last executing test programs: 44m34.135362094s ago: executing program 2 (id=2675): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8908030400", 0x5) 44m34.067168321s ago: executing program 2 (id=2676): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400243, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100ff"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000200)={0x100000000, {0x1, 0x8, 0x8000, 0x3, 0x47}}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 44m34.066770041s ago: executing program 2 (id=2678): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4dfd, 0x80000, @empty, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0xc4) 44m34.029069285s ago: executing program 2 (id=2679): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x80020000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 44m33.950315293s ago: executing program 2 (id=2681): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x10c000) 44m33.886827279s ago: executing program 2 (id=2684): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) 44m33.851943863s ago: executing program 32 (id=2684): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x80}, 0x7}) 2.061159343s ago: executing program 3 (id=75040): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010025bd70007e48df250500000004009bfe94cbc86c4b422299a86f0380040025"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.011445938s ago: executing program 3 (id=75042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) 1.455153594s ago: executing program 0 (id=75049): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.453871504s ago: executing program 0 (id=75050): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010025bd70007e48df250500000004009bfe94cbc86c4b422299a86f0380040025"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.424034807s ago: executing program 0 (id=75051): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.039010055s ago: executing program 3 (id=75053): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010025bd70007e48df250500000004009b"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 860.777033ms ago: executing program 0 (id=75055): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) 719.141048ms ago: executing program 1 (id=75058): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (fail_nth: 6) 665.844543ms ago: executing program 4 (id=75060): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 599.17774ms ago: executing program 3 (id=75061): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f23, 0xb}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)}}], 0x1, 0x8014) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x9e, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x2}) 395.55332ms ago: executing program 0 (id=75062): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 362.342993ms ago: executing program 1 (id=75063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddb", @ANYBLOB], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 341.072986ms ago: executing program 4 (id=75064): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 306.939159ms ago: executing program 1 (id=75065): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 304.250719ms ago: executing program 4 (id=75066): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 239.083936ms ago: executing program 1 (id=75067): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f23, 0xb}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x9e, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x2}) 217.250898ms ago: executing program 4 (id=75068): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 207.532099ms ago: executing program 3 (id=75069): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f23, 0xb}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)}}], 0x1, 0x8014) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x9e, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 123.185177ms ago: executing program 1 (id=75070): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 122.899457ms ago: executing program 4 (id=75071): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010025bd70007e48df250500000004009bfe94cbc86c4b422299a86f0380040025"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 82.890561ms ago: executing program 4 (id=75072): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00', @ANYRES16=0x0, @ANYBLOB="010025bd70007e48df250500000004009bfe94cbc86c4b422299a86f0380040025"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 52.366465ms ago: executing program 1 (id=75073): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 899.45µs ago: executing program 0 (id=75074): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddb", @ANYBLOB], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 3 (id=75075): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) kernel console output (not intermixed with test programs): media [ 2611.574938][T20047] __nla_validate_parse: 11 callbacks suppressed [ 2611.574961][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69194'. [ 2611.880111][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69229'. [ 2612.279302][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69272'. [ 2612.288589][T20206] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69271'. [ 2612.475635][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69287'. [ 2612.943325][T20259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69298'. [ 2613.324858][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69302'. [ 2613.719791][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69312'. [ 2613.842780][T20293] netlink: 68 bytes leftover after parsing attributes in process `syz.0.69316'. [ 2614.724918][T20319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.69328'. [ 2616.851310][T20395] __nla_validate_parse: 2 callbacks suppressed [ 2616.851335][T20395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69365'. [ 2617.641725][T20418] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69378'. [ 2617.839300][T20441] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69388'. [ 2618.356510][ T331] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 2618.428726][T20494] netlink: 140 bytes leftover after parsing attributes in process `syz.4.69414'. [ 2618.527571][ T331] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 2618.535892][ T331] usb 1-1: config 8 has no interface number 0 [ 2618.552395][ T331] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2618.564090][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69417'. [ 2618.576450][ T331] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2618.599135][ T331] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2618.613322][ T331] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2618.626434][ T331] usb 1-1: Product: syz [ 2618.630654][ T331] usb 1-1: Manufacturer: syz [ 2618.645674][ T331] usb 1-1: SerialNumber: syz [ 2618.855596][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69419'. [ 2618.855746][T20510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69420'. [ 2618.878143][ T331] usb 1-1: USB disconnect, device number 90 [ 2618.985332][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69427'. [ 2619.341421][T20536] netlink: 140 bytes leftover after parsing attributes in process `syz.1.69434'. [ 2619.426355][T20540] netlink: 68 bytes leftover after parsing attributes in process `syz.0.69435'. [ 2619.876153][T20826] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2620.048871][T20826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2620.066090][T20826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2620.086089][T20826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2620.116109][T20826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2620.125220][T20826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.155034][T20826] usb 2-1: config 0 descriptor?? [ 2620.569684][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.586193][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.593670][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.615973][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.623458][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.646005][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.653560][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.675966][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.683776][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.705973][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.713518][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.735955][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.743416][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.761928][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.769627][T20826] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 2620.777523][T20826] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 2620.804210][T20826] plantronics 0003:047F:FFFF.004F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2620.847805][T20826] usb 2-1: USB disconnect, device number 100 [ 2620.859849][T20597] fido_id[20597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2622.007086][T20671] __nla_validate_parse: 10 callbacks suppressed [ 2622.007111][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69500'. [ 2623.671202][T20742] netlink: 68 bytes leftover after parsing attributes in process `syz.4.69535'. [ 2625.357159][T20810] netlink: 140 bytes leftover after parsing attributes in process `syz.3.69562'. [ 2625.416925][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69570'. [ 2625.726468][T20834] netlink: 140 bytes leftover after parsing attributes in process `syz.3.69579'. [ 2626.477686][T20866] netlink: 140 bytes leftover after parsing attributes in process `syz.4.69596'. [ 2626.497664][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69597'. [ 2626.585844][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69602'. [ 2626.747526][T20895] netlink: 68 bytes leftover after parsing attributes in process `syz.4.69609'. [ 2626.874219][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69615'. [ 2627.036786][T20933] __nla_validate_parse: 1 callbacks suppressed [ 2627.036812][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69628'. [ 2627.103112][T20942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69632'. [ 2627.726690][T21022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69672'. [ 2627.788685][T21026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69674'. [ 2627.959792][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69681'. [ 2628.135447][T21048] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69685'. [ 2628.185262][T21050] netlink: 68 bytes leftover after parsing attributes in process `syz.1.69686'. [ 2628.336395][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69692'. [ 2628.362729][T21062] netlink: 140 bytes leftover after parsing attributes in process `syz.1.69693'. [ 2628.749350][T21084] netlink: 140 bytes leftover after parsing attributes in process `syz.4.69703'. [ 2631.623319][ T31] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 2631.795066][ T31] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2631.808717][ T31] usb 5-1: config 8 has no interface number 0 [ 2631.839148][ T31] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2631.850333][ T31] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2631.884178][ T31] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2631.893349][ T31] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2631.901376][ T31] usb 5-1: Product: syz [ 2631.907456][ T31] usb 5-1: Manufacturer: syz [ 2631.912100][ T31] usb 5-1: SerialNumber: syz [ 2632.142621][ T31] usb 5-1: USB disconnect, device number 75 [ 2632.985061][T21359] __nla_validate_parse: 21 callbacks suppressed [ 2632.985087][T21359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69833'. [ 2633.937075][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69844'. [ 2634.378737][T21397] netlink: 140 bytes leftover after parsing attributes in process `syz.3.69857'. [ 2634.672616][T21939] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2634.853507][T21939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.867333][T21939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.887290][T21939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2634.916444][T21939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2634.935876][T21939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.954451][T21939] usb 4-1: config 0 descriptor?? [ 2635.010618][T21419] binder: Bad value for 'max' [ 2635.037415][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69870'. [ 2635.230538][T21439] binder: Bad value for 'max' [ 2635.372340][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.381874][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.399586][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.422407][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.442405][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.449852][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.467454][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.482398][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.500014][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.507659][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.522387][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.540014][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.550073][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.570263][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.582362][T21939] plantronics 0003:047F:FFFF.0050: unknown main item tag 0x0 [ 2635.590011][T21939] plantronics 0003:047F:FFFF.0050: No inputs registered, leaving [ 2635.614029][T21939] plantronics 0003:047F:FFFF.0050: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2635.653827][T21939] usb 4-1: USB disconnect, device number 80 [ 2636.115618][T21456] netlink: 140 bytes leftover after parsing attributes in process `syz.4.69886'. [ 2636.213221][T21460] netlink: 68 bytes leftover after parsing attributes in process `syz.3.69889'. [ 2636.270757][T21464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69891'. [ 2636.283773][T21466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69892'. [ 2636.364599][T21472] binder: Bad value for 'max' [ 2636.494644][T21482] netlink: 68 bytes leftover after parsing attributes in process `syz.4.69900'. [ 2636.582116][T21939] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2636.584418][T21492] netlink: 140 bytes leftover after parsing attributes in process `syz.4.69905'. [ 2636.753155][T21939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2636.782056][T21939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2636.802061][T21939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2636.822070][T21939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2636.841363][T21939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2636.862450][T21939] usb 4-1: config 0 descriptor?? [ 2637.269494][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.281985][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.289431][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.317161][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.331951][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.346630][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.361964][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.377137][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.384951][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.392588][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.400445][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.408900][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.419926][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.427902][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.444526][T21939] plantronics 0003:047F:FFFF.0051: unknown main item tag 0x0 [ 2637.462103][T21939] plantronics 0003:047F:FFFF.0051: No inputs registered, leaving [ 2637.479431][T21939] plantronics 0003:047F:FFFF.0051: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2637.537801][T21939] usb 4-1: USB disconnect, device number 81 [ 2638.316990][T21633] __nla_validate_parse: 9 callbacks suppressed [ 2638.317012][T21633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69974'. [ 2638.812460][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69993'. [ 2638.864241][T21677] netlink: 140 bytes leftover after parsing attributes in process `syz.3.69996'. [ 2638.957673][T21691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70003'. [ 2639.050609][T21703] netlink: 140 bytes leftover after parsing attributes in process `syz.3.70008'. [ 2639.937863][T21775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70045'. [ 2640.010727][T21783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70049'. [ 2640.131266][T11071] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 