last executing test programs: 4m36.416524431s ago: executing program 2 (id=817): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20060084}, 0x5) writev(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000980)="64e851328858e59269ee1cf8716e219033fcb40cecd0d94c91e198f382442f4b9a92a86579a5fff44bfc939e861edd9491fb0b0b356ca80a93139541b6db80a7768448d419d145f818308a29aa993e0d3117201f8f6b2e800c815e378636170517b1b1a073b33ee734", 0x69}], 0x1) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000ac0)={0x4}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000e80)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000001e00)=[{&(0x7f0000001980)="cc8b68e36dcba001ad9d7429545e3b86554117d883a2ceba99d78602bc5b48cec92f767768964815e076208d74a48a2d851924084c0a96c0756185a483c739505e0b84c6c3a156b8402f43580bc2d5cd9259cf1b129169ec162685ca10b84f1c0146b07a8bfd5fcbd668ed3a5a11640a5132e83ab0e8d7ad847151d959bd88a006450f037b3ac66274c4f8f4d99b19800a66a3757a", 0x95}, {0x0}, {&(0x7f0000001ac0)="6d3055928a7c06c3e57a8772da533b10e025c8d023ad4f169f7ca382ff18510e61dcf6fc10c17ae67540f3eaceb1a6f77e40052733a8ffbefab44f4e6287745e0046d15f00c456e8cfb210a961de2ec72e6fb98e21aad3dbbc46299b9078518955e369a81583abda6fe3753ab354295c7728ef9ea6c8fd41038b7ea5658bfbb09888e5abbfd9bfc89ee6d80c2ceec599a6dea467126c5f03823e", 0x9a}, {&(0x7f0000001b80)="c2308c980b581ba26aba75fb92b60fa91e8ee290c13f85dd9e3d654dd11a30cc31839b", 0x23}], 0x4, 0xaf, 0x7, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x14044000) 4m36.403718811s ago: executing program 2 (id=818): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000084) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1790) 4m36.326068912s ago: executing program 2 (id=819): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x1) 4m36.298852712s ago: executing program 2 (id=820): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m36.277840113s ago: executing program 2 (id=821): unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.events\x00', 0x5000000, 0x0) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 4m36.166477816s ago: executing program 2 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000280)=0xfffff908, 0x4) 4m36.143161576s ago: executing program 32 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000280)=0xfffff908, 0x4) 3m56.430702051s ago: executing program 1 (id=1748): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setresuid(0x0, 0xee01, 0x0) setns(r3, 0x24020000) 3m56.326425453s ago: executing program 1 (id=1751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a67, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m56.090294258s ago: executing program 1 (id=1762): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x400) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000100)={0x0, 0x0}) 3m56.069043939s ago: executing program 1 (id=1763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x24000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3m56.010579719s ago: executing program 1 (id=1764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 3m55.922399461s ago: executing program 1 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000080)="420f01df0f20e035002000000f22e0660f28bc4dfb9ebda93e420fc7ae343f0000c42272f5dcb805000000b978b144f00f01d92e0f01c2f32e450f005f0026231f3ef3450f08", 0x46}], 0x1, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), 0x0, 0x0, 0x3a19394675f2e5b9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m55.890151222s ago: executing program 33 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000080)="420f01df0f20e035002000000f22e0660f28bc4dfb9ebda93e420fc7ae343f0000c42272f5dcb805000000b978b144f00f01d92e0f01c2f32e450f005f0026231f3ef3450f08", 0x46}], 0x1, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), 0x0, 0x0, 0x3a19394675f2e5b9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m36.769517655s ago: executing program 4 (id=2181): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r3}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 3m36.758773016s ago: executing program 4 (id=2182): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 3m36.706626497s ago: executing program 4 (id=2183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000003c0)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "00feffffff00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 3m36.706497587s ago: executing program 4 (id=2184): mkdir(&(0x7f0000000140)='./file0\x00', 0x1d9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m36.706400507s ago: executing program 4 (id=2185): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = gettid() tkill(r0, 0x35) tkill(r1, 0x12) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) 3m36.425154452s ago: executing program 4 (id=2186): r0 = getpid() syz_open_procfs$userns(r0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m36.352757184s ago: executing program 34 (id=2186): r0 = getpid() syz_open_procfs$userns(r0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m49.724312385s ago: executing program 5 (id=2931): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000280)=r1) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000140)={0x14}, 0x14) 2m49.662423355s ago: executing program 5 (id=2932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x8000000, 0x8, 0xd, 0x3, 0x6, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x3, 0x2, 0x41, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0x8000000, 0x8, 0x5, 0x1, 0x7, 0x0, 0x9, 0x6, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x2, 0x5, 0xf8, 0x8, 0x9, 0xb, 0xf1}, {0x4000, 0x2000, 0x10, 0x4, 0x15, 0x2, 0xab, 0x7b, 0x1, 0x83, 0xf7, 0x8}, {0x1000, 0x3000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x1000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x0, 0xeeef0000, 0x10, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x0, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x6, 0x0, 0x8080000, [0x6800000000000000, 0x9, 0x60, 0x3]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.645499206s ago: executing program 5 (id=2933): socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',mmap,ignoreqv,cache=fscache,access=client,']) stat(&(0x7f0000004b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m49.632791616s ago: executing program 5 (id=2934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x2145499, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m49.538530268s ago: executing program 5 (id=2935): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="1400000042000501", @ANYBLOB="a136cc3b72ae16779f0bfcf5"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x8010) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2m49.42170518s ago: executing program 5 (id=2936): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 2m49.333164942s ago: executing program 35 (id=2936): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 2m47.717359994s ago: executing program 3 (id=2963): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 2m47.699643604s ago: executing program 3 (id=2964): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 2m47.646501855s ago: executing program 3 (id=2965): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x0, 0xa, 0x0, 0xa, 0xfc, 0x0, 0x0, 0xfc, 0xfe, 0x0, 0x1}, {0x5000, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0x3000, 0xeeef0000, 0x0, 0x8, 0x0, 0x80, 0xb, 0xf, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x1, 0x3, 0xff}, {0x11000, 0xd000, 0xc, 0x0, 0x0, 0x80, 0x94, 0x0, 0x2, 0x0, 0x1a}, {0xd000, 0x8000000, 0xe, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x20, 0x0, 0x84, 0x2}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xde, 0xfd, 0x6, 0x1, 0x0, 0x20}, {0x1, 0x10000, 0x4, 0xf9, 0x0, 0x70, 0x4, 0xc, 0x0, 0x2f, 0x20, 0x40}, {0x6000, 0x4fe8}, {0x8080000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x0, 0x900, [0x5, 0x8, 0x0, 0x3fffffffffff]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m47.557290846s ago: executing program 3 (id=2966): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[]) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m47.540660157s