 audit(1763078395.350:468): avc: denied { mount } for pid=21578 comm="syz.5.41246" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1634.884701][ T36] audit: type=1400 audit(1763078395.360:469): avc: denied { remount } for pid=21578 comm="syz.5.41246" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1634.913257][ T36] audit: type=1400 audit(1763078395.390:470): avc: denied { unmount } for pid=18701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1636.718572][T21669] Invalid logical block size (34372) [ 1636.758238][T21672] SELinux: failed to load policy [ 1636.943991][T21691] Invalid logical block size (34372) [ 1637.636834][T21732] Invalid logical block size (34372) [ 1638.006943][T21753] sel_write_load: 2 callbacks suppressed [ 1638.006973][T21753] SELinux: failed to load policy [ 1638.464668][T21776] SELinux: failed to load policy [ 1638.486444][T21778] SELinux: failed to load policy [ 1638.787912][ T6281] bridge_slave_1: left allmulticast mode [ 1638.806082][ T6281] bridge_slave_1: left promiscuous mode [ 1638.812003][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.833423][ T6281] bridge_slave_0: left allmulticast mode [ 1638.846039][ T6281] bridge_slave_0: left promiscuous mode [ 1638.858605][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.996240][T21787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.003762][T21787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.011223][T21787] bridge_slave_0: entered allmulticast mode [ 1639.018303][T21787] bridge_slave_0: entered promiscuous mode [ 1639.025001][T21787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.045584][T21787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.054096][T21787] bridge_slave_1: entered allmulticast mode [ 1639.066491][T21787] bridge_slave_1: entered promiscuous mode [ 1639.078448][ T6281] veth1_macvtap: left promiscuous mode [ 1639.085017][ T6281] veth0_vlan: left promiscuous mode [ 1639.339160][ T36] audit: type=1400 audit(1763078399.850:471): avc: denied { associate } for pid=21810 comm="syz.0.41363" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1639.392541][ T36] audit: type=1400 audit(1763078399.890:472): avc: denied { execute } for pid=21807 comm="syz.0.41363" path="/cpuacct.usage_percpu" dev="rootfs" ino=554850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 1639.455137][T21787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.462367][T21787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.469752][T21787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.476944][T21787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.539621][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.557268][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.600332][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.607948][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.626607][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.634287][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.741701][T21787] veth0_vlan: entered promiscuous mode [ 1639.778302][T21787] veth1_macvtap: entered promiscuous mode [ 1639.907143][T21841] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3528312799 (7056625598 ns) > initial count (248188646 ns). Using initial count to start timer. [ 1639.931153][T21844] SELinux: failed to load policy [ 1640.203709][T21857] SELinux: failed to load policy [ 1640.208864][T21859] Invalid logical block size (34372) [ 1640.339799][T21871] SELinux: failed to load policy [ 1640.389866][T21875] SELinux: failed to load policy [ 1640.590910][T21901] SELinux: failed to load policy [ 1640.898076][T21919] 9pnet_fd: Insufficient options for proto=fd [ 1641.116852][ T8088] bridge_slave_1: left allmulticast mode [ 1641.122566][ T8088] bridge_slave_1: left promiscuous mode [ 1641.138447][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.164940][ T8088] bridge_slave_0: left allmulticast mode [ 1641.176022][ T8088] bridge_slave_0: left promiscuous mode [ 1641.192409][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.343101][T21939] SELinux: failed to load policy [ 1641.373011][T21915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.392687][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.410703][T21915] bridge_slave_0: entered allmulticast mode [ 1641.430253][T21915] bridge_slave_0: entered promiscuous mode [ 1641.447944][ T8088] veth1_macvtap: left promiscuous mode [ 1641.453600][ T8088] veth0_vlan: left promiscuous mode [ 1641.605765][T21915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.615944][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.623118][T21915] bridge_slave_1: entered allmulticast mode [ 1641.646524][T21915] bridge_slave_1: entered promiscuous mode [ 1641.800843][T21915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.808091][T21915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.815437][T21915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.822581][T21915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.831375][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1641.864963][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.872988][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.899572][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.907432][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.938375][T10937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.945800][T10937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.986646][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1641.993528][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1642.005783][ T10] usb 4-1: config 0 has no interface number 0 [ 1642.019417][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1642.027446][T21915] veth0_vlan: entered promiscuous mode [ 1642.048616][T21915] veth1_macvtap: entered promiscuous mode [ 1642.055545][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1642.065516][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.082120][ T10] usb 4-1: Product: syz [ 1642.090715][ T10] usb 4-1: Manufacturer: syz [ 1642.101913][ T10] usb 