2640.292288][T11071] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 2640.312883][T11071] usb 1-1: config 8 has no interface number 0 [ 2640.322444][T11071] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2640.343561][T11071] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2640.372651][T11071] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2640.382509][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70063'. [ 2640.391208][T11071] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2640.401477][T11071] usb 1-1: Product: syz [ 2640.405676][T11071] usb 1-1: Manufacturer: syz [ 2640.420642][T11071] usb 1-1: SerialNumber: syz [ 2640.478786][T21815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.70058'. [ 2640.639770][T11071] usb 1-1: USB disconnect, device number 91 [ 2640.770911][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70084'. [ 2641.690893][ T31] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2641.862830][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2641.880829][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2641.890642][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2641.904268][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2641.913670][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.931108][ T31] usb 5-1: config 0 descriptor?? [ 2642.344873][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.360843][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.378477][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.390727][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.410743][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.430722][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.448155][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.470734][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.478221][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.497313][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.507398][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.535238][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.544766][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.555840][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.563308][ T31] plantronics 0003:047F:FFFF.0052: unknown main item tag 0x0 [ 2642.572824][ T31] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 2642.587425][ T31] plantronics 0003:047F:FFFF.0052: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2642.621628][ T31] usb 5-1: USB disconnect, device number 76 [ 2643.406875][T22109] __nla_validate_parse: 18 callbacks suppressed [ 2643.406900][T22109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70211'. [ 2643.450924][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70213'. [ 2643.618189][T22137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70225'. [ 2643.894526][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70249'. [ 2643.918647][T22185] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70232'. [ 2643.938040][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70251'. [ 2644.010920][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70258'. [ 2644.048613][T22213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70263'. [ 2644.358446][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70280'. [ 2644.462671][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70286'. [ 2645.060913][T30897] bridge_slave_1: left allmulticast mode [ 2645.066629][T30897] bridge_slave_1: left promiscuous mode [ 2645.073437][T30897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.091702][T30897] bridge_slave_0: left allmulticast mode [ 2645.097390][T30897] bridge_slave_0: left promiscuous mode [ 2645.120147][T30897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.270225][T30897] veth1_macvtap: left promiscuous mode [ 2645.275794][T30897] veth0_vlan: left promiscuous mode [ 2645.391319][T22285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.398400][T22285] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.439727][T22285] bridge_slave_0: entered allmulticast mode [ 2645.446286][T22285] bridge_slave_0: entered promiscuous mode [ 2645.462184][T22285] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.469256][T22285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.476476][T22285] bridge_slave_1: entered allmulticast mode [ 2645.490449][T22285] bridge_slave_1: entered promiscuous mode [ 2645.664221][T22285] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.671330][T22285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.678664][T22285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.685765][T22285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.711341][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.718858][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.736167][T30897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2645.743880][T30897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2645.772271][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2645.779349][T25920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2645.845430][T22285] veth0_vlan: entered promiscuous mode [ 2645.867916][T22285] veth1_macvtap: entered promiscuous mode [ 2647.409596][T11071] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 2647.593107][T11071] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 2647.608744][T11071] usb 2-1: config 8 has no interface number 0 [ 2647.625309][T11071] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2647.642737][T11071] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2647.675412][T11071] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2647.689443][T11071] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2647.697539][T11071] usb 2-1: Product: syz [ 2647.703720][T11071] usb 2-1: Manufacturer: syz [ 2647.717342][T11071] usb 2-1: SerialNumber: syz [ 2647.934474][T11071] usb 2-1: USB disconnect, device number 101 [ 2648.508748][T22584] __nla_validate_parse: 34 callbacks suppressed [ 2648.508773][T22584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70443'. [ 2648.661135][T22596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70449'. [ 2648.778153][T22604] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70454'. [ 2648.906185][T22615] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70458'. [ 2648.949699][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70460'. [ 2649.040299][T22628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70466'. [ 2649.370253][T22638] netlink: 68 bytes leftover after parsing attributes in process `syz.4.70470'. [ 2649.925653][T22644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70473'. [ 2650.100689][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70477'. [ 2650.200024][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70482'. [ 2653.508746][T22851] __nla_validate_parse: 16 callbacks suppressed [ 2653.508772][T22851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70569'. [ 2654.109661][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70584'. [ 2654.196710][T22871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70586'. [ 2654.551678][T22879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70590'. [ 2655.089970][T22901] netlink: 68 bytes leftover after parsing attributes in process `syz.4.70600'. [ 2655.231642][ T3200] bridge_slave_1: left allmulticast mode [ 2655.237590][ T3200] bridge_slave_1: left promiscuous mode [ 2655.243308][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.268186][ T3200] bridge_slave_0: left allmulticast mode [ 2655.287693][ T3200] bridge_slave_0: left promiscuous mode [ 2655.297741][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.307679][T22913] binder: Bad value for 'max' [ 2655.373712][T22921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.70610'. [ 2655.438278][T22927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70614'. [ 2655.457682][ T3200] veth1_macvtap: left promiscuous mode [ 2655.463261][ T3200] veth0_vlan: left promiscuous mode [ 2655.508743][T22931] binder: Bad value for 'max' [ 2655.579117][T22937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70619'. [ 2655.605083][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70620'. [ 2655.678349][T22899] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.685447][T22899] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.696027][T22899] bridge_slave_0: entered allmulticast mode [ 2655.708358][T22899] bridge_slave_0: entered promiscuous mode [ 2655.721828][T22899] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.730122][T22899] bridge0: port 2(bridge_slave_1) entered disabled state [ 2655.737294][T22899] bridge_slave_1: entered allmulticast mode [ 2655.744013][T22899] bridge_slave_1: entered promiscuous mode [ 2655.757146][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70627'. [ 2655.907909][T22899] bridge0: port 2(bridge_slave_1) entered blocking state [ 2655.915031][T22899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2655.922416][T22899] bridge0: port 1(bridge_slave_0) entered blocking state [ 2655.929498][T22899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2655.977658][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2655.995968][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2656.010930][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2656.018058][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2656.037560][ T3200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2656.044669][ T3200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2656.100584][T22899] veth0_vlan: entered promiscuous mode [ 2656.114508][T22899] veth1_macvtap: entered promiscuous mode [ 2656.447447][ T31] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 2656.608538][ T31] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 2656.616983][ T31] usb 4-1: config 8 has no interface number 0 [ 2656.627496][ T31] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2656.657605][ T31] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2656.680262][ T31] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2656.697332][ T31] usb 4-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2656.705376][ T31] usb 4-1: Product: syz [ 2656.715036][ T31] usb 4-1: Manufacturer: syz [ 2656.727344][ T31] usb 4-1: SerialNumber: syz [ 2656.951979][ T31] usb 4-1: USB disconnect, device number 82 [ 2657.259734][T23098] binder: Bad value for 'max' [ 2657.467480][T23124] binder: Bad value for 'max' [ 2658.679102][T23184] binder: Bad value for 'max' [ 2658.874238][T23206] __nla_validate_parse: 22 callbacks suppressed [ 2658.874262][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70746'. [ 2658.909488][T23208] binder: Bad value for 'max' [ 2659.021683][T23218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70753'. [ 2659.308062][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70763'. [ 2659.347538][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70764'. [ 2659.379116][T23244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.70765'. [ 2659.577406][T23256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70772'. [ 2659.656631][T20826] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 2659.699880][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70774'. [ 2659.807959][T20826] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 2659.826588][T20826] usb 1-1: config 8 has no interface number 0 [ 2659.833112][T20826] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2659.854173][T20826] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2659.877608][T20826] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2659.896564][T20826] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2659.904613][T20826] usb 1-1: Product: syz [ 2659.916582][T20826] usb 1-1: Manufacturer: syz [ 2659.921306][T20826] usb 1-1: SerialNumber: syz [ 2659.998100][T23275] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70776'. [ 2660.143541][T20826] usb 1-1: USB disconnect, device number 92 [ 2660.459471][T23282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70784'. [ 2660.735221][T23298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.70793'. [ 2663.927390][T23498] binder: Bad value for 'max' [ 2664.089102][T23512] __nla_validate_parse: 17 callbacks suppressed [ 2664.089141][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70901'. [ 2664.125613][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70902'. [ 2664.197540][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70906'. [ 2664.252662][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70909'. [ 2664.356117][T23538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70912'. [ 2664.437478][T23542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70914'. [ 2664.767692][T23560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70923'. [ 2664.899347][T23566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70926'. [ 2665.115511][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70932'. [ 2665.219002][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70935'. [ 2665.422373][T23614] binder: Bad value for 'max' [ 2665.648870][T23640] binder: Bad value for 'max' [ 2668.074632][ T6425] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 2668.235641][ T6425] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 2668.244037][ T6425] usb 1-1: config 8 has no interface number 0 [ 2668.260345][ T6425] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2668.291731][ T6425] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 2668.324607][ T6425] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2668.354001][ T6425] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2668.372268][ T6425] usb 1-1: Product: syz [ 2668.382488][ T6425] usb 1-1: Manufacturer: syz [ 2668.394536][ T6425] usb 1-1: SerialNumber: syz [ 2668.618846][ T6425] usb 1-1: USB disconnect, device number 93 [ 2669.246755][T23808] binder: Bad value for 'max' [ 2669.334941][T23814] __nla_validate_parse: 19 callbacks suppressed [ 2669.334966][T23814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71049'. [ 2669.417157][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71053'. [ 2669.486327][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71054'. [ 2669.525321][T23830] binder: Bad value for 'max' [ 2669.571490][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71058'. [ 2669.603596][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71060'. [ 2669.626530][T23840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71061'. [ 2669.734959][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71065'. [ 2669.800455][T23852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71068'. [ 2669.995035][T23864] netlink: 68 bytes leftover after parsing attributes in process `syz.3.71074'. [ 2670.124015][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71078'. [ 2670.706326][T23898] binder: Bad value for 'max' [ 2671.537430][ T3200] bridge_slave_1: left allmulticast mode [ 2671.543141][ T3200] bridge_slave_1: left promiscuous mode [ 2671.559995][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.568636][ T3200] bridge_slave_0: left allmulticast mode [ 2671.574594][ T3200] bridge_slave_0: left promiscuous mode [ 2671.580298][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.726232][ T3200] veth1_macvtap: left promiscuous mode [ 2671.739236][ T3200] veth0_vlan: left promiscuous mode [ 2671.910670][T23944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2671.931654][T23944] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.941365][T23944] bridge_slave_0: entered allmulticast mode [ 2671.956146][T23944] bridge_slave_0: entered promiscuous mode [ 2671.980535][T23944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2671.987688][T23944] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.009466][T23944] bridge_slave_1: entered allmulticast mode [ 2672.025893][T23944] bridge_slave_1: entered promiscuous mode [ 2672.175675][T23944] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.182941][T23944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.190298][T23944] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.197376][T23944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.263725][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2672.274578][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2672.295698][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2672.302810][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2672.354250][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2672.361340][T25920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2672.426055][T23944] veth0_vlan: entered promiscuous mode [ 2672.457957][T23944] veth1_macvtap: entered promiscuous mode [ 2673.442757][T24066] binder: Bad value for 'max' [ 2673.451305][T24051] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.458452][T24051] bridge0: port 1(bridge_slave_0) entered disabled state [ 2673.466940][T24051] bridge_slave_0: entered allmulticast mode [ 2673.473404][T24051] bridge_slave_0: entered promiscuous mode [ 