ago: executing program 3 (id=2967): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r2, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x840) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.454669119s ago: executing program 3 (id=2968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.454583609s ago: executing program 36 (id=2968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000300)={0xcc, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.884800727s ago: executing program 8 (id=4372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 53.798517109s ago: executing program 8 (id=4373): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x0, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) connect$802154_dgram(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) getdents(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, '&i/B'}]}}, 0x0}, &(0x7f0000000680)={0x2c, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000005c0), 0x0}) 51.967856465s ago: executing program 8 (id=4394): mount$bpf(0x0, 0x0, 0x0, 0x810088, &(0x7f0000000240)=ANY=[]) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe(0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(r1) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x80010, 0xffffffffffffffff, 0x9) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) 49.575785901s ago: executing program 8 (id=4419): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x24d, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a0, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x3, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x40400, 0xffff58b9, 0x4c2336d3, 0x4, 0x20000001, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7faf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x10007, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x3ff, 0x7b, 0xfffffff8, 0x100040, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000640)="480000001500190a20ffff", 0xb}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x20, 0x1e, 0x723, 0x0, 0x0, "", [@nested={0x5, 0xa9, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x4, 0xe}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x24008015}, 0x20040010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x2000000, 0x10000}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 49.302497217s ago: executing program 8 (id=4422): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000001c0)={0x40, 0x12, 0x3, "ec7b1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="200901000000e6beb6eebd70820f51912c6837bd634145af8e4ff029fdc95fe8c2d2434cefcdf4e5e438628ab7051900d301a60edee63a76e24b3aa1f99bed8ffd04963efa1c18d5b4e1bd24c1cf64401e83553cbe265f01a4cce75e1351decdbbc9fc56b8f771594795"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="150000"], 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000040), 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x7, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_client}], [], 0x6b}}) r2 = socket$unix(0x1, 0x1, 0x0) shutdown(r2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) connect$unix(r2, 0x0, 0x0) accept$unix(r2, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x890d, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000f, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, 0x0) 47.458498023s ago: executing program 7 (id=4437): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000082505a8a440000902030109231b0000800700ffffffffffff00000300090501020004070128f4cba68b25d741402b89c435366d64bdae467afdb7eebeea0f339f509fc7ee09c20b043bd2cdcfadd2a5a06ba71f1c6389c62f282cb082413a6c1f356a47bdd260ae42775bd334320f3f9b84a0a529e511ee9c78a31625d4fedfd0ea635963adfb227096afdf680c299ad235f06fa4d916184f653197deca1aaa5418cf2d2b76fefa72a871ebd1593ba87a383eb1821f0600e4539d70fbce2dd3498a4572e3"], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00000fd000/0x400000)=nil) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x2b, 0x4, 0xffffffff00000500, 0x4, 0x4, 0xfffffff6, 0x93, 0x0, 0x0, 0x1, 0xa5}}, 0x50) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r1) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) 44.319905124s ago: executing program 6 (id=4454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) 42.589249348s ago: executing program 8 (id=4455): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 41.494957499s ago: executing program 7 (id=4456): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff0b050c"], 0x0) 34.981689326s ago: executing program 6 (id=4457): r0 = socket(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x362, @loopback, 0x9, 0x1000000}, 0x80, 0x0}}], 0x1, 0x2c04c884) 32.967346665s ago: executing program 0 (id=4458): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x23, 0x0, 0x101}}) 30.391345766s ago: executing program 0 (id=4459): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) 28.832036197s ago: executing program 7 (id=4460): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001240), 0xc02, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000003b00)) 27.380561795s ago: executing program 6 (id=4461): r0 = socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 26.863072985s ago: executing program 37 (id=4455): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 25.210157347s ago: executing program 7 (id=4463): r0 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0xd8, 0x0) 25.111242159s ago: executing program 0 (id=4464): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) 24.170536738s ago: executing program 6 (id=4465): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4d96, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x10140, 0x0, 0x5a) 15.989121397s ago: executing program 0 (id=4466): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40046721, &(0x7f00000000c0)) 15.145294854s ago: executing program 6 (id=4467): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x80, 0x1c, {0x8, 0x6, 0xb, 0x101, 0xe3, 0x302, 0x8, 0x8ee, 0x4, 0xd, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14.8405036s ago: executing program 7 (id=4468): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 13.30844318s ago: executing program 0 (id=4469): mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 9.971950375s ago: executing program 6 (id=4470): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.937184012s ago: executing program 0 (id=4471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x4, 0x5}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x1, 0x4}) 0s ago: executing program 7 (id=4472): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f000801}, 0x40881) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) kernel console output (not intermixed with test programs): tialized): Failed to send software reset:ffffffb9 [ 150.085409][ T902] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 150.095848][ T902] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 150.107139][ T902] usb 4-1: USB disconnect, device number 23 [ 150.208075][ T421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.220273][ T421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.231023][ T421] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 150.244522][ T421] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.253908][ T421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.262970][ T421] usb 7-1: config 0 descriptor?? [ 150.672859][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.679155][ T36] audit: type=1400 audit(2000000045.270:1582): avc: denied { setattr } for pid=6813 comm="syz.3.2740" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 150.681028][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.713116][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.721464][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.729318][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.737099][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.744947][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.752614][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.760224][ T421] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 150.768329][ T421] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 150.777566][ T421] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 151.029300][ T902] usb 7-1: USB disconnect, device number 12 [ 151.231658][ T6852] overlayfs: failed to clone upperpath [ 151.277894][ T36] audit: type=1400 audit(2000000045.880:1583): avc: denied { remount } for pid=6856 comm="syz.0.2759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 151.557548][ T421] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 151.733343][ T421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.755394][ T421] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.770688][ T421] usb 6-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 151.785338][ T421] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.804894][ T421] usb 6-1: config 0 descriptor?? [ 152.423083][ T902] usb 6-1: USB disconnect, device number 14 [ 154.232702][ T6978] overlayfs: failed to clone upperpath [ 154.240394][ T6978] overlayfs: failed to clone upperpath [ 154.911856][ T6999] overlayfs: failed to clone upperpath [ 156.066761][ T36] audit: type=1400 audit(2000000050.670:1584): avc: denied { create } for pid=7029 comm="syz.3.2831" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 156.132658][ T7032] random: crng reseeded on system resumption [ 156.139105][ T36] audit: type=1400 audit(2000000050.730:1585): avc: denied { write } for pid=7031 comm="syz.3.2832" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.165367][ T36] audit: type=1400 audit(2000000050.730:1586): avc: denied { open } for pid=7031 comm="syz.3.2832" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 156.327419][ T7036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.455239][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'. [ 156.464291][ T7046] veth0_macvtap: left allmulticast mode [ 156.475525][ T7046] veth0_macvtap: left promiscuous mode [ 156.481590][ T7046] bridge0: port 3(veth0_macvtap) entered disabled state [ 156.496209][ T7046] bridge_slave_1: left allmulticast mode [ 156.502092][ T7046] bridge_slave_1: left promiscuous mode [ 156.515420][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.533689][ T7046] bridge_slave_0: left allmulticast mode [ 156.539762][ T7046] bridge_slave_0: left promiscuous mode [ 156.545746][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.671176][ T902] kernel read not supported for file inotify (pid: 902 comm: kworker/1:5) [ 157.006860][ T7069] overlayfs: failed to clone upperpath [ 157.096352][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2850'. [ 157.290995][ T36] audit: type=1400 audit(2000000051.890:1587): avc: denied { module_load } for pid=7107 comm="syz.0.2863" path="/bus" dev="ramfs" ino=46425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 157.291242][ T7108] Invalid ELF header magic: != ELF [ 158.559140][ T36] audit: type=1400 audit(2000000053.160:1588): avc: denied { create } for pid=7134 comm="syz.3.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 158.580687][ T36] audit: type=1400 audit(2000000053.180:1589): avc: denied { setattr } for pid=7134 comm="syz.3.2874" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.601504][ T7138] rust_binder: Read failure Err(EFAULT) in pid:339 [ 158.875368][ T421] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 159.046449][ T421] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 159.054962][ T421] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.067047][ T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.078612][ T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.090370][ T421] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.109238][ T421] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.125359][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.136846][ T421] usb 4-1: config 0 descriptor?? [ 159.144116][ T7144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.166304][ T7185] overlayfs: failed to clone upperpath [ 159.563279][ T421] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 159.572061][ T421] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 159.580998][ T421] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 159.713445][ T36] audit: type=1400 audit(2000000054.310:1590): avc: denied { getopt } for pid=7194 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 159.828285][ T421] usb 4-1: USB disconnect, device number 24 [ 160.036182][ T7226] overlayfs: failed to clone upperpath [ 160.042610][ T7226] overlayfs: failed to clone upperpath [ 160.057791][ T7228] overlayfs: failed to clone upperpath [ 160.077559][ T64] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 160.236667][ T64] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 160.248065][ T64] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.259878][ T64] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 160.274405][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.284184][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.292441][ T64] usb 7-1: SerialNumber: syz [ 160.347280][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 160.506471][ T64] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 160.513452][ T64] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 160.526382][ T64] usb 7-1: USB disconnect, device number 13 [ 160.615409][ T902] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 160.775353][ T902] usb 4-1: Using ep0 maxpacket: 8 [ 160.781942][ T902] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.793582][ T902] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.804433][ T902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.811391][ T902] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 160.821046][ T902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.835601][ T902] usb 4-1: config 0 descriptor?? [ 160.955334][ T31] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 161.044985][ T36] audit: type=1400 audit(2000000055.640:1591): avc: denied { mounton } for pid=7272 comm="syz.5.2934" path="/196/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 161.106669][ T31] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 161.117988][ T31] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.129686][ T31] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 161.144208][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.154109][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.163101][ T31] usb 7-1: SerialNumber: syz [ 161.228936][ T13] bridge_slave_1: left allmulticast mode [ 161.234931][ T13] bridge_slave_1: left promiscuous mode [ 161.241277][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.250413][ T902] ntrig 0003:1B96:0004.0026: unknown main item tag 0x0 [ 161.258984][ T902] ntrig 0003:1B96:0004.0026: unknown main item tag 0x0 [ 161.259152][ T13] bridge_slave_0: left allmulticast mode [ 161.268694][ T902] ntrig 0003:1B96:0004.0026: item fetching failed at offset 2/5 [ 161.273457][ T13] bridge_slave_0: left promiscuous mode [ 161.286657][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.295496][ T902] ntrig 0003:1B96:0004.0026: parse failed [ 161.305371][ T902] ntrig 0003:1B96:0004.0026: probe with driver ntrig failed with error -22 [ 161.419703][ T13] veth1_macvtap: left promiscuous mode [ 161.425228][ T13] veth0_vlan: left promiscuous mode [ 161.453087][ T64] usb 4-1: USB disconnect, device number 25 [ 161.481280][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.488932][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.496260][ T7275] bridge_slave_0: entered allmulticast mode [ 161.503032][ T7275] bridge_slave_0: entered promiscuous mode [ 161.510026][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.517499][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.525145][ T7275] bridge_slave_1: entered allmulticast mode [ 161.532106][ T7275] bridge_slave_1: entered promiscuous mode [ 