4-1: SerialNumber: syz [ 1642.116374][ T10] usb 4-1: config 0 descriptor?? [ 1642.147846][T21972] FAULT_INJECTION: forcing a failure. [ 1642.147846][T21972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.161232][T21972] CPU: 1 UID: 0 PID: 21972 Comm: syz.0.41408 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1642.161271][T21972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1642.161288][T21972] Call Trace: [ 1642.161296][T21972] [ 1642.161305][T21972] __dump_stack+0x21/0x30 [ 1642.161340][T21972] dump_stack_lvl+0x10c/0x190 [ 1642.161370][T21972] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1642.161400][T21972] ? kernel_text_address+0xa9/0xe0 [ 1642.161431][T21972] dump_stack+0x19/0x20 [ 1642.161460][T21972] should_fail_ex+0x3d9/0x530 [ 1642.161483][T21972] should_fail+0xf/0x20 [ 1642.161504][T21972] should_fail_usercopy+0x1e/0x30 [ 1642.161542][T21972] _copy_from_user+0x22/0xb0 [ 1642.161573][T21972] ___sys_sendmsg+0x159/0x2a0 [ 1642.161607][T21972] ? __sys_sendmsg+0x280/0x280 [ 1642.161640][T21972] ? kstrtouint+0x78/0xf0 [ 1642.161667][T21972] __sys_sendmmsg+0x271/0x470 [ 1642.161703][T21972] ? __cfi___sys_sendmmsg+0x10/0x10 [ 1642.161741][T21972] ? __cfi_ksys_write+0x10/0x10 [ 1642.161766][T21972] __x64_sys_sendmmsg+0xa4/0xc0 [ 1642.161799][T21972] x64_sys_call+0xfec/0x2ee0 [ 1642.161833][T21972] do_syscall_64+0x58/0xf0 [ 1642.161864][T21972] ? clear_bhb_loop+0x50/0xa0 [ 1642.161891][T21972] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1642.161916][T21972] RIP: 0033:0x7f6f4398f6c9 [ 1642.161935][T21972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1642.161956][T21972] RSP: 002b:00007f6f448c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1642.161983][T21972] RAX: ffffffffffffffda RBX: 00007f6f43be5fa0 RCX: 00007f6f4398f6c9 [ 1642.162002][T21972] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 1642.162017][T21972] RBP: 00007f6f448c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.162031][T21972] R10: 0000000000040040 R11: 0000000000000246 R12: 0000000000000001 [ 1642.162045][T21972] R13: 00007f6f43be6038 R14: 00007f6f43be5fa0 R15: 00007ffc5b4f7768 [ 1642.162063][T21972] [ 1642.420027][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 1642.436440][ T10] usb 4-1: USB disconnect, device number 76 [ 1642.484374][T21987] SELinux: failed to load policy [ 1643.366101][T22025] sel_write_load: 1 callbacks suppressed [ 1643.366128][T22025] SELinux: failed to load policy [ 1643.455509][T10937] veth1_macvtap: left promiscuous mode [ 1643.466704][T10937] veth0_vlan: left promiscuous mode [ 1643.657692][T22015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.667287][T22015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.686124][T22015] bridge_slave_0: entered allmulticast mode [ 1643.695348][T22015] bridge_slave_0: entered promiscuous mode [ 1643.702478][T22015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.709838][T22015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.717063][T22015] bridge_slave_1: entered allmulticast mode [ 1643.723556][T22015] bridge_slave_1: entered promiscuous mode [ 1643.901361][T22015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.908595][T22015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1643.915970][T22015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.923139][T22015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.014361][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.026967][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.059715][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.067347][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.119954][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.127234][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.174704][T22015] veth0_vlan: entered promiscuous mode [ 1644.206065][T22015] veth1_macvtap: entered promiscuous mode [ 1644.417895][T22077] SELinux: failed to load policy [ 1644.731675][T22093] Invalid logical block size (34372) [ 1644.880197][T22103] SELinux: failed to load policy [ 1644.967838][T22116] SELinux: failed to load policy [ 1645.017218][T22117] Invalid logical block size (34372) [ 1645.199257][T22141] SELinux: failed to load policy [ 1645.308434][T22149] SELinux: failed to load policy [ 1645.567378][T22163] SELinux: failed to load policy [ 1646.037100][T22180] SELinux: failed to load policy [ 1646.073982][T22182] SELinux: failed to load policy [ 1646.315173][T22212] SELinux: failed to load policy [ 1648.500232][T22366] sel_write_load: 7 callbacks suppressed [ 1648.500259][T22366] SELinux: failed to load policy [ 1648.638721][T22379] SELinux: failed to load policy [ 1648.720201][T22386] Invalid logical block size (34372) [ 1648.944361][T22402] SELinux: failed to load policy [ 1649.007672][T22406] SELinux: failed to load policy [ 1649.320888][T22418] SELinux: failed to load policy [ 1649.896324][T22454] SELinux: failed to load policy [ 1649.953207][T22462] SELinux: failed to load policy [ 1650.624205][T22508] SELinux: failed to load policy [ 1650.927471][T22530] SELinux: failed to load policy [ 1653.196070][T28076] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1653.355938][T28076] usb 4-1: Using ep0 maxpacket: 32 [ 1653.367046][T28076] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1653.375515][T28076] usb 4-1: config 0 has no interface number 0 [ 1653.388128][T28076] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1653.397402][T28076] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1653.407504][T28076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.415865][T28076] usb 4-1: Product: syz [ 1653.421995][T28076] usb 4-1: Manufacturer: syz [ 1653.430767][T28076] usb 4-1: SerialNumber: syz [ 1653.441348][T28076] usb 4-1: config 0 descriptor?? [ 1653.658481][T28076] ipheth 4-1:0.196: Unable to find endpoints [ 1653.682739][T28076] usb 4-1: USB disconnect, device number 77 [ 1653.958890][T22689] SELinux: failed to load policy [ 