2673.480008][T24051] bridge0: port 2(bridge_slave_1) entered blocking state [ 2673.487096][T24051] bridge0: port 2(bridge_slave_1) entered disabled state [ 2673.495569][T24051] bridge_slave_1: entered allmulticast mode [ 2673.502020][T24051] bridge_slave_1: entered promiscuous mode [ 2673.768230][T25920] bridge_slave_1: left allmulticast mode [ 2673.783285][T25920] bridge_slave_1: left promiscuous mode [ 2673.788975][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2673.819933][T25920] bridge_slave_0: left allmulticast mode [ 2673.835818][T25920] bridge_slave_0: left promiscuous mode [ 2673.841525][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2673.972755][T24051] bridge0: port 2(bridge_slave_1) entered blocking state [ 2673.979870][T24051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2673.987218][T24051] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.994291][T24051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2674.013636][T25920] veth1_macvtap: left promiscuous mode [ 2674.019175][T25920] veth0_vlan: left promiscuous mode [ 2674.154774][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2674.168397][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2674.201039][T30897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2674.208172][T30897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2674.235405][ T3200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2674.242514][ T3200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2674.315485][T24051] veth0_vlan: entered promiscuous mode [ 2674.331949][T24051] veth1_macvtap: entered promiscuous mode [ 2674.423233][T24134] __nla_validate_parse: 26 callbacks suppressed [ 2674.423255][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71198'. [ 2674.542096][T24142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71201'. [ 2674.679328][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71207'. [ 2674.688123][T24156] netlink: 68 bytes leftover after parsing attributes in process `syz.3.71208'. [ 2674.730230][T24160] binder: Bad value for 'max' [ 2674.847232][T24170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71216'. [ 2674.901558][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71217'. [ 2675.053876][T24186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71224'. [ 2675.143699][T24190] netlink: 140 bytes leftover after parsing attributes in process `syz.0.71219'. [ 2675.984257][T24202] netlink: 140 bytes leftover after parsing attributes in process `syz.3.71232'. [ 2676.214763][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71238'. [ 2676.825889][T24268] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=24268 comm=syz.1.71264 [ 2676.991261][T24282] binder: Bad value for 'max' [ 2678.982069][ T331] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2679.082537][T24440] overlayfs: conflicting lowerdir path [ 2679.153082][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2679.169617][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2679.179671][ T331] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2679.193188][ T331] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2679.202618][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2679.231215][ T331] usb 4-1: config 0 descriptor?? [ 2679.390881][T24472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2679.439816][T24482] __nla_validate_parse: 48 callbacks suppressed [ 2679.439841][T24482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71370'. [ 2679.457823][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71371'. [ 2679.467868][T24486] binder: Bad value for 'max' [ 2679.515079][T24494] netlink: 140 bytes leftover after parsing attributes in process `syz.4.71376'. [ 2679.543247][T24496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2679.617750][T24506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71382'. [ 2679.657232][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.666897][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.674564][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.691937][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.696040][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71387'. [ 2679.709796][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.718040][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.732044][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.739803][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71389'. [ 2679.749046][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.749088][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.781906][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.789656][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.807829][T24524] binder: Bad value for 'max' [ 2679.809873][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.830362][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.840473][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.849380][T24526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71392'. [ 2679.860688][ T331] plantronics 0003:047F:FFFF.0053: unknown main item tag 0x0 [ 2679.881104][ T331] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 2679.910842][ T331] plantronics 0003:047F:FFFF.0053: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2679.948095][ T331] usb 4-1: USB disconnect, device number 83 [ 2679.970127][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71394'. [ 2680.075970][T24536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71396'. [ 2680.229035][T24542] binder: Bad value for 'max' [ 2680.355606][T24548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71399'. [ 2680.509095][T24572] binder: Bad value for 'max' [ 2680.741665][ T331] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2680.892709][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2680.913509][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2680.932909][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2680.961622][ T331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2680.975139][T24598] binder: Bad value for 'max' [ 2680.987329][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.001831][ T331] usb 2-1: config 0 descriptor?? [ 2681.410217][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.431501][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.438973][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.461610][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.463936][T24624] binder: Bad value for 'max' [ 2681.469061][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.481475][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.488910][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.511471][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.518941][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.541459][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.549274][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.571476][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.578947][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.601450][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.608915][ T331] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 2681.631652][ T331] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 2681.646492][T24632] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.653995][ T331] plantronics 0003:047F:FFFF.0054: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2681.691437][ T331] usb 2-1: USB disconnect, device number 102 [ 2681.714870][T24633] fido_id[24633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2682.139654][T24661] binder: Bad value for 'max' [ 2682.144941][T24663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.385568][T24687] binder: Bad value for 'max' [ 2682.641194][ T331] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2682.812314][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2682.841156][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2682.850965][ T331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2682.881140][ T331] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2682.890242][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2682.921929][ T331] usb 5-1: config 0 descriptor?? [ 2683.332471][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.339946][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.359112][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.366614][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.374098][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.381630][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.389342][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.397007][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.406843][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.414902][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.423264][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.430800][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.438442][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.446145][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.454251][ T331] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 2683.463663][ T331] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 2683.491187][ T331] plantronics 0003:047F:FFFF.0055: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2683.592024][T20826] usb 5-1: USB disconnect, device number 77 [ 2684.652041][T24780] __nla_validate_parse: 23 callbacks suppressed [ 2684.652069][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71518'. [ 2684.730419][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71519'. [ 2684.814357][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71521'. [ 2684.872877][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71522'. [ 2684.892691][T24791] overlayfs: conflicting lowerdir path [ 2684.991480][T24799] bridge0: port 1(bridge_slave_0) entered disabled state [ 2685.057285][T24805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71530'. [ 2685.144773][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71535'. [ 2685.170909][T24817] netlink: 140 bytes leftover after parsing attributes in process `syz.0.71536'. [ 2685.196308][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71537'. [ 2685.252560][T24823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71539'. [ 2685.340880][T24827] overlayfs: conflicting lowerdir path [ 2685.347120][T24826] netlink: 140 bytes leftover after parsing attributes in process `syz.4.71527'. [ 2685.458852][T24835] binder: Bad value for 'max' [ 2685.921327][T24877] binder: Unknown parameter 'ma' [ 2686.110393][ T31] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 2686.230366][T24921] overlayfs: conflicting lowerdir path [ 2686.240361][ T31] usb 2-1: device descriptor read/64, error -71 [ 2686.480305][ T31] usb 2-1: device descriptor read/64, error -71 [ 2686.720256][ T31] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 2686.720786][T25007] binder: Bad value for 'max' [ 2686.860454][ T31] usb 2-1: device descriptor read/64, error -71 [ 2686.899395][T25029] binder: Bad value for 'max' [ 2687.110162][ T31] usb 2-1: device descriptor read/64, error -71 [ 2687.202941][T25071] bridge0: port 1(bridge_slave_0) entered disabled state [ 2687.220302][ T31] usb usb2-port1: attempt power cycle [ 2687.500676][T25113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2687.562469][ T31] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 2687.591094][ T31] usb 2-1: device descriptor read/8, error -71 [ 2687.741051][ T31] usb 2-1: device descriptor read/8, error -71 [ 2687.980925][ T31] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 2688.010987][ T31] usb 2-1: device descriptor read/8, error -71 [ 2688.132454][T25143] binder: Bad value for 'max' [ 2688.153498][ T31] usb 2-1: device descriptor read/8, error -71 [ 2688.271089][ T31] usb usb2-port1: unable to enumerate USB device [ 2688.545484][T25157] bridge0: port 1(bridge_slave_0) entered disabled state [ 2688.604239][T25159] binder: Bad value for 'max' [ 2688.726012][T25175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.212302][T25239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.259146][T25249] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.386264][T25263] bridge0: port 1(bridge_slave_0) entered disabled state [ 2689.764332][T25287] __nla_validate_parse: 64 callbacks suppressed [ 2689.764355][T25287] netlink: 68 bytes leftover after parsing attributes in process `syz.4.71761'. [ 2689.929913][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71774'. [ 2689.982405][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71775'. [ 2690.113442][T25303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71778'. [ 2690.170763][T25305] netlink: 68 bytes leftover after parsing attributes in process `syz.4.71779'. [ 2690.322923][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71784'. [ 2690.559431][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71785'. [ 2690.590020][T25323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.786808][T25343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71798'. [ 2690.849959][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71800'. [ 2691.221468][T25369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2691.389814][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71816'. [ 2692.398913][ T6425] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 2692.528909][ T6425] usb 4-1: device descriptor read/64, error -71 [ 2692.778870][ T6425] usb 4-1: device descriptor read/64, error -71 [ 2693.048758][ T6425] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 2693.198727][ T6425] usb 4-1: device descriptor read/64, error -71 [ 2693.414745][T25538] bridge0: port 1(bridge_slave_0) entered disabled state [ 2693.448672][ T6425] usb 4-1: device descriptor read/64, error -71 [ 2693.558823][ T6425] usb usb4-port1: attempt power cycle [ 2693.904511][T25576] bridge0: port 1(bridge_slave_0) entered disabled state [ 2693.918607][ T6425] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 2693.988048][ T6425] usb 4-1: device descriptor read/8, error -71 [ 2694.139795][ T6425] usb 4-1: device descriptor read/8, error -71 [ 2694.388490][ T6425] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 2694.429487][ T6425] usb 4-1: device descriptor read/8, error -71 [ 2694.559437][ T6425] usb 4-1: device descriptor read/8, error -71 [ 2694.644383][T25599] binder: Unknown parameter 'ma' [ 2694.668499][ T6425] usb usb4-port1: unable to enumerate USB device [ 2694.897356][T25604] __nla_validate_parse: 27 callbacks suppressed [ 2694.897381][T25604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.71927'. [ 2695.257186][T25622] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.334326][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71941'. [ 2695.442305][T25638] netlink: 68 bytes leftover after parsing attributes in process `syz.0.71946'. [ 2695.488751][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71948'. [ 2695.535952][T25651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.543218][T25652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.588017][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71955'. [ 2695.599973][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71957'. [ 2695.609225][T25662] netlink: 68 bytes leftover after parsing attributes in process `syz.3.71956'. [ 2695.631422][T25666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.71958'. [ 2695.638173][T20826] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 2695.680523][T25676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.687763][T25678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.719376][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71966'. [ 2695.738299][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71969'. [ 2695.793594][T25700] bridge0: port 1(bridge_slave_0) entered disabled state [ 2695.801844][T20826] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2695.817131][T20826] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2695.832126][T20826] usb 5-1: config 8 has no interface number 0 [ 2695.838634][T20826] usb 5-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2695.853448][T20826] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2695.864332][T20826] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2695.885637][T20826] usb 5-1: Product: syz [ 2695.890409][T20826] usb 5-1: Manufacturer: syz [ 2695.895122][T20826] usb 5-1: SerialNumber: syz [ 2695.903514][T20826] usb-storage 5-1:8.223: USB Mass Storage device detected [ 2695.993873][T25733] bridge0: port 1(bridge_slave_0) entered disabled state [ 2696.108501][T20826] usb 5-1: USB disconnect, device number 78 [ 2696.548620][T25814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2697.301857][T25874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2697.609717][T25892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2697.690117][T25896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.067711][T25961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25961 