161.593535][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.600971][ T7275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.608597][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.615875][ T7275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.640966][ T701] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.648799][ T701] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.660036][ T701] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.667277][ T701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.677245][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.684408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.712841][ T7275] veth0_vlan: entered promiscuous mode [ 161.725223][ T7275] veth1_macvtap: entered promiscuous mode [ 161.914686][ T7294] syzkaller0: entered promiscuous mode [ 161.920465][ T7294] syzkaller0: entered allmulticast mode [ 161.978650][ T7296] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 161.978678][ T7296] rust_binder: Error while translating object. [ 161.987969][ T7296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.994458][ T7296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1398 [ 162.004245][ T7298] input: syz1 as /devices/virtual/input/input25 [ 162.263387][ T7318] loop4: detected capacity change from 0 to 8388608 [ 162.356165][ T7323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.469961][ T7326] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.645339][ T31] rndis_host 7-1:253.0: RNDIS init failed, -110 [ 162.651997][ T31] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -110 [ 162.664711][ T31] usb 7-1: USB disconnect, device number 14 [ 162.805371][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 162.967589][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.982654][ T45] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.993024][ T45] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.007494][ T45] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.018025][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.031165][ T45] usb 8-1: config 0 descriptor?? [ 163.095363][ T31] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 163.275337][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 163.281849][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.294458][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.304439][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.314045][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.326079][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.333572][ T31] usb 7-1: config 0 descriptor?? [ 163.335469][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.339602][ T31] hub 7-1:0.0: USB hub found [ 163.349637][ T7358] bridge_slave_0: entered allmulticast mode [ 163.357113][ T7358] bridge_slave_0: entered promiscuous mode [ 163.364238][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.371500][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.378764][ T7358] bridge_slave_1: entered allmulticast mode [ 163.385623][ T7358] bridge_slave_1: entered promiscuous mode [ 163.441667][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.449549][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.457976][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.458635][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.472454][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.475714][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.479876][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.494896][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.499910][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.512463][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.514431][ T7369] devpts: called with bogus options [ 163.521557][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.539037][ T701] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.539154][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.555215][ T701] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.560485][ T31] hub 7-1:0.0: 1 port detected [ 163.568321][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.576199][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.583818][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.592814][ T701] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.592828][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.599917][ T701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.600424][ T701] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.607874][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.614687][ T701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.622280][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.646023][ T45] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 163.649512][ T7358] veth0_vlan: entered promiscuous mode [ 163.654018][ T45] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving [ 163.668708][ T7358] veth1_macvtap: entered promiscuous mode [ 163.676304][ T45] plantronics 0003:047F:FFFF.0027: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 164.175688][ T31] hub 7-1:0.0: activate --> -90 [ 164.215572][ T7388] 9pnet_fd: Insufficient options for proto=fd [ 164.382944][ T45] usb 7-1: USB disconnect, device number 15 [ 164.389239][ T31] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 165.000462][ T36] audit: type=1400 audit(2000000059.600:1592): avc: denied { getopt } for pid=7416 comm="syz.0.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.294666][ T7443] incfs_lookup_dentry err:-5 [ 165.299485][ T45] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 165.299495][ T7443] incfs: Can't find or create .incomplete dir in ./file0 [ 165.314664][ T7443] incfs: mount failed -5 [ 165.455403][ T45] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 165.465157][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.474494][ T45] usb 7-1: config 0 descriptor?? [ 165.507150][ T7461] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT [ 165.507182][ T7461] rust_binder: Error in use_page_slow: EFAULT [ 165.517982][ T7461] rust_binder: use_range failure EFAULT [ 165.524188][ T7461] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 165.530310][ T7461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 165.538617][ T7461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 165.684745][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 165.795926][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3017'. [ 165.865849][ T64] usb 8-1: USB disconnect, device number 2 [ 165.970117][ T36] audit: type=1400 audit(2000000060.570:1593): avc: denied { map } for pid=7489 comm="syz.8.3020" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.138823][ T7498] overlayfs: failed to clone upperpath [ 167.088292][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 167.098616][ T45] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 167.109094][ T45] asix 7-1:0.0: probe with driver asix failed with error -71 [ 167.117707][ T45] usb 7-1: USB disconnect, device number 16 [ 168.995903][ T7560] overlayfs: failed to clone upperpath [ 169.143082][ T7566] netlink: 'syz.7.3054': attribute type 4 has an invalid length. [ 169.157008][ T7566] netlink: 'syz.7.3054': attribute type 4 has an invalid length. [ 169.585359][ T31] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 169.746410][ T31] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 169.755097][ T31] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 169.763298][ T31] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 169.772649][ T31] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 169.784008][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 169.793884][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 169.810411][ T31] usb 7-1: string descriptor 0 read error: -22 [ 169.817050][ T31] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 169.827018][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.836507][ T31] usb 7-1: config 0 descriptor?? [ 169.842743][ T31] hub 7-1:0.0: bad descriptor, ignoring hub [ 169.848998][ T31] hub 7-1:0.0: probe with driver hub failed with error -5 [ 170.155466][ T421] usb 7-1: USB disconnect, device number 17 [ 170.440179][ T36] audit: type=1326 audit(2000000065.040:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7618 comm="syz.7.3077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0ea58ec29 code=0x0 [ 170.825347][ T421] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 170.985329][ T421] usb 7-1: Using ep0 maxpacket: 8 [ 170.991874][ T421] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.001101][ T421] usb 7-1: config 179 has no interface number 0 [ 171.007922][ T421] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 171.019553][ T421] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 171.033219][ T421] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 171.045643][ T421] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 171.060618][ T421] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.075006][ T421] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 171.084955][ T421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.094633][ T7629] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 171.551141][ T64] usb 7-1: USB disconnect, device number 18 [ 171.551203][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.551246][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.885360][ T421] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 171.925371][ T422] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 172.036680][ T421] usb 9-1: config 8 has an invalid interface number: 223 but max is 0 [ 172.045483][ T421] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 172.056453][ T421] usb 9-1: config 8 has no interface number 0 [ 172.062646][ T421] usb 9-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.077726][ T422] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 172.092803][ T421] usb 9-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 172.102334][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.110848][ T422] usb 8-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.124788][ T421] usb 9-1: Product: syz [ 172.129560][ T421] usb 9-1: Manufacturer: syz [ 172.134622][ T422] usb 8-1: config 0 interface 0 has no altsetting 0 [ 172.141673][ T421] usb 9-1: SerialNumber: syz [ 172.147806][ T422] usb 8-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 172.162230][ T422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.175146][ T422] usb 8-1: config 0 descriptor?? [ 172.180870][ T7666] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 172.371064][ T421] usb 9-1: USB disconnect, device number 2 [ 172.597177][ T422] thrustmaster 0003:044F:B654.0028: hidraw0: USB HID vff.ff Device [HID 044f:b654] on usb-dummy_hcd.7-1/input0 [ 172.626861][ T422] thrustmaster 0003:044F:B654.0028: no inputs found [ 172.795063][ T902] usb 8-1: USB disconnect, device number 3 [ 172.945519][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 173.096438][ T31] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 173.106006][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.118209][ T31] usb 7-1: config 0 descriptor?? [ 173.238470][ T7709] tipc: Started in network mode [ 173.243557][ T7709] tipc: Node identity 6201965ec94a, cluster identity 4711 [ 173.250845][ T7709] tipc: Enabled bearer , priority 0 [ 173.259053][ T7709] syzkaller0: MTU too low for tipc bearer [ 173.264946][ T7709] tipc: Disabling bearer [ 173.361029][ T36] audit: type=1400 audit(2000000067.960:1595): avc: denied { read } for pid=7711 comm="syz.8.3114" path="socket:[51271]" dev="sockfs" ino=51271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 173.640793][ T7735] overlayfs: failed to clone upperpath [ 173.684503][ T7739] overlayfs: failed to clone upperpath [ 173.727079][ T7741] overlayfs: failed to clone upperpath [ 173.797660][ T7750] netlink: 'syz.0.3130': attribute type 4 has an invalid length. [ 173.832546][ T7752] overlayfs: failed to clone upperpath [ 173.977104][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3134'. [ 174.717543][ T7790] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 174.941898][ T31] usb 7-1: Cannot set autoneg [ 174.947159][ T31] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 174.960063][ T31] usb 7-1: USB disconnect, device number 19 [ 174.975369][ T422] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 175.136727][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.148254][ T422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.158224][ T422] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.172409][ T422] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.181696][ T422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.191359][ T422] usb 8-1: config 0 descriptor?? [ 175.435374][ T31] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 175.467874][ T7803] No source specified [ 175.579776][ T7811] syz.0.3155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 175.586512][ T31] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 175.595498][ T7811] CPU: 0 UID: 0 PID: 7811 Comm: syz.0.3155 Not tainted syzkaller #0 4fbf59849d479d82f8b5de9287114ed1a5b74461 [ 175.595535][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.595547][ T7811] Call Trace: [ 175.595554][ T7811] [ 175.595562][ T7811] __dump_stack+0x21/0x30 [ 175.595594][ T7811] dump_stack_lvl+0x10c/0x190 [ 175.595620][ T7811] ? __cfi_dump_stack_lvl+0x10/0x10 [ 175.595645][ T7811] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 175.595671][ T7811] dump_stack+0x19/0x20 [ 175.595695][ T7811] warn_alloc+0x1bc/0x2a0 [ 175.595720][ T7811] ? stack_depot_save_flags+0x38/0x800 [ 175.595742][ T7811] ? __cfi_warn_alloc+0x10/0x10 [ 175.595785][ T7811] ? kasan_save_track+0x4f/0x80 [ 175.595806][ T7811] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 175.595825][ T7811] ? xskq_create+0x68/0x2a0 [ 175.595850][ T7811] ? xsk_init_queue+0xb6/0x120 [ 175.595872][ T7811] ? xsk_setsockopt+0x43f/0x6f0 [ 175.595897][ T7811] ? do_sock_setsockopt+0x26a/0x400 [ 175.595920][ T7811] ? __x64_sys_setsockopt+0x1b8/0x250 [ 175.595945][ T7811] ? x64_sys_call+0x2adc/0x2ee0 [ 175.595973][ T7811] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.596004][ T7811] __vmalloc_node_range_noprof+0x135/0x1420 [ 175.596036][ T7811] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 175.596063][ T7811] ? avc_has_perm+0x144/0x220 [ 175.596089][ T7811] ? kasan_save_alloc_info+0x40/0x50 [ 175.596114][ T7811] ? __kasan_kmalloc+0x96/0xb0 [ 175.596135][ T7811] vmalloc_user_noprof+0x77/0x90 [ 175.596159][ T7811] ? xskq_create+0xdb/0x2a0 [ 175.596182][ T7811] xskq_create+0xdb/0x2a0 [ 175.596205][ T7811] xsk_init_queue+0xb6/0x120 [ 175.596227][ T7811] xsk_setsockopt+0x43f/0x6f0 [ 175.596249][ T7811] ? __cfi_xsk_setsockopt+0x10/0x10 [ 175.596271][ T7811] ? do_futex+0x309/0x500 [ 175.596304][ T7811] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 175.596328][ T7811] ? security_socket_setsockopt+0x33/0xd0 [ 175.596348][ T7811] ? __cfi_xsk_setsockopt+0x10/0x10 [ 175.596371][ T7811] do_sock_setsockopt+0x26a/0x400 [ 175.596396][ T7811] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 175.596424][ T7811] __x64_sys_setsockopt+0x1b8/0x250 [ 175.596461][ T7811] x64_sys_call+0x2adc/0x2ee0 [ 175.596489][ T7811] do_syscall_64+0x58/0xf0 [ 175.596510][ T7811] ? clear_bhb_loop+0x50/0xa0 [ 175.596529][ T7811] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 175.596558][ T7811] RIP: 0033:0x7f2a7658ec29 [ 175.596577][ T7811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.596594][ T7811] RSP: 002b:00007f2a7744a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 175.596618][ T7811] RAX: ffffffffffffffda RBX: 00007f2a767d5fa0 RCX: 00007f2a7658ec29 [ 175.596633][ T7811] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 175.596646][ T7811] RBP: 00007f2a76611e41 R08: 0000000000000004 R09: 0000000000000000 [ 175.596659][ T7811] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.596672][ T7811] R13: 