1656.616019][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1656.777154][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.788981][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1656.810516][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1656.830873][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1656.858949][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1656.869060][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.896354][ T10] usb 4-1: config 0 descriptor?? [ 1657.307780][ T10] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 1657.344040][ T10] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1659.109167][T23009] Invalid logical block size (34372) [ 1659.219125][T23023] SELinux: failed to load policy [ 1659.304541][T23036] Invalid logical block size (34372) [ 1659.376381][T28076] usb 4-1: USB disconnect, device number 78 [ 1659.549838][T23063] Invalid logical block size (34372) [ 1666.172861][T23422] Invalid logical block size (34372) [ 1677.279729][T23980] Invalid logical block size (34372) [ 1678.058103][T24014] Invalid logical block size (34372) [ 1684.146660][ T8088] bridge_slave_1: left allmulticast mode [ 1684.152644][ T8088] bridge_slave_1: left promiscuous mode [ 1684.166161][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.185183][ T8088] bridge_slave_0: left allmulticast mode [ 1684.204259][ T8088] bridge_slave_0: left promiscuous mode [ 1684.216724][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.418149][ T8088] veth1_macvtap: left promiscuous mode [ 1684.445999][ T8088] veth0_vlan: left promiscuous mode [ 1684.667121][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.675047][T24298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.695144][T24298] bridge_slave_0: entered allmulticast mode [ 1684.703436][T24298] bridge_slave_0: entered promiscuous mode [ 1684.711402][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.718718][T24298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.727475][T24298] bridge_slave_1: entered allmulticast mode [ 1684.734101][T24298] bridge_slave_1: entered promiscuous mode [ 1684.906944][T24298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.914293][T24298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.922005][T24298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.929233][T24298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.945212][ T8088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.953051][ T8088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.025491][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.032629][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.063399][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.070658][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.119126][T24298] veth0_vlan: entered promiscuous mode [ 1685.145999][T24298] veth1_macvtap: entered promiscuous mode [ 1692.147176][T30322] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1692.309058][T30322] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1692.327046][T30322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1692.355970][T30322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1692.376611][T30322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1692.405980][T30322] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1692.415231][T30322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.436952][T30322] usb 3-1: config 0 descriptor?? [ 1692.867770][T30322] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 1692.886394][T30322] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1694.866502][T28076] usb 3-1: USB disconnect, device number 93 [ 1702.359990][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.42990'. [ 1712.915930][T10522] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1713.080319][T10522] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1713.105940][T10522] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1713.135935][T10522] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1713.155253][T10522] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.174554][T10522] usb 1-1: config 0 descriptor?? [ 1713.190209][T10522] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1715.336747][T25888] netlink: 388 bytes leftover after parsing attributes in process `syz.3.43359'. [ 1715.683991][T28076] usb 1-1: USB disconnect, device number 80 [ 1725.866785][T10937] bridge_slave_1: left allmulticast mode [ 1725.872511][T10937] bridge_slave_1: left promiscuous mode [ 1725.884422][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.902404][T10937] bridge_slave_0: left allmulticast mode [ 1725.915921][T10937] bridge_slave_0: left promiscuous mode [ 1725.926250][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.072394][T10937] veth1_macvtap: left promiscuous mode [ 1726.086194][T10937] veth0_vlan: left promiscuous mode [ 1726.283864][T26353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.291105][T26353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.298766][T26353] bridge_slave_0: entered allmulticast mode [ 1726.306017][T26353] bridge_slave_0: entered promiscuous mode [ 1726.318599][T26353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.327530][T26353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.335163][T26353] bridge_slave_1: entered allmulticast mode [ 1726.342345][T26353] bridge_slave_1: entered promiscuous mode [ 1726.522251][T26353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.530842][T26353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.538923][T26353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.546195][T26353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.620021][T10937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.632469][T10937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.653283][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.660621][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.689618][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.696924][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.768270][T26353] veth0_vlan: entered promiscuous mode [ 1726.798729][T26353] veth1_macvtap: entered promiscuous mode