comm=syz.0.72104 [ 2699.471371][T25975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.695026][T25995] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.897295][T26001] __nla_validate_parse: 26 callbacks suppressed [ 2699.897426][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72124'. [ 2700.199769][T26015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72132'. [ 2700.319365][T26021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2700.604002][T26047] netlink: 140 bytes leftover after parsing attributes in process `syz.1.72146'. [ 2700.629811][T26049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72147'. [ 2700.737002][T20826] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 2700.766985][T26063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72154'. [ 2700.908737][T20826] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 2700.927108][T20826] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2700.947313][T20826] usb 4-1: config 8 has no interface number 0 [ 2700.961700][T20826] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 2700.986910][T20826] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2701.012488][T26077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.018370][T20826] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2701.029892][T20826] usb 4-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2701.049041][T20826] usb 4-1: Product: syz [ 2701.057048][T20826] usb 4-1: Manufacturer: syz [ 2701.061700][T20826] usb 4-1: SerialNumber: syz [ 2701.282141][T20826] usb 4-1: USB disconnect, device number 88 [ 2701.300900][T26090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.564889][T26112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72179'. [ 2701.733442][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72189'. [ 2701.776140][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72192'. [ 2701.798781][T26138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72191'. [ 2701.861796][T26150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26150 comm=syz.4.72197 [ 2701.930100][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72202'. [ 2702.059790][T26178] netlink: 'syz.3.72213': attribute type 37 has an invalid length. [ 2702.526746][T26254] netlink: 'syz.1.72249': attribute type 37 has an invalid length. [ 2702.679869][T26277] netlink: 'syz.0.72261': attribute type 37 has an invalid length. [ 2702.987545][T26325] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.115224][T26344] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.370739][T26382] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.522692][T26402] netlink: 'syz.3.72323': attribute type 37 has an invalid length. [ 2703.564455][T26406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2703.596347][ T31] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2703.766962][ T31] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 2703.775213][ T31] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2703.795703][ T31] usb 2-1: config 8 has no interface number 0 [ 2703.815911][ T31] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2703.836242][ T31] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2703.857649][ T31] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2703.867082][ T31] usb 2-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2703.875107][ T31] usb 2-1: Product: syz [ 2703.886228][ T31] usb 2-1: Manufacturer: syz [ 2703.890947][ T31] usb 2-1: SerialNumber: syz [ 2704.105430][ T31] usb 2-1: USB disconnect, device number 107 [ 2704.508760][T26471] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26471 comm=syz.0.72357 [ 2704.657021][T26493] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26493 comm=syz.0.72368 [ 2704.736029][T26505] netlink: 'syz.1.72374': attribute type 37 has an invalid length. [ 2704.838198][T26516] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26516 comm=syz.0.72379 [ 2704.976511][T26537] __nla_validate_parse: 37 callbacks suppressed [ 2704.976537][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72390'. [ 2705.127143][T26549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.195230][T26554] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.352029][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72407'. [ 2705.389343][T26577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72410'. [ 2705.427992][T26583] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.462242][T26589] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.530169][T26595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.619937][T26605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72424'. [ 2705.631746][T26607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.645900][T26609] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.656829][T26611] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.734267][T26623] netlink: 140 bytes leftover after parsing attributes in process `syz.0.72434'. [ 2705.800222][T26630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72438'. [ 2705.818043][T26633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2705.828519][T26631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72437'. [ 2705.853961][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72440'. [ 2705.959744][T26656] netlink: 140 bytes leftover after parsing attributes in process `syz.4.72447'. [ 2705.976402][T26655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.72449'. [ 2706.219878][T26689] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.615250][T26727] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.715718][ T6425] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 2706.844363][T26743] bridge0: port 1(bridge_slave_0) entered disabled state [ 2706.876980][ T6425] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2706.885415][ T6425] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2706.904867][ T6425] usb 5-1: config 8 has no interface number 0 [ 2706.911323][ T6425] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2706.924824][ T6425] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2706.939941][ T6425] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2706.953337][ T6425] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2706.967647][ T6425] usb 5-1: Product: syz [ 2706.971869][ T6425] usb 5-1: Manufacturer: syz [ 2706.985517][ T6425] usb 5-1: SerialNumber: syz [ 2707.200860][ T6425] usb 5-1: USB disconnect, device number 79 [ 2707.883423][T26801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.983316][T26817] bridge0: port 1(bridge_slave_0) entered disabled state [ 2708.144206][T26831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2709.352189][T26863] bridge0: port 1(bridge_slave_0) entered disabled state [ 2709.419279][T26865] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.197348][T26901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.261742][T26903] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.425724][T26911] __nla_validate_parse: 21 callbacks suppressed [ 2710.425751][T26911] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72579'. [ 2710.593826][T26925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.663067][T26930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72576'. [ 2710.675482][T26933] netlink: 68 bytes leftover after parsing attributes in process `syz.0.72588'. [ 2710.768622][T26945] netlink: 'syz.0.72594': attribute type 37 has an invalid length. [ 2710.792062][T26949] bridge0: port 1(bridge_slave_0) entered disabled state [ 2710.821127][T26951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72598'. [ 2710.855594][T26955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72600'. [ 2710.901380][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72603'. [ 2711.022692][T26970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72606'. [ 2711.078718][T26973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2711.237100][T26981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72612'. [ 2711.286446][T26983] netlink: 68 bytes leftover after parsing attributes in process `syz.3.72613'. [ 2712.086580][T26997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2712.265511][T27015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72629'. [ 2713.147654][T27047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.229826][T27051] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.276738][T27053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.323969][T27057] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.409923][T27065] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.579627][T27077] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.694859][T27087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.707327][T27090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.765755][T27099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.825976][T27105] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.873701][T27113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.930318][T27123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.001720][T27135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.035800][T27139] netlink: 'syz.4.72690': attribute type 37 has an invalid length. [ 2714.080017][T27143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.153883][T27153] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.183856][ T6425] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 2714.281064][T27169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.322023][T27175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.345049][ T6425] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 2714.362589][ T6425] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2714.382945][ T6425] usb 4-1: config 8 has no interface number 0 [ 2714.401873][ T6425] usb 4-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2714.415068][T27193] netlink: 'syz.1.72716': attribute type 37 has an invalid length. [ 2714.424724][ T6425] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2714.425373][T27192] netlink: 'syz.0.72717': attribute type 37 has an invalid length. [ 2714.433941][ T6425] usb 4-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2714.451844][ T6425] usb 4-1: Product: syz [ 2714.456616][ T6425] usb 4-1: Manufacturer: syz [ 2714.461567][ T6425] usb 4-1: SerialNumber: syz [ 2714.469811][ T6425] usb-storage 4-1:8.223: USB Mass Storage device detected [ 2714.503578][T27202] bridge0: port 1(bridge_slave_0) entered disabled state [ 2714.634891][T27217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27217 comm=syz.1.72728 [ 2714.672524][T24786] usb 4-1: USB disconnect, device number 89 [ 2714.860693][T27226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.065071][T27234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27234 comm=syz.1.72737 [ 2715.117329][T27236] netlink: 'syz.1.72738': attribute type 37 has an invalid length. [ 2715.186097][T27240] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.308251][T27250] netlink: 'syz.4.72736': attribute type 37 has an invalid length. [ 2715.382053][T27259] netlink: 'syz.3.72750': attribute type 37 has an invalid length. [ 2715.446810][T27270] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.512993][T27278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.554807][T27282] __nla_validate_parse: 11 callbacks suppressed [ 2715.554832][T27282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72760'. [ 2715.583612][T27284] netlink: 'syz.3.72761': attribute type 37 has an invalid length. [ 2715.765906][T27298] netlink: 'syz.4.72768': attribute type 37 has an invalid length. [ 2716.065526][T27310] netlink: 'syz.4.72775': attribute type 37 has an invalid length. [ 2716.330694][T27325] netlink: 68 bytes leftover after parsing attributes in process `syz.4.72783'. [ 2716.415723][T27330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27330 comm=syz.4.72784 [ 2716.526669][T27338] netlink: 'syz.4.72790': attribute type 37 has an invalid length. [ 2716.626427][T27348] netlink: 'syz.4.72794': attribute type 37 has an invalid length. [ 2717.123888][T30897] bridge_slave_1: left allmulticast mode [ 2717.129676][T30897] bridge_slave_1: left promiscuous mode [ 2717.143246][T30897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.161157][T30897] bridge_slave_0: left allmulticast mode [ 2717.170777][T30897] bridge_slave_0: left promiscuous mode [ 2717.183230][T30897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.287902][T27364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.72801'. [ 2717.309969][T27366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72803'. [ 2717.360122][T30897] veth1_macvtap: left promiscuous mode [ 2717.366316][T30897] veth0_vlan: left promiscuous mode [ 2717.433693][T27370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.442203][T27374] netlink: 'syz.1.72807': attribute type 37 has an invalid length. [ 2717.494032][T27358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.506231][T27358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.522402][T27358] bridge_slave_0: entered allmulticast mode [ 2717.529019][T27358] bridge_slave_0: entered promiscuous mode [ 2717.535666][T27387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72812'. [ 2717.544847][T27389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.72811'. [ 2717.558680][T27358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.578295][T27358] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.591994][T27358] bridge_slave_1: entered allmulticast mode [ 2717.594132][T27397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27397 comm=syz.3.72816 [ 2717.601114][T27358] bridge_slave_1: entered promiscuous mode [ 2717.616619][T27394] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72815'. [ 2717.722617][T27413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72824'. [ 2717.762631][T27421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27421 comm=syz.0.72826 [ 2717.776302][T27418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.799657][T27358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2717.806861][T27358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2717.814207][T27358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.821291][T27358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.823666][T27429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27429 comm=syz.0.72829 [ 2717.862644][T27427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72828'. [ 2717.893412][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2717.911164][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2717.929456][T27435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72832'. [ 2717.967235][T30897] bridge0: port 1(bridge_slave_0) entered blocking state [ 2717.974347][T30897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2717.994730][T30897] bridge0: port 2(bridge_slave_1) entered blocking state [ 2718.001822][T30897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2718.056702][T27358] veth0_vlan: entered promiscuous mode [ 2718.078036][T27358] veth1_macvtap: entered promiscuous mode [ 2718.377720][T27475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2718.562894][ T6425] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2718.673898][T27479] netlink: 'syz.1.72852': attribute type 37 has an invalid length. [ 2718.733871][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2718.745114][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2718.773280][ T6425] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2718.794182][ T6425] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2718.812831][ T6425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.840348][ T6425] usb 5-1: config 0 descriptor?? [ 2718.923131][T27491] netlink: 'syz.1.72859': attribute type 37 has an invalid length. [ 2718.976403][T27493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2719.018826][T27497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27497 comm=syz.3.72861 [ 2719.054880][T27501] netlink: 'syz.1.72864': attribute type 37 has an invalid length. [ 2719.095249][T27505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2719.175997][T27515] netlink: 'syz.1.72871': attribute type 37 has an invalid length. [ 2719.258198][T27521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27521 comm=syz.1.72873 [ 2719.292885][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.300349][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.317961][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.332720][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.350380][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.360487][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.378107][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.392673][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.410376][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.418754][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.426959][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.442721][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.454730][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.462560][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.470324][ T6425] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 2719.478785][ T6425] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 2719.505080][ T6425] plantronics 0003:047F:FFFF.0056: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2719.529325][ T6425] usb 5-1: USB disconnect, device number 80 [ 2719.550425][T27531] fido_id[27531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2719.564008][T27533] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.138746][T27558] bridge0: port 1(bridge_slave_0) entered disabled state [ 2720.994962][T27569] __nla_validate_parse: 7 callbacks suppressed [ 2720.994990][T27569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72898'. [ 2721.054722][T27571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72900'. [ 2721.291049][T27585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72905'. [ 2721.292706][T27587] netlink: 68 bytes leftover after parsing attributes in process `syz.0.72899'. [ 2721.343724][T27589] netlink: 'syz.3.72906': attribute type 37 has an invalid length. [ 2721.432674][T27595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2721.472676][T27597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72910'. [ 2721.597031][T27601] rust_binder: 1066: no such ref 3 [ 2721.612189][T27601] rust_binder: 1066: no such ref 1 [ 2721.617419][T27601] rust_binder: Write failure EFAULT in pid:1066 [ 2721.688565][T27605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.72914'. [ 2721.752395][T27607] netlink: 68 bytes leftover after parsing attributes in process `syz.3.72915'. [ 2722.442257][T27619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72922'. [ 2722.471434][T27621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72919'. [ 2722.494372][T27623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.72923'. [ 2722.519588][T27627] netlink: 'syz.0.72926': attribute type 37 has an invalid length. [ 2722.667358][T27643] FAULT_INJECTION: forcing a failure. [ 2722.667358][T27643] name failslab, interval 1, probability 0, space 0, times 0 [ 2722.694423][T27643] CPU: 1 UID: 0 PID: 27643 Comm: syz.0.72934 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2722.694463][T27643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2722.694480][T27643] Call Trace: [ 2722.694488][T27643] [ 2722.694498][T27643] __dump_stack+0x21/0x30 [ 2722.694537][T27643] dump_stack_lvl+0x10c/0x190 [ 2722.694569][T27643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2722.694602][T27643] ? __asan_memcpy+0x5a/0x80 [ 2722.694624][T27643] dump_stack+0x19/0x20 [ 2722.694654][T27643] should_fail_ex+0x3d9/0x530 [ 2722.694678][T27643] should_failslab+0xac/0x100 [ 2722.694705][T27643] kmem_cache_alloc_node_noprof+0x45/0x440 [ 2722.694729][T27643] ? kasan_save_alloc_info+0x40/0x50 [ 2722.694761][T27643] ? __alloc_skb+0x10c/0x370 [ 2722.694790][T27643] __alloc_skb+0x10c/0x370 [ 2722.694818][T27643] alloc_skb_with_frags+0xce/0x8b0 [ 2722.694847][T27643] ? __cfi_selinux_file_open+0x10/0x10 [ 2722.694877][T27643] sock_alloc_send_pskb+0x858/0x990 [ 2722.694912][T27643] ? __kasan_check_write+0x18/0x20 [ 2722.694950][T27643] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 2722.694984][T27643] ? __kernel_text_address+0x11/0x40 [ 2722.695013][T27643] ? unwind_get_return_address+0x51/0x90 [ 2722.695040][T27643] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2722.695075][T27643] ? arch_stack_walk+0x10b/0x170 [ 2722.695098][T27643] packet_sendmsg+0x38e6/0x56c0 [ 2722.695128][T27643] ? __asan_memcpy+0x5a/0x80 [ 2722.695151][T27643] ? __cfi_avc_has_perm+0x10/0x10 [ 2722.695183][T27643] ? kstrtouint_from_user+0xfb/0x150 [ 2722.695205][T27643] ? __x64_sys_openat+0x13a/0x170 [ 2722.695236][T27643] ? x64_sys_call+0xe69/0x2ee0 [ 2722.695271][T27643] ? selinux_socket_sendmsg+0x284/0x380 [ 2722.695306][T27643] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 2722.695358][T27643] ? __kasan_check_write+0x18/0x20 [ 2722.695391][T27643] ? check_stack_object+0x107/0x140 [ 2722.695413][T27643] ? __cfi_packet_sendmsg+0x10/0x10 [ 2722.695442][T27643] ? notify_change+0x40/0xee0 [ 2722.695477][T27643] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2722.695506][T27643] ? security_socket_sendmsg+0x33/0xd0 [ 2722.695529][T27643] __sys_sendto+0x66d/0x6f0 [ 2722.695560][T27643] ? __cfi___sys_sendto+0x10/0x10 [ 2722.695593][T27643] ? __kasan_check_write+0x18/0x20 [ 2722.695629][T27643] ? __cfi_ksys_write+0x10/0x10 [ 2722.695651][T27643] __x64_sys_sendto+0xe9/0x100 [ 2722.695683][T27643] x64_sys_call+0x2c2c/0x2ee0 [ 2722.695716][T27643] do_syscall_64+0x58/0xf0 [ 2722.695745][T27643] ? clear_bhb_loop+0x50/0xa0 [ 2722.695771][T27643] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2722.695796][T27643] RIP: 0033:0x7f386db8f6c9 [ 2722.695816][T27643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2722.695837][T27643] RSP: 002b:00007f386ea29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2722.695863][T27643] RAX: ffffffffffffffda RBX: 00007f386dde5fa0 RCX: 00007f386db8f6c9 [ 2722.695881][T27643] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 2722.695897][T27643] RBP: 00007f386ea29090 R08: 00002000000001c0 R09: 0000000000000014 [ 2722.695913][T27643] R10: 000000000404c800 R11: 0000000000000246 R12: 0000000000000001 [ 2722.695928][T27643] R13: 00007f386dde6038 R14: 00007f386dde5fa0 R15: 00007fffa5e713e8 [ 2722.695948][T27643] [ 2723.077211][T27654] netlink: 'syz.0.72938': attribute type 37 has an invalid length. [ 2723.113163][T27660] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.213901][T27671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.279236][T27679] netlink: 'syz.3.72951': attribute type 37 has an invalid length. [ 2723.364733][T27693] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.375536][T27694] netlink: 'syz.0.72956': attribute type 37 has an invalid length. [ 2723.594104][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.678143][T27724] netlink: 'syz.0.72971': attribute type 37 has an invalid length. [ 2723.724769][T27726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2723.772750][ T36] audit: type=1400 audit(2000002416.232:1448): avc: denied { map } for pid=27727 comm="syz.0.72973" path="socket:[891333]" dev="sockfs" ino=891333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2724.040313][T27742] netlink: 'syz.0.72980': attribute type 37 has an invalid length. [ 2724.113434][T27744] bridge0: port 1(bridge_slave_0) entered disabled state [ 2725.292333][T27774] netlink: 'syz.4.72995': attribute type 37 has an invalid length. [ 2725.763584][T27794] netlink: 'syz.1.73006': attribute type 37 has an invalid length. [ 2725.814925][T27796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27796 comm=syz.1.73007 [ 2726.576856][T27806] __nla_validate_parse: 21 callbacks suppressed [ 2726.576881][T27806] netlink: 68 bytes leftover after parsing attributes in process `syz.0.73012'. [ 2726.596561][T27808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73010'. [ 2726.677059][T27814] netlink: 'syz.0.73015': attribute type 37 has an invalid length. [ 2726.683085][T27816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27816 comm=syz.4.73016 [ 2726.862627][T27822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73021'. [ 2726.901319][T27824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73017'. [ 2726.916362][T27826] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73022'. [ 2727.038661][T27842] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73029'. [ 2727.156985][T27848] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73032'. [ 2727.755476][T27854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73038'. [ 2727.875558][T27864] netlink: 'syz.4.73042': attribute type 37 has an invalid length. [ 2727.876292][T27866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73041'. [ 2727.956563][T27873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73045'. [ 2727.996713][T27885] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.097224][T27899] netlink: 'syz.4.73056': attribute type 37 has an invalid length. [ 2728.139291][T27905] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.180650][T21939] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 2728.323212][T21939] usb 1-1: device descriptor read/64, error -71 [ 2728.422667][T27919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27919 comm=syz.4.73066 [ 2728.475444][T27921] netlink: 'syz.4.73067': attribute type 37 has an invalid length. [ 2728.570574][T21939] usb 1-1: device descriptor read/64, error -71 [ 2728.648573][T27929] bridge0: port 1(bridge_slave_0) entered disabled state [ 2728.736875][T27937] netlink: 'syz.1.73076': attribute type 37 has an invalid length. [ 2728.820484][T21939] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 2728.921316][T27967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27967 comm=syz.3.73090 [ 2728.980462][T21939] usb 1-1: device descriptor read/64, error -71 [ 2729.230416][T21939] usb 1-1: device descriptor read/64, error -71 [ 2729.340547][T21939] usb usb1-port1: attempt power cycle [ 2729.611460][T28059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2729.680297][T21939] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 2729.731390][T21939] usb 1-1: device descriptor read/8, error -71 [ 2729.812726][T28073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28073 comm=syz.3.73143 [ 2729.861276][T21939] usb 1-1: device descriptor read/8, error -71 [ 2729.897714][T28081] netlink: 'syz.4.73147': attribute type 37 has an invalid length. [ 2730.110197][T21939] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 2730.161209][T21939] usb 1-1: device descriptor read/8, error -71 [ 2730.200995][T30897] bridge_slave_1: left allmulticast mode [ 2730.206793][T30897] bridge_slave_1: left promiscuous mode [ 2730.212604][T30897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.220501][T30897] bridge_slave_0: left allmulticast mode [ 2730.226195][T30897] bridge_slave_0: left promiscuous mode [ 2730.232175][T30897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.291299][T21939] usb 1-1: device descriptor read/8, error -71 [ 2730.379628][T28101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28101 comm=syz.1.73156 [ 2730.402820][T21939] usb usb1-port1: unable to enumerate USB device [ 2730.415177][T28090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.426016][T28090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.443475][T28090] bridge_slave_0: entered allmulticast mode [ 2730.449947][T28090] bridge_slave_0: entered promiscuous mode [ 2730.467842][T30897] veth1_macvtap: left promiscuous mode [ 2730.474646][T30897] veth0_vlan: left promiscuous mode [ 2730.550778][T28090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.558070][T28090] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.582488][T28090] bridge_slave_1: entered allmulticast mode [ 2730.600245][T28090] bridge_slave_1: entered promiscuous mode [ 2730.743689][T28090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.750938][T28090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2730.758477][T28090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.765612][T28090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2730.809344][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2730.818731][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2730.832646][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2730.839847][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2730.848161][T25920] bridge0: port 2(bridge_slave_1) entered blocking state [ 2730.855315][T25920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2730.905752][T28120] netlink: 'syz.4.73162': attribute type 37 has an invalid length. [ 2730.917200][T28090] veth0_vlan: entered promiscuous mode [ 2730.949429][T28090] veth1_macvtap: entered promiscuous mode [ 2730.972063][T28124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28124 comm=syz.0.73164 [ 2731.098806][T28140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28140 comm=syz.3.73171 [ 2731.126843][T28144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28144 comm=syz.0.73173 [ 2731.417322][T28179] bridge0: port 1(bridge_slave_0) entered disabled state [ 2731.506298][T28188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28188 comm=syz.1.73194 [ 2731.621085][T28199] netlink: 'syz.4.73200': attribute type 37 has an invalid length. [ 2731.693731][T28202] __nla_validate_parse: 18 callbacks suppressed [ 2731.693754][T28202] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73202'. [ 2731.769922][T28206] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73204'. [ 2731.842610][T28212] netlink: 'syz.4.73207': attribute type 37 has an invalid length. [ 2731.941044][T28218] netlink: 'syz.1.73210': attribute type 37 has an invalid length. [ 2732.173660][T28228] netlink: 'syz.1.73217': attribute type 37 has an invalid length. [ 2732.430840][T28240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73221'. [ 2733.072426][T28250] netlink: 'syz.4.73226': attribute type 37 has an invalid length. [ 2733.132374][T28256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73230'. [ 2733.260880][T28264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73235'. [ 2733.424201][T28274] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.517243][T28282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73243'. [ 2733.602744][T28284] netlink: 'syz.1.73244': attribute type 37 has an invalid length. [ 2733.647845][T28287] netlink: 'syz.1.73245': attribute type 37 has an invalid length. [ 2733.666093][T28288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2733.700247][T28290] netlink: 'syz.1.73246': attribute type 37 has an invalid length. [ 2733.759849][T28296] netlink: 'syz.1.73249': attribute type 37 has an invalid length. [ 2733.819410][T28298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73250'. [ 2733.893036][T28303] netlink: 'syz.3.73253': attribute type 37 has an invalid length. [ 2733.974235][T28305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73254'. [ 2734.269859][ T3200] bridge_slave_1: left allmulticast mode [ 2734.275629][ T3200] bridge_slave_1: left promiscuous mode [ 2734.281620][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.289558][ T3200] bridge_slave_0: left allmulticast mode [ 2734.295356][ T3200] bridge_slave_0: left promiscuous mode [ 2734.301587][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2734.372562][T28307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73255'. [ 2734.411968][T28316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2734.422629][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73260'. [ 2734.440132][ T3200] veth1_macvtap: left promiscuous mode [ 2734.445699][ T3200] veth0_vlan: left promiscuous mode [ 2734.604364][T28308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2734.611703][T28308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2734.618854][T28308] bridge_slave_0: entered allmulticast mode [ 2734.625735][T28308] bridge_slave_0: entered promiscuous mode [ 2734.636712][T28341] bridge0: port 1(bridge_slave_0) entered disabled state [ 2734.649298][T28308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2734.666534][T28308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2734.686781][T28308] bridge_slave_1: entered allmulticast mode [ 2734.698168][T28308] bridge_slave_1: entered promiscuous mode [ 2734.705640][T28345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28345 comm=syz.0.73272 [ 2734.781646][T28347] netlink: 'syz.0.73273': attribute type 37 has an invalid length. [ 2734.864571][T28355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28355 comm=syz.0.73277 [ 2734.925158][T28308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2734.932277][T28308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2734.939614][T28308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2734.946755][T28308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2735.021735][T28367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28367 comm=syz.0.73280 [ 2735.034466][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.049608][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2735.064709][ T3200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2735.071833][ T3200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2735.090276][ T3200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2735.097363][ T3200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2735.120135][T28369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.165704][T28308] veth0_vlan: entered promiscuous mode [ 2735.196698][T28308] veth1_macvtap: entered promiscuous mode [ 2735.411459][T28381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.464635][T28385] bridge0: port 1(bridge_slave_0) entered