00007f2a767d6038 R14: 00007f2a767d5fa0 R15: 00007ffc32bec118 [ 175.596689][ T7811] [ 175.596715][ T7811] Mem-Info: [ 175.603510][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.616024][ T7811] active_anon:26565 inactive_anon:10 isolated_anon:0 [ 175.616024][ T7811] active_file:13837 inactive_file:12825 isolated_file:0 [ 175.616024][ T7811] unevictable:16887 dirty:219 writeback:0 [ 175.616024][ T7811] slab_reclaimable:5411 slab_unreclaimable:74813 [ 175.616024][ T7811] mapped:24699 shmem:17078 pagetables:1268 [ 175.616024][ T7811] sec_pagetables:0 bounce:0 [ 175.616024][ T7811] kernel_misc_reclaimable:0 [ 175.616024][ T7811] free:1482063 free_pcp:2111 free_cma:0 [ 175.625803][ T31] usb 9-1: config 0 has no interface number 0 [ 175.632341][ T422] plantronics 0003:047F:FFFF.0029: unknown main item tag 0xd [ 175.638690][ T36] audit: type=1400 audit(2000000070.240:1596): avc: denied { ioctl } for pid=7810 comm="syz.0.3155" path="socket:[50627]" dev="sockfs" ino=50627 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.646481][ T422] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 175.648105][ T7811] Node 0 active_anon:106260kB inactive_anon:40kB active_file:55348kB inactive_file:51300kB unevictable:67548kB isolated(anon):0kB isolated(file):0kB mapped:98796kB dirty:876kB writeback:0kB shmem:68312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:6452kB pagetables:5072kB sec_pagetables:0kB all_unreclaimable? no [ 175.662906][ T422] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 175.668484][ T7811] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965932kB mlocked:0kB bounce:0kB free_pcp:5720kB local_pcp:5652kB free_cma:0kB [ 175.906312][ T422] usb 8-1: USB disconnect, device number 4 [ 175.913750][ T7811] lowmem_reserve[]: 0 3921 3921 [ 176.106683][ T31] usb 9-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 176.111178][ T7811] Normal free:2965040kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106152kB inactive_anon:40kB active_file:55348kB inactive_file:51300kB unevictable:67548kB writepending:876kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5344kB local_pcp:4008kB free_cma:0kB [ 176.120385][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.156791][ T7811] lowmem_reserve[]: 0 0 0 [ 176.162052][ T31] usb 9-1: Product: syz [ 176.166822][ T7811] DMA32: [ 176.170622][ T31] usb 9-1: Manufacturer: syz [ 176.170647][ T31] usb 9-1: SerialNumber: syz [ 176.173628][ T7811] 5*4kB [ 176.179568][ T31] usb 9-1: config 0 descriptor?? [ 176.183222][ T7811] (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 176.206384][ T7811] Normal: 154*4kB (UE) 423*8kB (UME) 564*16kB (UME) 191*32kB (UME) 175*64kB (UME) 73*128kB (UME) 63*256kB (UME) 42*512kB (UME) 34*1024kB (UM) 23*2048kB (UME) 685*4096kB (UM) = 2964992kB [ 176.225336][ T7811] 60656 total pagecache pages [ 176.230230][ T7811] 35 pages in swap cache [ 176.234761][ T7811] Free swap = 124136kB [ 176.239060][ T7811] Total swap = 124996kB [ 176.243477][ T7811] 2097051 pages RAM [ 176.247598][ T7811] 0 pages HighMem/MovableOnly [ 176.252470][ T7811] 351538 pages reserved [ 176.256980][ T7811] 0 pages cma reserved [ 176.264117][ T7811] Memory allocations: [ 176.272656][ T7811] 0 B 0 init/main.c:1370 func:do_initcalls [ 176.281446][ T7811] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 176.291022][ T7811] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 176.299168][ T7811] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 176.307495][ T7811] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 176.315701][ T7811] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 176.324553][ T7811] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 176.332657][ T7811] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 176.341034][ T7811] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 176.349045][ T7811] 0 B 0 init/initramfs.c:101 func:find_link [ 176.389648][ T31] usb 9-1: Found UVC 0.00 device syz (056d:0000) [ 176.398074][ T31] usb 9-1: No valid video chain found. [ 176.408704][ T31] usb 9-1: USB disconnect, device number 3 [ 176.522849][ T7840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.624865][ T7847] fuse: Bad value for 'fd' [ 177.145410][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 177.295366][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 177.301773][ T31] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 177.310541][ T31] usb 9-1: config 0 has no interface number 0 [ 177.318399][ T31] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 177.327970][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.336197][ T31] usb 9-1: Product: syz [ 177.340459][ T31] usb 9-1: Manufacturer: syz [ 177.345074][ T31] usb 9-1: SerialNumber: syz [ 177.350568][ T31] usb 9-1: config 0 descriptor?? [ 177.356481][ T31] smsc95xx v2.0.0 [ 178.358657][ T31] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 178.369705][ T31] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 178.379283][ T31] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 178.390455][ T31] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 178.399627][ T31] usb 9-1: USB disconnect, device number 4 [ 178.979963][ T7885] overlayfs: failed to clone upperpath [ 178.986773][ T7885] overlayfs: failed to clone upperpath [ 179.830443][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.834533][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 180.480187][ T7913] kvm_pr_unimpl_wrmsr: 31 callbacks suppressed [ 180.480211][ T7913] kvm: kvm [7911]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010006) = 0x8000 [ 180.497514][ T7913] kvm: kvm [7911]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 180.507295][ T7913] kvm: kvm [7911]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000 [ 180.517435][ T7913] kvm: kvm [7911]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000 [ 180.687613][ T7922] fuse: Bad value for 'fd' [ 181.074501][ T7949] overlayfs: failed to clone upperpath [ 181.080998][ T7949] overlayfs: failed to clone upperpath [ 181.875398][ T914] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.875416][ T915] Bluetooth: hci1: command 0x1003 tx timeout [ 181.875436][ T915] Bluetooth: hci0: command 0x1003 tx timeout [ 181.881786][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 182.061140][ T7980] overlayfs: statfs failed on './file0' [ 182.415379][ T421] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 182.566607][ T421] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.576615][ T421] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.589734][ T421] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 182.598856][ T421] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.607697][ T421] usb 9-1: config 0 descriptor?? [ 182.751491][ T8009] overlayfs: failed to clone upperpath [ 182.758216][ T8009] overlayfs: failed to clone upperpath [ 183.017718][ T421] kovaplus 0003:1E7D:2D50.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.8-1/input0 [ 183.216198][ T421] kovaplus 0003:1E7D:2D50.002A: couldn't init struct kovaplus_device [ 183.224631][ T421] kovaplus 0003:1E7D:2D50.002A: couldn't install mouse [ 183.232120][ T421] kovaplus 0003:1E7D:2D50.002A: probe with driver kovaplus failed with error -71 [ 183.242477][ T421] usb 9-1: USB disconnect, device number 5 [ 183.650123][ T36] audit: type=1326 audit(2000000078.250:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.7.3244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ea58ec29 code=0x0 [ 184.145608][ T45] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 184.197476][ T8052] overlayfs: failed to clone upperpath [ 184.275422][ T31] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 184.296396][ T45] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.304826][ T45] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 184.313896][ T45] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.324393][ T45] usb 7-1: config 220 has no interface number 2 [ 184.331179][ T45] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.344774][ T45] usb 7-1: config 220 interface 0 has no altsetting 0 [ 184.351785][ T45] usb 7-1: config 220 interface 76 has no altsetting 0 [ 184.359105][ T45] usb 7-1: config 220 interface 1 has no altsetting 0 [ 184.369937][ T45] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.379352][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.387632][ T45] usb 7-1: Product: syz [ 184.392175][ T45] usb 7-1: Manufacturer: syz [ 184.396920][ T45] usb 7-1: SerialNumber: syz [ 184.437189][ T31] usb 9-1: unable to get BOS descriptor or descriptor too short [ 184.445570][ T31] usb 9-1: not running at top speed; connect to a high speed hub [ 184.454595][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.464998][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.476161][ T31] usb 9-1: string descriptor 0 read error: -22 [ 184.482539][ T31] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.492290][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.508493][ T31] usb 9-1: 0:2 : does not exist [ 184.610720][ T45] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 184.617607][ T45] usb 7-1: No valid video chain found. [ 184.623177][ T45] usb 7-1: selecting invalid altsetting 0 [ 184.635440][ T45] usb 7-1: USB disconnect, device number 20 [ 184.981422][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 185.014512][ T36] audit: type=1326 audit(2000000079.610:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.0.3272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a7658ec29 code=0x0 [ 185.141381][ T36] audit: type=1400 audit(2000000079.740:1599): avc: denied { create } for pid=8087 comm="syz.6.3273" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 185.316696][ T31] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 185.335628][ T31] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 185.346000][ T31] usb 9-1: 5:0: failed to get current value for ch 1 (-22) [ 185.363748][ T31] usb 9-1: USB disconnect, device number 6 [ 185.572899][ T36] audit: type=1400 audit(2000000080.170:1600): avc: denied { create } for pid=8106 comm="syz.6.3280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 185.915340][ T902] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 186.075317][ T902] usb 7-1: Using ep0 maxpacket: 32 [ 186.082021][ T902] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.090675][ T902] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.099436][ T902] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 186.108701][ T902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 186.118616][ T902] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 186.128404][ T902] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.141441][ T902] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 186.150763][ T902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.160088][ T902] usb 7-1: config 0 descriptor?? [ 186.368904][ T902] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 186.383861][ T902] usb 7-1: USB disconnect, device number 21 [ 186.395924][ T902] usblp0: removed [ 186.815350][ T421] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 186.965346][ T421] usb 7-1: Using ep0 maxpacket: 32 [ 186.971980][ T421] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 186.980732][ T421] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 186.989878][ T421] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 186.999398][ T421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.009730][ T421] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.019499][ T421] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.032590][ T421] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.041794][ T421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.050583][ T421] usb 7-1: config 0 descriptor?? [ 187.257081][ T421] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 187.316299][ T8146] Invalid ELF header magic: != ELF [ 187.459240][ T902] usb 7-1: USB disconnect, device number 22 [ 187.466024][ T902] usblp0: removed [ 187.878895][ T8165] netlink: 31 bytes leftover after parsing attributes in process `syz.7.3306'. [ 187.889804][ T8165] netlink: 31 bytes leftover after parsing attributes in process `syz.7.3306'. [ 187.909637][ T8167] overlayfs: failed to clone upperpath [ 187.927813][ T8169] overlayfs: failed to clone upperpath [ 187.996711][ T8173] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 188.961017][ T8191] KVM: debugfs: duplicate directory 8191-6 [ 189.387278][ T8209] overlayfs: failed to clone upperpath [ 189.394628][ T8209] overlayfs: failed to clone upperpath [ 190.526293][ T8237] 9pnet_fd: p9_fd_create_tcp (8237): problem connecting socket to 127.0.0.1 [ 190.614210][ T8249] overlayfs: failed to clone upperpath [ 190.757188][ T8268] 9pnet_fd: Insufficient options for proto=fd [ 191.203705][ T36] audit: type=1400 audit(2000000085.800:1601): avc: denied { map } for pid=8270 comm="syz.0.3350" path="/1403/file0" dev="tmpfs" ino=7535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 191.243792][ T8273] overlayfs: failed to clone upperpath [ 191.795176][ T8286] overlayfs: failed to clone upperpath [ 192.674497][ T8344] overlayfs: failed to clone upperpath [ 192.811310][ T8363] netlink: 'syz.6.3389': attribute type 11 has an invalid length. [ 193.100115][ T8385] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3394'. [ 193.319524][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 193.734166][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3398'. [ 194.209693][ T36] audit: type=1400 audit(2000000088.810:1602): avc: denied { execute_no_trans } for pid=8422 comm="syz.0.3408" path=2F313433312F08 dev="tmpfs" ino=7695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.295652][ T8428] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 194.788355][ T8440] futex_wake_op: syz.7.3416 tries to shift op by -1; fix this program [ 195.643189][ T8496] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3437'. [ 195.765333][ T422] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 195.919400][ T36] audit: type=1400 audit(2000000090.520:1603): avc: denied { watch } for pid=8499 comm="syz.6.3440" path="pipe:[54406]" dev="pipefs" ino=54406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 195.950271][ T422] usb 9-1: unable to get BOS descriptor or descriptor too short [ 195.959150][ T422] usb 9-1: config 2 has an invalid interface number: 34 but max is 2 [ 195.968012][ T422] usb 9-1: config 2 has an invalid interface number: 6 but max is 2 [ 195.976674][ T422] usb 9-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 195.987346][ T422] usb 9-1: config 2 has no interface number 0 [ 195.993536][ T422] usb 9-1: config 2 has no interface number 2 [ 196.000169][ T422] usb 9-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 196.012233][ T422] usb 9-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 196.044307][ T422] usb 9-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.059654][ T422] usb 9-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 196.071500][ T422] usb 9-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 196.085041][ T422] usb 9-1: config 2 interface 1 has no altsetting 0 [ 196.092336][ T422] usb 9-1: config 2 interface 34 has no altsetting 0 [ 196.100147][ T422] usb 9-1: config 2 interface 6 has no altsetting 0 [ 196.110852][ T422] usb 9-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 196.121036][ T422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.132946][ T422] usb 9-1: Product: syz [ 196.141079][ T422] usb 9-1: Manufacturer: syz [ 196.145973][ T422] usb 9-1: SerialNumber: syz [ 196.366457][ T422] usb 9-1: selecting invalid altsetting 0 [ 196.396381][ T422] usb 9-1: USB disconnect, device number 7 [ 196.410277][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 197.595352][ T45] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 197.747159][ T45] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.756293][ T45] usb 7-1: config 2 has an invalid interface number: 34 but