disabled state [ 2735.719425][T28403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28403 comm=syz.4.73297 [ 2736.750657][T28433] __nla_validate_parse: 12 callbacks suppressed [ 2736.750681][T28433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73304'. [ 2736.772871][T28435] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73314'. [ 2736.825541][T28437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28437 comm=syz.3.73315 [ 2736.889602][T28445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73318'. [ 2736.933260][T28449] bridge0: port 1(bridge_slave_0) entered disabled state [ 2737.006276][T28455] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73323'. [ 2737.015667][T28457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73324'. [ 2737.059716][T28459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28459 comm=syz.4.73326 [ 2737.065519][T28461] validate_nla: 6 callbacks suppressed [ 2737.065544][T28461] netlink: 'syz.3.73325': attribute type 37 has an invalid length. [ 2737.119335][T28463] netlink: 'syz.4.73327': attribute type 37 has an invalid length. [ 2737.170835][T28469] bridge0: port 1(bridge_slave_0) entered disabled state [ 2737.276727][T28479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28479 comm=syz.4.73335 [ 2737.336949][T28485] netlink: 'syz.4.73338': attribute type 37 has an invalid length. [ 2737.560787][T28495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73344'. [ 2737.778509][T28501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73342'. [ 2737.954718][T28511] netlink: 'syz.0.73352': attribute type 37 has an invalid length. [ 2738.008652][T28513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73353'. [ 2738.047467][T28515] netlink: 'syz.1.73347': attribute type 37 has an invalid length. [ 2738.068466][T28517] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73355'. [ 2738.246269][T28533] netlink: 'syz.0.73362': attribute type 37 has an invalid length. [ 2738.256672][T28529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28529 comm=syz.1.73361 [ 2738.300914][T28537] netlink: 'syz.0.73364': attribute type 37 has an invalid length. [ 2738.422409][T28547] netlink: 68 bytes leftover after parsing attributes in process `syz.0.73369'. [ 2738.489586][T28551] netlink: 'syz.1.73372': attribute type 37 has an invalid length. [ 2738.704914][T28572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28572 comm=syz.1.73382 [ 2738.749513][T28575] netlink: 'syz.0.73383': attribute type 37 has an invalid length. [ 2738.968290][T28593] netlink: 'syz.0.73393': attribute type 37 has an invalid length. [ 2739.023359][T28598] bridge0: port 1(bridge_slave_0) entered disabled state [ 2741.242259][T28729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28729 comm=syz.3.73461 [ 2742.151190][T28751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28751 comm=syz.1.73471 [ 2742.402026][T28765] __nla_validate_parse: 28 callbacks suppressed [ 2742.402050][T28765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73479'. [ 2742.457710][T28767] validate_nla: 3 callbacks suppressed [ 2742.457734][T28767] netlink: 'syz.3.73480': attribute type 37 has an invalid length. [ 2742.506022][T28769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28769 comm=syz.1.73481 [ 2742.702219][T28791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28791 comm=syz.3.73492 [ 2742.735405][T28793] netlink: 'syz.1.73493': attribute type 37 has an invalid length. [ 2742.798379][T28797] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73495'. [ 2742.848060][T28801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73497'. [ 2743.208883][T28829] netlink: 'syz.1.73510': attribute type 37 has an invalid length. [ 2743.428616][T28841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28841 comm=syz.1.73517 [ 2743.719958][T28863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73528'. [ 2743.789885][T28869] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28869 comm=syz.0.73531 [ 2744.159039][T28885] netlink: 'syz.4.73538': attribute type 37 has an invalid length. [ 2744.209618][T28887] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73539'. [ 2745.160495][T28901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2745.187660][T28903] netlink: 68 bytes leftover after parsing attributes in process `syz.0.73548'. [ 2745.229254][T28905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73549'. [ 2745.247043][T28907] netlink: 'syz.0.73550': attribute type 37 has an invalid length. [ 2745.329862][T28913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73553'. [ 2745.457052][T28921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28921 comm=syz.0.73556 [ 2745.543490][T28925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73558'. [ 2745.600426][T28927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73559'. [ 2746.784965][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.169694][T28977] __nla_validate_parse: 3 callbacks suppressed [ 2748.169718][T28977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73584'. [ 2748.238269][T28979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2748.289970][T28985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73589'. [ 2748.308111][T28987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73590'. [ 2748.434593][T29000] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73598'. [ 2748.485253][T29005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73600'. [ 2748.499554][T29008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73601'. [ 2748.668788][T29031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73611'. [ 2748.700123][T29033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73612'. [ 2748.717261][T29035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.73614'. [ 2748.744620][T29040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73615'. [ 2749.106431][ T3200] bridge_slave_1: left allmulticast mode [ 2749.112697][ T3200] bridge_slave_1: left promiscuous mode [ 2749.122916][ T3200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.136392][ T3200] bridge_slave_0: left allmulticast mode [ 2749.152299][ T3200] bridge_slave_0: left promiscuous mode [ 2749.165949][ T3200] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.303911][ T3200] veth1_macvtap: left promiscuous mode [ 2749.316112][ T3200] veth0_vlan: left promiscuous mode [ 2749.432066][T29051] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.449386][T29051] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.469657][T29051] bridge_slave_0: entered allmulticast mode [ 2749.486326][T29051] bridge_slave_0: entered promiscuous mode [ 2749.503212][T29051] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.515746][T29051] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.533090][T29051] bridge_slave_1: entered allmulticast mode [ 2749.543636][T29051] bridge_slave_1: entered promiscuous mode [ 2749.720821][T29051] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.727932][T29051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2749.735298][T29051] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.742432][T29051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2749.790241][T29066] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.834075][T30897] bridge0: port 1(bridge_slave_0) entered disabled state [ 2749.841854][T30897] bridge0: port 2(bridge_slave_1) entered disabled state [ 2749.870479][T25920] bridge0: port 1(bridge_slave_0) entered blocking state [ 2749.877687][T25920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2749.897736][T30897] bridge0: port 2(bridge_slave_1) entered blocking state [ 2749.904830][T30897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2749.949655][T29051] veth0_vlan: entered promiscuous mode [ 2749.967393][T29051] veth1_macvtap: entered promiscuous mode [ 2750.211944][T29132] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.251034][T29142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.335068][T29156] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.575298][T29176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.658017][T29186] bridge0: port 1(bridge_slave_0) entered disabled state [ 2750.931975][T29206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.456633][T29278] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.468033][T29282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.515237][ T331] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 2752.577586][T29304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.665441][ T331] usb 5-1: no configurations [ 2752.670195][ T331] usb 5-1: can't read configurations, error -22 [ 2752.815492][ T331] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 2752.968026][T29322] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.975494][ T331] usb 5-1: no configurations [ 2752.984967][ T331] usb 5-1: can't read configurations, error -22 [ 2752.995561][ T331] usb usb5-port1: attempt power cycle [ 2753.195157][T29332] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.289903][T29338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29338 comm=syz.0.73755 [ 2753.305363][T29336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.330274][T29344] __nla_validate_parse: 29 callbacks suppressed [ 2753.330298][T29344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73761'. [ 2753.346550][ T331] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 2753.365600][ T331] usb 5-1: no configurations [ 2753.370350][ T331] usb 5-1: can't read configurations, error -22 [ 2753.401823][T29354] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.426122][T29356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73767'. [ 2753.504885][ T331] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 2753.522364][T29368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29368 comm=syz.3.73773 [ 2753.525628][ T331] usb 5-1: no configurations [ 2753.539661][ T331] usb 5-1: can't read configurations, error -22 [ 2753.546796][ T331] usb usb5-port1: unable to enumerate USB device [ 2753.616334][T29374] bridge0: port 1(bridge_slave_0) entered disabled state [ 2753.915651][T29386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29386 comm=syz.3.73782 [ 2754.135645][T29392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29392 comm=syz.1.73783 [ 2754.338989][T29408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.367159][T29412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73795'. [ 2754.378038][T29414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73796'. [ 2754.416215][T29416] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73797'. [ 2754.480828][T29422] netlink: 68 bytes leftover after parsing attributes in process `syz.1.73800'. [ 2754.626566][T29430] bridge0: port 1(bridge_slave_0) entered disabled state [ 2754.724815][T29434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29434 comm=syz.3.73802 [ 2754.905825][T29442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.73810'. [ 2755.060379][T29448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.135157][T29452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73811'. [ 2755.204967][T29458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73818'. [ 2755.255210][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.346842][T29467] bridge0: port 1(bridge_slave_0) entered disabled state [ 2755.456322][T29475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73828'. [ 2756.036890][T29537] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.321545][T29577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29577 comm=syz.1.73878 [ 2756.520483][T29599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=29599 comm=syz.0.73889 [ 2757.015305][T29654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2757.467711][T29711] bridge0: port 1(bridge_slave_0) entered disabled state [ 2757.915407][T29771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29771 comm=syz.4.73974 [ 2757.937665][T29773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2758.225476][T29801] netlink: 'syz.4.73990': attribute type 37 has an invalid length. [ 2758.445702][T29811] __nla_validate_parse: 33 callbacks suppressed [ 2758.445725][T29811] netlink: 68 bytes leftover after parsing attributes in process `syz.4.73996'. [ 2758.514375][T29815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73997'. [ 2759.677559][T29853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74017'. [ 2760.053376][T20826] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 2760.214427][T20826] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2760.233333][T20826] usb 5-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 2760.251518][T20826] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2760.263315][T20826] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2760.280391][T20826] usb 5-1: Product: syz [ 2760.293308][T20826] usb 5-1: Manufacturer: syz [ 2760.298046][T20826] usb 5-1: SerialNumber: syz [ 2760.408316][T29866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74021'. [ 2760.432605][T29868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29868 comm=syz.1.74022 [ 2760.516415][T20826] usb 5-1: USB disconnect, device number 85 [ 2760.532423][T29874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74024'. [ 2760.608644][T29884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29884 comm=syz.1.74030 [ 2760.667149][T29892] bridge0: port 1(bridge_slave_0) entered disabled state [ 2760.806881][T29908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29908 comm=syz.1.74041 [ 2760.848633][T29910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29910 comm=syz.3.74042 [ 2760.884453][T29916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74045'. [ 2761.125996][T29936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74055'. [ 2761.155741][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74056'. [ 2761.386951][T29955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74066'. [ 2761.413162][T29956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74065'. [ 2761.465034][T29959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29959 comm=syz.3.74067 [ 2761.534304][T29968] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.647919][T29978] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.713715][T29986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29986 comm=syz.3.74081 [ 2762.004092][T30004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30004 comm=syz.1.74089 [ 2762.851181][T30014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30014 comm=syz.3.74092 [ 2762.952926][T30016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30016 comm=syz.3.74097 [ 2763.010707][T30022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2763.832258][T30042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30042 comm=syz.0.74108 [ 2763.975242][T30050] bridge0: port 1(bridge_slave_0) entered disabled state [ 2764.115035][T30056] __nla_validate_parse: 5 callbacks suppressed [ 2764.115062][T30056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74118'. [ 2764.211078][T30062] netlink: 68 bytes leftover after parsing attributes in process `syz.0.74120'. [ 2764.373911][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74132'. [ 2764.411841][T30094] bridge0: port 1(bridge_slave_0) entered disabled state [ 2764.592362][T20826] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2764.753381][T20826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.762384][T11071] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 2764.772298][T20826] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2764.791513][T20826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2764.810967][T20826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2764.820202][T20826] usb 2-1: config 0 descriptor?? [ 2764.913344][T11071] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2764.921577][T11071] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2764.941927][T11071] usb 5-1: config 8 has no interface number 0 [ 2764.963558][T11071] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2764.972779][T11071] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2764.980888][T11071] usb 5-1: Product: syz [ 2764.992255][T11071] usb 5-1: Manufacturer: syz [ 2765.002612][T11071] usb 5-1: SerialNumber: syz [ 2765.187783][T30120] bridge0: port 1(bridge_slave_0) entered disabled state [ 2765.216221][T11071] usb 5-1: USB disconnect, device number 86 [ 2765.235327][T20826] usb 2-1: string descriptor 0 read error: -71 [ 2765.254506][T20826] usb 2-1: USB disconnect, device number 108 [ 2765.932206][T30167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74157'. [ 2765.996635][T30175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74173'. [ 2766.103161][T24786] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2766.253054][T24786] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2766.273712][T24786] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2766.280257][T30193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74182'. [ 2766.301978][T24786] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2766.326842][T24786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2766.343044][T24786] usb 2-1: config 0 descriptor?? [ 2766.359160][T24786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2766.388134][T30197] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74184'. [ 2766.501969][T30201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74187'. [ 2766.610221][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2766.676755][T30217] selinux_netlink_send: 2 callbacks suppressed [ 2766.676779][T30217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30217 comm=syz.4.74195 [ 2766.739815][T30225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74199'. [ 2766.795500][T30231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74191'. [ 2766.962455][T30246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30246 comm=syz.0.74208 [ 2767.172626][T30254] bridge0: port 1(bridge_slave_0) entered disabled state [ 2767.466304][T30269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30269 comm=syz.4.74216 [ 2768.208908][T30289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=30289 comm=syz.0.74230 [ 2768.283090][T30291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2768.821401][T20826] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 2768.891376][T24786] usb 2-1: USB disconnect, device number 109 [ 2768.992428][T20826] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 2769.000742][T20826] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2769.031340][T20826] usb 5-1: config 8 has no interface number 0 [ 2769.051741][T20826] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2769.070984][T20826] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2769.079326][T20826] usb 5-1: Product: syz [ 2769.091323][T20826] usb 5-1: Manufacturer: syz [ 2769.101193][T20826] usb 5-1: SerialNumber: syz [ 2769.234549][T30333] __nla_validate_parse: 7 callbacks suppressed [ 2769.234574][T30333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74252'. [ 2769.314431][T30341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74256'. [ 2769.323887][T20826] usb 5-1: USB disconnect, device number 87 [ 2769.951017][T30374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74272'. [ 2770.003636][T30379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74274'. [ 2770.243330][T30393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74283'. [ 2770.318950][T30401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74286'. [ 2770.502096][T30421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74295'. [ 2770.562340][T30427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74298'. [ 2770.832568][T30449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74309'. [ 2770.881498][T30454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30454 comm=syz.3.74312 [ 2771.573139][T30503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74336'. [ 2771.685214][T30509] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.742655][T30511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30511 comm=syz.0.74341 [ 2772.512024][T30558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30558 comm=syz.3.74364 [ 2772.649618][T30563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30563 comm=syz.3.74366 [ 2774.175557][T30593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30593 comm=syz.0.74381 [ 2774.930351][T30623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30623 comm=syz.1.74397 [ 2775.672673][T30673] __nla_validate_parse: 2 callbacks suppressed [ 2775.672698][T30673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74422'. [ 2775.737033][T30676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74416'. [ 2776.699746][ T331] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2776.850678][ T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2776.873184][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2776.886978][ T331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2776.896717][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2776.915076][ T331] usb 2-1: config 0 descriptor?? [ 2776.924540][ T331] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2777.161060][T30763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74466'. [ 2777.213478][T30769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30769 comm=syz.4.74467 [ 2777.501412][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74483'. [ 2777.560422][T30802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74484'. [ 2778.139300][T20826] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 2778.330359][T20826] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 2778.341980][T20826] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2778.362532][T20826] usb 1-1: config 8 has no interface number 0 [ 2778.374815][T20826] usb 1-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2778.402868][T20826] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 2778.412231][T20826] usb 1-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 2778.420474][T20826] usb 1-1: Product: syz [ 2778.424797][T20826] usb 1-1: Manufacturer: syz [ 2778.429648][T20826] usb 1-1: SerialNumber: syz [ 2778.639681][ T331] usb 1-1: USB disconnect, device number 98 [ 2778.655912][T30832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30832 comm=syz.4.74498 [ 2779.333858][T30852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74505'. [ 2779.435369][T20826] usb 2-1: USB disconnect, device number 110 [ 2779.978912][T21939] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2780.139908][T21939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2780.158861][T21939] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2780.188861][T21939] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2780.197961][T21939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.219637][T21939] usb 2-1: config 0 descriptor?? [ 2780.239605][T21939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2780.479065][T30912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74536'. [ 2780.598940][T30927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30927 comm=syz.4.74544 [ 2781.338829][T30939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74549'. [ 2781.702815][T30967] FAULT_INJECTION: forcing a failure. [ 2781.702815][T30967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2781.716269][T30967] CPU: 0 UID: 0 PID: 30967 Comm: syz.4.74563 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2781.716308][T30967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2781.716324][T30967] Call Trace: [ 2781.716332][T30967] [ 2781.716342][T30967] __dump_stack+0x21/0x30 [ 2781.716379][T30967] dump_stack_lvl+0x10c/0x190 [ 2781.716410][T30967] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2781.716443][T30967] ? check_stack_object+0x12c/0x140 [ 2781.716466][T30967] dump_stack+0x19/0x20 [ 2781.716495][T30967] should_fail_ex+0x3d9/0x530 [ 2781.716520][T30967] should_fail+0xf/0x20 [ 2781.716541][T30967] should_fail_usercopy+0x1e/0x30 [ 2781.716566][T30967] _copy_to_user+0x24/0xa0 [ 2781.716595][T30967] simple_read_from_buffer+0xed/0x160 [ 2781.716624][T30967] proc_fail_nth_read+0x19e/0x210 [ 2781.716655][T30967] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2781.716687][T30967] ? bpf_lsm_file_permission+0xd/0x20 [ 2781.716719][T30967] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2781.716750][T30967] vfs_read+0x27d/0xc70 [ 2781.716772][T30967] ? __cfi_vfs_read+0x10/0x10 [ 2781.716791][T30967] ? __kasan_slab_free+0x6a/0x80 [ 2781.716817][T30967] ? kmem_cache_free+0x1c1/0x510 [ 2781.716840][T30967] ? putname+0x113/0x150 [ 2781.716863][T30967] ? __kasan_check_read+0x15/0x20 [ 2781.716898][T30967] ? __kasan_check_read+0x15/0x20 [ 2781.716934][T30967] ksys_read+0x141/0x250 [ 2781.716955][T30967] ? __cfi_ksys_read+0x10/0x10 [ 2781.716977][T30967] ? __kasan_check_read+0x15/0x20 [ 2781.717012][T30967] __x64_sys_read+0x7f/0x90 [ 2781.717034][T30967] x64_sys_call+0x2638/0x2ee0 [ 2781.717067][T30967] do_syscall_64+0x58/0xf0 [ 2781.717098][T30967] ? clear_bhb_loop+0x50/0xa0 [ 2781.717124][T30967] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2781.717150][T30967] RIP: 0033:0x7fb4ffb8e0dc [ 2781.717176][T30967] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2781.717196][T30967] RSP: 002b:00007fb500af7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2781.717222][T30967] RAX: ffffffffffffffda RBX: 00007fb4ffde5fa0 RCX: 00007fb4ffb8e0dc [ 2781.717240][T30967] RDX: 000000000000000f RSI: 00007fb500af70a0 RDI: 0000000000000005 [ 2781.717263][T30967] RBP: 00007fb500af7090 R08: 0000000000000000 R09: 0000000000000000 [ 2781.717279][T30967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2781.717293][T30967] R13: 00007fb4ffde6038 R14: 00007fb4ffde5fa0 R15: 00007ffc534362d8 [ 2781.717314][T30967] [ 2782.055956][T30985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74571'. [ 2782.243873][T31009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74582'. [ 2782.745597][ T331] usb 2-1: USB disconnect, device number 111 [ 2782.849165][T31029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31029 comm=syz.1.74592 [ 2782.906621][T31031] FAULT_INJECTION: forcing a failure. [ 2782.906621][T31031] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.938295][T31031] CPU: 0 UID: 0 PID: 31031 Comm: syz.1.74593 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2782.938333][T31031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2782.938350][T31031] Call Trace: [ 2782.938358][T31031] [ 2782.938368][T31031] __dump_stack+0x21/0x30 [ 2782.938405][T31031] dump_stack_lvl+0x10c/0x190 [ 2782.938437][T31031] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2782.938469][T31031] ? __asan_memcpy+0x5a/0x80 [ 2782.938491][T31031] dump_stack+0x19/0x20 [ 2782.938520][T31031] should_fail_ex+0x3d9/0x530 [ 2782.938545][T31031] should_failslab+0xac/0x100 [ 2782.938571][T31031] kmem_cache_alloc_node_noprof+0x45/0x440 [ 2782.938595][T31031] ? kasan_save_alloc_info+0x40/0x50 [ 2782.938627][T31031] ? __alloc_skb+0x10c/0x370 [ 2782.938657][T31031] __alloc_skb+0x10c/0x370 [ 2782.938686][T31031] alloc_skb_with_frags+0xce/0x8b0 [ 2782.938714][T31031] ? __cfi_selinux_file_open+0x10/0x10 [ 2782.938745][T31031] sock_alloc_send_pskb+0x858/0x990 [ 2782.938780][T31031] ? __kasan_check_write+0x18/0x20 [ 2782.938817][T31031] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 2782.938860][T31031] ? __kernel_text_address+0x11/0x40 [ 2782.938890][T31031] ? unwind_get_return_address+0x51/0x90 [ 2782.938918][T31031] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2782.938952][T31031] ? arch_stack_walk+0x10b/0x170 [ 2782.938976][T31031] packet_sendmsg+0x38e6/0x56c0 [ 2782.939006][T31031] ? __asan_memcpy+0x5a/0x80 [ 2782.939029][T31031] ? __cfi_avc_has_perm+0x10/0x10 [ 2782.939061][T31031] ? kstrtouint_from_user+0xfb/0x150 [ 2782.939084][T31031] ? __x64_sys_openat+0x13a/0x170 [ 2782.939115][T31031] ? x64_sys_call+0xe69/0x2ee0 [ 2782.939151][T31031] ? selinux_socket_sendmsg+0x284/0x380 [ 2782.939187][T31031] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 2782.939222][T31031] ? __kasan_check_write+0x18/0x20 [ 2782.939269][T31031] ? check_stack_object+0x107/0x140 [ 2782.939289][T31031] ? __cfi_packet_sendmsg+0x10/0x10 [ 2782.939318][T31031] ? notify_change+0x40/0xee0 [ 2782.939352][T31031] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2782.939379][T31031] ? security_socket_sendmsg+0x33/0xd0 [ 2782.939401][T31031] __sys_sendto+0x66d/0x6f0 [ 2782.939433][T31031] ? __cfi___sys_sendto+0x10/0x10 [ 2782.939464][T31031] ? __kasan_check_write+0x18/0x20 [ 2782.939499][T31031] ? __cfi_ksys_write+0x10/0x10 [ 2782.939521][T31031] __x64_sys_sendto+0xe9/0x100 [ 2782.939551][T31031] x64_sys_call+0x2c2c/0x2ee0 [ 2782.939584][T31031] do_syscall_64+0x58/0xf0 [ 2782.939613][T31031] ? clear_bhb_loop+0x50/0xa0 [ 2782.939639][T31031] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2782.939663][T31031] RIP: 0033:0x7fd0dbd8f6c9 [ 2782.939682][T31031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2782.939702][T31031] RSP: 002b:00007fd0dcd05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2782.939728][T31031] RAX: ffffffffffffffda RBX: 00007fd0dbfe5fa0 RCX: 00007fd0dbd8f6c9 [ 2782.939746][T31031] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000005 [ 2782.939761][T31031] RBP: 00007fd0dcd05090 R08: 00002000000001c0 R09: 0000000000000014 [ 2782.939777][T31031] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 2782.939792][T31031] R13: 00007fd0dbfe6038 R14: 00007fd0dbfe5fa0 R15: 00007fff73d48538 [ 2782.939812][T31031] [ 2783.439132][T31047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74600'. [ 2783.654096][T31071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74614'. [ 2783.669500][T31073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31073 comm=syz.0.74615 [ 2783.890472][T31096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74625'. [ 2783.901837][T31092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74624'. [ 2784.308029][T31122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74639'. [ 2784.357553][ T36] audit: type=1400 audit(2000002476.826:1449): avc: denied { create } for pid=31123 comm="syz.0.74640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2784.398478][T31126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31126 comm=syz.0.74641 [ 2784.523085][T31136] netlink: 188 bytes leftover after parsing attributes in process `syz.1.74645'. [ 2784.638432][T31144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74648'. [ 2785.188508][T31174] FAULT_INJECTION: forcing a failure. [ 2785.188508][T31174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2785.211927][T31174] CPU: 1 UID: 0 PID: 31174 Comm: syz.1.74664 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2785.211966][T31174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2785.211981][T31174] Call Trace: [ 2785.211989][T31174] [ 2785.211999][T31174] __dump_stack+0x21/0x30 [ 2785.212036][T31174] dump_stack_lvl+0x10c/0x190 [ 2785.212067][T31174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2785.212097][T31174] ? check_stack_object+0x12c/0x140 [ 2785.212121][T31174] dump_stack+0x19/0x20 [ 2785.212150][T31174] should_fail_ex+0x3d9/0x530 [ 2785.212174][T31174] should_fail+0xf/0x20 [ 2785.212195][T31174] should_fail_usercopy+0x1e/0x30 [ 2785.212221][T31174] _copy_to_user+0x24/0xa0 [ 2785.212249][T31174] simple_read_from_buffer+0xed/0x160 [ 2785.212279][T31174] proc_fail_nth_read+0x19e/0x210 [ 2785.212310][T31174] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2785.212341][T31174] ? bpf_lsm_file_permission+0xd/0x20 [ 2785.212373][T31174] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2785.212403][T31174] vfs_read+0x27d/0xc70 [ 2785.212423][T31174] ? ip_setsockopt+0xa7/0x100 [ 2785.212457][T31174] ? __cfi_vfs_read+0x10/0x10 [ 2785.212476][T31174] ? __kasan_check_write+0x18/0x20 [ 2785.212511][T31174] ? mutex_lock+0x92/0x1c0 [ 2785.212532][T31174] ? __cfi_mutex_lock+0x10/0x10 [ 2785.212553][T31174] ? __fget_files+0x2c5/0x340 [ 2785.212580][T31174] ksys_read+0x141/0x250 [ 2785.212601][T31174] ? __cfi_ksys_read+0x10/0x10 [ 2785.212630][T31174] ? __kasan_check_write+0x18/0x20 [ 2785.212664][T31174] ? __kasan_check_read+0x15/0x20 [ 2785.212698][T31174] __x64_sys_read+0x7f/0x90 [ 2785.212719][T31174] x64_sys_call+0x2638/0x2ee0 [ 2785.212753][T31174] do_syscall_64+0x58/0xf0 [ 2785.212782][T31174] ? clear_bhb_loop+0x50/0xa0 [ 2785.212807][T31174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2785.212832][T31174] RIP: 0033:0x7fd0dbd8e0dc [ 2785.212851][T31174] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2785.212872][T31174] RSP: 002b:00007fd0dcd05030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2785.212898][T31174] RAX: ffffffffffffffda RBX: 00007fd0dbfe5fa0 RCX: 00007fd0dbd8e0dc [ 2785.212917][T31174] RDX: 000000000000000f RSI: 00007fd0dcd050a0 RDI: 0000000000000006 [ 2785.212932][T31174] RBP: 00007fd0dcd05090 R08: 0000000000000000 R09: 0000000000000000 [ 2785.212947][T31174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2785.212962][T31174] R13: 00007fd0dbfe6038 R14: 00007fd0dbfe5fa0 R15: 00007fff73d48538 [ 2785.212982][T31174] [ 2785.635974][T31194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31194 comm=syz.3.74674 [ 2786.319625][T31239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31239 comm=syz.0.74696 [ 2786.388302][T31241] __nla_validate_parse: 3 callbacks suppressed [ 2786.388326][T31241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74697'. [ 2787.645928][T31297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31297 comm=syz.3.74725 [ 2788.311809][T31354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31354 comm=syz.4.74750 [ 2790.119511][T31471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74809'. [ 2790.318617][T31501] FAULT_INJECTION: forcing a failure. [ 2790.318617][T31501] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.356568][T31501] CPU: 1 UID: 0 PID: 31501 Comm: syz.4.74825 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2790.356605][T31501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2790.356620][T31501] Call Trace: [ 2790.356628][T31501] [ 2790.356636][T31501] __dump_stack+0x21/0x30 [ 2790.356672][T31501] dump_stack_lvl+0x10c/0x190 [ 2790.356701][T31501] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2790.356733][T31501] dump_stack+0x19/0x20 [ 2790.356761][T31501] should_fail_ex+0x3d9/0x530 [ 2790.356785][T31501] should_failslab+0xac/0x100 [ 2790.356811][T31501] __kmalloc_cache_noprof+0x41/0x490 [ 2790.356833][T31501] ? ipv6_flowlabel_opt+0xd30/0x2710 [ 2790.356863][T31501] ? __kasan_check_write+0x18/0x20 [ 2790.356897][T31501] ipv6_flowlabel_opt+0xd30/0x2710 [ 2790.356928][T31501] ? __cfi_selinux_file_open+0x10/0x10 [ 2790.356956][T31501] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 2790.356987][T31501] ? __kasan_check_write+0x18/0x20 [ 2790.357020][T31501] ? _raw_spin_lock_bh+0x90/0x120 [ 2790.357049][T31501] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 2790.357079][T31501] ? _raw_spin_unlock_bh+0x54/0x60 [ 2790.357108][T31501] ? lock_sock_nested+0x1f5/0x290 [ 2790.357132][T31501] ? __cfi_lock_sock_nested+0x10/0x10 [ 2790.357156][T31501] ? kernel_text_address+0xa9/0xe0 [ 2790.357187][T31501] do_ipv6_setsockopt+0xe61/0x2ec0 [ 2790.357218][T31501] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 2790.357256][T31501] ? kstrtoull+0x13b/0x1e0 [ 2790.357277][T31501] ? avc_has_perm_noaudit+0x268/0x360 [ 2790.357309][T31501] ? __asan_memcpy+0x5a/0x80 [ 2790.357329][T31501] ? avc_has_perm_noaudit+0x286/0x360 [ 2790.357362][T31501] ? avc_has_perm+0x144/0x220 [ 2790.357394][T31501] ? __cfi_avc_has_perm+0x10/0x10 [ 2790.357427][T31501] ? selinux_socket_setsockopt+0x2ea/0x390 [ 2790.357464][T31501] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 2790.357501][T31501] ipv6_setsockopt+0x5d/0x170 [ 2790.357530][T31501] tcp_setsockopt+0xf2/0x110 [ 2790.357552][T31501] sock_common_setsockopt+0xb5/0xd0 [ 2790.357578][T31501] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 2790.357605][T31501] do_sock_setsockopt+0x26d/0x400 [ 2790.357639][T31501] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2790.357676][T31501] __x64_sys_setsockopt+0x1b8/0x250 [ 2790.357711][T31501] x64_sys_call+0x2adc/0x2ee0 [ 2790.357745][T31501] do_syscall_64+0x58/0xf0 [ 2790.357775][T31501] ? clear_bhb_loop+0x50/0xa0 [ 2790.357802][T31501] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2790.357826][T31501] RIP: 0033:0x7fb4ffb8f6c9 [ 2790.357846][T31501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2790.357868][T31501] RSP: 002b:00007fb500af7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2790.357893][T31501] RAX: ffffffffffffffda RBX: 00007fb4ffde5fa0 RCX: 00007fb4ffb8f6c9 [ 2790.357912][T31501] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 2790.357927][T31501] RBP: 00007fb500af7090 R08: 000000000000fe60 R09: 0000000000000000 [ 2790.357943][T31501] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2790.357958][T31501] R13: 00007fb4ffde6038 R14: 00007fb4ffde5fa0 R15: 00007ffc534362d8 [ 2790.357979][T31501] [ 2791.007470][T31529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74836'. [ 2792.545392][T31608] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74874'. [ 2793.130501][T31636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31636 comm=syz.0.74883 [ 2793.319329][T31658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31658 comm=syz.4.74898 [ 2793.404290][T31666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74902'. [ 2794.046990][T31686] FAULT_INJECTION: forcing a failure. [ 2794.046990][T31686] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2794.065794][T31686] CPU: 0 UID: 0 PID: 31686 Comm: syz.1.74913 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2794.065834][T31686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2794.065850][T31686] Call Trace: [ 2794.065858][T31686] [ 2794.065869][T31686] __dump_stack+0x21/0x30 [ 2794.065906][T31686] dump_stack_lvl+0x10c/0x190 [ 2794.065936][T31686] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2794.065990][T31686] dump_stack+0x19/0x20 [ 2794.066019][T31686] should_fail_ex+0x3d9/0x530 [ 2794.066044][T31686] should_fail+0xf/0x20 [ 2794.066065][T31686] get_futex_key+0x215/0x930 [ 2794.066087][T31686] ? kernel_text_address+0xa9/0xe0 [ 2794.066117][T31686] ? __cfi_get_futex_key+0x10/0x10 [ 2794.066138][T31686] ? unwind_get_return_address+0x51/0x90 [ 2794.066166][T31686] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2794.066203][T31686] futex_wait_setup+0x9f/0x260 [ 2794.066232][T31686] ? __cfi_futex_wait_setup+0x10/0x10 [ 2794.066261][T31686] ? __asan_memcpy+0x5a/0x80 [ 2794.066282][T31686] __futex_wait+0xfa/0x2a0 [ 2794.066310][T31686] ? __cfi___futex_wait+0x10/0x10 [ 2794.066337][T31686] ? kstrtouint_from_user+0xfb/0x150 [ 2794.066360][T31686] ? __cfi_futex_wake_mark+0x10/0x10 [ 2794.066389][T31686] ? futex_setup_timer+0xb4/0xd0 [ 2794.066411][T31686] futex_wait+0x117/0x7a0 [ 2794.066439][T31686] ? __cfi_futex_wait+0x10/0x10 [ 2794.066467][T31686] ? vfs_write+0x93e/0xf30 [ 2794.066489][T31686] do_futex+0x309/0x500 [ 2794.066512][T31686] ? __cfi_do_futex+0x10/0x10 [ 2794.066535][T31686] ? mutex_unlock+0x8b/0x240 [ 2794.066556][T31686] ? __fget_files+0x2c5/0x340 [ 2794.066581][T31686] __se_sys_futex+0x28f/0x300 [ 2794.066604][T31686] ? fput+0x1a5/0x240 [ 2794.066631][T31686] ? __x64_sys_futex+0x110/0x110 [ 2794.066655][T31686] ? __cfi_ksys_write+0x10/0x10 [ 2794.066678][T31686] __x64_sys_futex+0xe9/0x110 [ 2794.066702][T31686] x64_sys_call+0x227f/0x2ee0 [ 2794.066734][T31686] do_syscall_64+0x58/0xf0 [ 2794.066764][T31686] ? clear_bhb_loop+0x50/0xa0 [ 2794.066790][T31686] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2794.066814][T31686] RIP: 0033:0x7fd0dbd8f6c9 [ 2794.066833][T31686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2794.066852][T31686] RSP: 002b:00007fd0dcd05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2794.066878][T31686] RAX: ffffffffffffffda RBX: 00007fd0dbfe5fa0 RCX: 00007fd0dbd8f6c9 [ 2794.066895][T31686] RDX: 0000000000000001 RSI: 0000000000000109 RDI: 0000000000000000 [ 2794.066910][T31686] RBP: 00007fd0dcd05090 R08: 0000000000000000 R09: 0000000000000049 [ 2794.066926][T31686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2794.066941][T31686] R13: 00007fd0dbfe6038 R14: 00007fd0dbfe5fa0 R15: 00007fff73d48538 [ 2794.066967][T31686] [ 2794.571615][T31694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74916'. [ 2794.839601][T31718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74928'. [ 2795.640854][T31756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74946'. [ 2796.130536][T31789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.235829][T31799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31799 comm=syz.0.74968 [ 2797.262710][T31811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74973'. [ 2797.317437][T31815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74977'. [ 2798.626859][T31860] FAULT_INJECTION: forcing a failure. [ 2798.626859][T31860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2798.651229][T31860] CPU: 1 UID: 0 PID: 31860 Comm: syz.3.74999 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2798.651268][T31860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2798.651284][T31860] Call Trace: [ 2798.651292][T31860] [ 2798.651301][T31860] __dump_stack+0x21/0x30 [ 2798.651337][T31860] dump_stack_lvl+0x10c/0x190 [ 2798.651368][T31860] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2798.651398][T31860] ? check_stack_object+0x12c/0x140 [ 2798.651422][T31860] dump_stack+0x19/0x20 [ 2798.651449][T31860] should_fail_ex+0x3d9/0x530 [ 2798.651474][T31860] should_fail+0xf/0x20 [ 2798.651495][T31860] should_fail_usercopy+0x1e/0x30 [ 2798.651519][T31860] _copy_to_user+0x24/0xa0 [ 2798.651547][T31860] simple_read_from_buffer+0xed/0x160 [ 2798.651576][T31860] proc_fail_nth_read+0x19e/0x210 [ 2798.651607][T31860] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2798.651636][T31860] ? bpf_lsm_file_permission+0xd/0x20 [ 2798.651667][T31860] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2798.651697][T31860] vfs_read+0x27d/0xc70 [ 2798.651718][T31860] ? __cfi_vfs_read+0x10/0x10 [ 2798.651738][T31860] ? __kasan_check_write+0x18/0x20 [ 2798.651781][T31860] ? mutex_lock+0x92/0x1c0 [ 2798.651803][T31860] ? __cfi_mutex_lock+0x10/0x10 [ 2798.651824][T31860] ? __fget_files+0x2c5/0x340 [ 2798.651851][T31860] ksys_read+0x141/0x250 [ 2798.651871][T31860] ? xfd_validate_state+0x68/0x150 [ 2798.651902][T31860] ? __cfi_ksys_read+0x10/0x10 [ 2798.651924][T31860] ? __kasan_check_write+0x18/0x20 [ 2798.651957][T31860] ? fpregs_restore_userregs+0x11d/0x260 [ 2798.651985][T31860] __x64_sys_read+0x7f/0x90 [ 2798.652007][T31860] x64_sys_call+0x2638/0x2ee0 [ 2798.652041][T31860] do_syscall_64+0x58/0xf0 [ 2798.652070][T31860] ? clear_bhb_loop+0x50/0xa0 [ 2798.652096][T31860] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2798.652121][T31860] RIP: 0033:0x7fb40698e0dc [ 2798.652141][T31860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2798.652162][T31860] RSP: 002b:00007fb407765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2798.652188][T31860] RAX: ffffffffffffffda RBX: 00007fb406be5fa0 RCX: 00007fb40698e0dc [ 2798.652206][T31860] RDX: 000000000000000f RSI: 00007fb4077650a0 RDI: 0000000000000006 [ 2798.652222][T31860] RBP: 00007fb407765090 R08: 0000000000000000 R09: 0000000000000000 [ 2798.652238][T31860] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2798.652254][T31860] R13: 00007fb406be6038 R14: 00007fb406be5fa0 R15: 00007ffe1b04caf8 [ 2798.652275][T31860] [ 2798.655774][T31862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31862 comm=syz.0.74996 [ 2799.596008][ T36] audit: type=1400 audit(2000002492.069:1450): avc: denied { read } for pid=31924 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2800.525874][ T36] audit: type=1400 audit(2000002492.999:1451): avc: denied { read write } for pid=31947 comm="ip" path="/dev/console" dev="rootfs" ino=19 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 2800.684361][ T36] audit: type=1400 audit(2000002493.149:1452): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 2800.814270][ T36] audit: type=1400 audit(2000002493.269:1453): avc: denied { read write } for pid=31955 comm="iptables" path="/dev/console" dev="rootfs" ino=19 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 2800.854350][ T36] audit: type=1400 audit(2000002493.279:1454): avc: denied { search } for pid=31955 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2800.877680][ T36] audit: type=1400 audit(2000002493.279:1455): avc: denied { write } for pid=31955 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2800.901108][ T36] audit: type=1400 audit(2000002493.279:1456): avc: denied { add_name } for pid=31955 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2800.922813][ T36] audit: type=1400 audit(2000002493.279:1457): avc: denied { create } for pid=31955 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2800.954689][ T36] audit: type=1400 audit(2000002493.279:1458): avc: denied { read open } for pid=31955 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=25893 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2801.021797][ T36] audit: type=1400 audit(2000002493.279:1459): avc: denied { lock } for pid=31955 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=25893 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2802.520634][T32023] FAULT_INJECTION: forcing a failure. [ 2802.520634][T32023] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.533671][T32021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2802.548434][T32023] CPU: 0 UID: 0 PID: 32023 Comm: syz.1.75058 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2802.548480][T32023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2802.548496][T32023] Call Trace: [ 2802.548505][T32023] [ 2802.548515][T32023] __dump_stack+0x21/0x30 [ 2802.548552][T32023] dump_stack_lvl+0x10c/0x190 [ 2802.548588][T32023] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2802.548619][T32023] ? __x64_sys_openat+0x13a/0x170 [ 2802.548649][T32023] ? do_syscall_64+0x58/0xf0 [ 2802.548678][T32023] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2802.548703][T32023] dump_stack+0x19/0x20 [ 2802.548732][T32023] should_fail_ex+0x3d9/0x530 [ 2802.548756][T32023] should_failslab+0xac/0x100 [ 2802.548783][T32023] kmem_cache_alloc_lru_noprof+0x44/0x430 [ 2802.548806][T32023] ? __d_alloc+0x42/0x8e0 [ 2802.548839][T32023] __d_alloc+0x42/0x8e0 [ 2802.548872][T32023] d_alloc_parallel+0xde/0x1240 [ 2802.548894][T32023] ? avc_has_perm_noaudit+0x268/0x360 [ 2802.548927][T32023] ? avc_has_perm_noaudit+0x286/0x360 [ 2802.548960][T32023] ? __cfi_d_alloc_parallel+0x10/0x10 [ 2802.548982][T32023] ? __kasan_check_write+0x18/0x20 [ 2802.549016][T32023] ? rwsem_read_trylock+0x2b1/0x660 [ 2802.549047][T32023] ? downgrade_write+0x440/0x440 [ 2802.549078][T32023] __lookup_slow+0x142/0x400 [ 2802.549103][T32023] ? lookup_one_len+0x2f0/0x2f0 [ 2802.549129][T32023] ? down_read+0x79/0xe0 [ 2802.549155][T32023] lookup_slow+0x57/0x80 [ 2802.549187][T32023] walk_component+0x302/0x440 [ 2802.549210][T32023] path_lookupat+0x180/0x4a0 [ 2802.549235][T32023] filename_lookup+0x1f5/0x520 [ 2802.549261][T32023] ? __cfi_filename_lookup+0x10/0x10 [ 2802.549290][T32023] ? getname_kernel+0x164/0x460 [ 2802.549314][T32023] ? __kasan_check_write+0x18/0x20 [ 2802.549348][T32023] ? selinux_mount+0x39a/0x4e0 [ 2802.549370][T32023] kern_path+0x3c/0x60 [ 2802.549394][T32023] do_loopback+0xc2/0x4b0 [ 2802.549415][T32023] ? path_mount+0x1050/0x1050 [ 2802.549435][T32023] ? security_capable+0xcf/0xf0 [ 2802.549466][T32023] ? ns_capable+0x91/0xf0 [ 2802.549510][T32023] path_mount+0x582/0x1050 [ 2802.549530][T32023] ? putname+0x113/0x150 [ 2802.549571][T32023] __se_sys_mount+0x2bd/0x480 [ 2802.549592][T32023] ? ksys_write+0x1ef/0x250 [ 2802.549614][T32023] ? __x64_sys_mount+0xf0/0xf0 [ 2802.549637][T32023] __x64_sys_mount+0xc3/0xf0 [ 2802.549658][T32023] x64_sys_call+0x2021/0x2ee0 [ 2802.549691][T32023] do_syscall_64+0x58/0xf0 [ 2802.549719][T32023] ? clear_bhb_loop+0x50/0xa0 [ 2802.549744][T32023] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2802.549769][T32023] RIP: 0033:0x7fd0dbd8f6c9 [ 2802.549787][T32023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2802.549808][T32023] RSP: 002b:00007fd0dcd05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2802.549833][T32023] RAX: ffffffffffffffda RBX: 00007fd0dbfe5fa0 RCX: 00007fd0dbd8f6c9 [ 2802.549851][T32023] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 2802.549867][T32023] RBP: 00007fd0dcd05090 R08: 0000000000000000 R09: 0000000000000000 [ 2802.549882][T32023] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 2802.549897][T32023] R13: 00007fd0dbfe6038 R14: 00007fd0dbfe5fa0 R15: 00007fff73d48538 [ 2802.549918][T32023] [ 2802.917434][T32039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75063'. Connection to 10.128.1.15 closed by remote host. [ 2803.727041][T25920] bridge_slave_1: left allmulticast mode [ 2803.732749][T25920] bridge_slave_1: left promiscuous mode [ 2803.738494][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.746454][T25920] bridge_slave_0: left allmulticast mode [ 2803.752132][T25920] bridge_slave_0: left promiscuous mode [ 2803.757968][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.975029][T25920] veth1_macvtap: left promiscuous mode [ 2803.980581][T25920] veth0_vlan: left promiscuous mode [ 2804.884895][T25920] bridge_slave_1: left allmulticast mode [ 2804.890610][T25920] bridge_slave_1: left promiscuous mode [ 2804.896348][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.903953][T25920] bridge_slave_0: left allmulticast mode [ 2804.909613][T25920] bridge_slave_0: left promiscuous mode [ 2804.915424][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.923119][T25920] bridge_slave_1: left allmulticast mode [ 2804.928830][T25920] bridge_slave_1: left promiscuous mode [ 2804.934531][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.942064][T25920] bridge_slave_0: left allmulticast mode [ 2804.947799][T25920] bridge_slave_0: left promiscuous mode [ 2804.953437][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2804.961150][T25920] bridge_slave_1: left allmulticast mode [ 2804.966854][T25920] bridge_slave_1: left promiscuous mode [ 2804.972450][T25920] bridge0: port 2(bridge_slave_1) entered disabled state [ 2804.979985][T25920] bridge_slave_0: left allmulticast mode [ 2804.985712][T25920] bridge_slave_0: left promiscuous mode [ 2804.991324][T25920] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.412769][T32064] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2805.420040][T32064] ACPI: PM: Preparing to enter system sleep state S5 [ 2805.427051][T32064] kvm: exiting hardware virtualization [ 2805.432592][T32064] reboot: Power down serialport: VM disconnected.