max is 2 [ 197.764701][ T45] usb 7-1: config 2 has an invalid interface number: 6 but max is 2 [ 197.773096][ T45] usb 7-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 197.783537][ T45] usb 7-1: config 2 has no interface number 0 [ 197.789845][ T45] usb 7-1: config 2 has no interface number 2 [ 197.796222][ T45] usb 7-1: config 2 interface 1 altsetting 190 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 197.807509][ T45] usb 7-1: config 2 interface 34 altsetting 8 has an invalid endpoint descriptor of length 5, skipping [ 197.818842][ T45] usb 7-1: config 2 interface 34 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.832173][ T45] usb 7-1: too many endpoints for config 2 interface 6 altsetting 7: 37, using maximum allowed: 30 [ 197.843304][ T45] usb 7-1: config 2 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 197.856479][ T45] usb 7-1: config 2 interface 1 has no altsetting 0 [ 197.863193][ T45] usb 7-1: config 2 interface 34 has no altsetting 0 [ 197.870202][ T45] usb 7-1: config 2 interface 6 has no altsetting 0 [ 197.878678][ T45] usb 7-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice=37.c4 [ 197.888056][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.896437][ T45] usb 7-1: Product: syz [ 197.900622][ T45] usb 7-1: Manufacturer: syz [ 197.905226][ T45] usb 7-1: SerialNumber: syz [ 198.119661][ T45] usb 7-1: selecting invalid altsetting 0 [ 198.131516][ T45] usb 7-1: USB disconnect, device number 23 [ 198.140338][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 199.161813][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 199.244025][ T8593] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 199.244055][ T8593] rust_binder: Error while translating object. [ 199.255679][ T8593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 199.262459][ T8593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 199.312269][ T8599] input: syz1 as /devices/virtual/input/input27 [ 199.813200][ T8618] syzkaller0: entered promiscuous mode [ 199.818858][ T8618] syzkaller0: entered allmulticast mode [ 200.738029][ T8667] overlayfs: failed to clone upperpath [ 201.695019][ T8681] overlayfs: failed to clone upperpath [ 201.711724][ T8677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.731436][ T8685] overlayfs: failed to clone upperpath [ 201.783193][ T8688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.588536][ T8722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 207.115018][ T8795] overlayfs: failed to clone upperpath [ 207.455383][ T64] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 207.616529][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.627763][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.638140][ T64] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 207.647209][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.656188][ T64] usb 9-1: config 0 descriptor?? [ 208.066405][ T64] hid-led 0003:27B8:01ED.002B: unknown main item tag 0xd [ 208.265010][ T64] hid-led 0003:27B8:01ED.002B: probe with driver hid-led failed with error -71 [ 208.276006][ T64] usb 9-1: USB disconnect, device number 8 [ 208.590145][ T8856] overlayfs: failed to clone upperpath [ 209.489568][ T8894] netlink: 'syz.0.3598': attribute type 4 has an invalid length. [ 209.498302][ T8894] netlink: 'syz.0.3598': attribute type 4 has an invalid length. [ 209.605345][ T64] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 209.762627][ T64] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.780914][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.800300][ T64] usb 9-1: config 0 descriptor?? [ 210.009697][ T64] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 211.415969][ T64] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 211.426623][ T64] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 211.437269][ T64] asix 9-1:0.0: probe with driver asix failed with error -71 [ 211.445637][ T64] usb 9-1: USB disconnect, device number 9 [ 212.288905][ T8961] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.035371][ T45] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 213.185352][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 213.191753][ T45] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 213.200828][ T45] usb 9-1: config 179 has no interface number 0 [ 213.207515][ T45] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 213.218945][ T45] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 213.231251][ T45] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 213.242722][ T45] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 213.254876][ T45] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 213.268768][ T45] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 213.278382][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.287810][ T8975] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 213.725333][ T45] usb 9-1: USB disconnect, device number 10 [ 213.725382][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.740093][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 214.275316][ T45] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 214.425402][ T45] usb 7-1: Using ep0 maxpacket: 8 [ 214.433230][ T45] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 214.442528][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.450967][ T45] usb 7-1: Product: syz [ 214.455449][ T45] usb 7-1: Manufacturer: syz [ 214.460150][ T45] usb 7-1: SerialNumber: syz [ 214.669114][ T45] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 214.885315][ T64] usb 7-1: USB disconnect, device number 24 [ 214.891938][ T64] usblp0: removed [ 216.278493][ T9062] bridge0: port 3(macsec0) entered blocking state [ 216.285302][ T9062] bridge0: port 3(macsec0) entered disabled state [ 216.292381][ T9062] macsec0: entered allmulticast mode [ 216.297990][ T9062] veth1_macvtap: entered allmulticast mode [ 216.304526][ T9062] macsec0: entered promiscuous mode [ 216.310628][ T9062] bridge0: port 3(macsec0) entered blocking state [ 216.317464][ T9062] bridge0: port 3(macsec0) entered forwarding state [ 216.401078][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3666'. [ 216.938913][ T9088] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 216.997383][ T9095] bridge0: port 3(macsec0) entered blocking state [ 217.003946][ T9095] bridge0: port 3(macsec0) entered disabled state [ 217.011231][ T9095] macsec0: entered allmulticast mode [ 217.016747][ T9095] veth1_macvtap: entered allmulticast mode [ 217.023072][ T9095] macsec0: entered promiscuous mode [ 217.028994][ T9095] bridge0: port 3(macsec0) entered blocking state [ 217.035797][ T9095] bridge0: port 3(macsec0) entered forwarding state [ 217.852630][ T9126] overlayfs: failed to clone upperpath [ 218.222993][ T9144] overlayfs: failed to clone upperpath [ 219.923641][ T9192] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 220.155347][ T45] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 220.306590][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.317995][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.328682][ T45] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.342081][ T45] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.351365][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.360354][ T45] usb 9-1: config 0 descriptor?? [ 220.769231][ T45] plantronics 0003:047F:FFFF.002C: unknown main item tag 0xd [ 220.777865][ T45] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 220.787007][ T45] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 221.037052][ T31] usb 9-1: USB disconnect, device number 11 [ 221.381199][ T9207] bridge0: port 3(macsec0) entered blocking state [ 221.388032][ T9207] bridge0: port 3(macsec0) entered disabled state [ 221.394813][ T9207] macsec0: entered allmulticast mode [ 221.400471][ T9207] veth1_macvtap: entered allmulticast mode [ 221.407047][ T9207] macsec0: entered promiscuous mode [ 221.412568][ T9207] bridge0: port 3(macsec0) entered blocking state [ 221.419403][ T9207] bridge0: port 3(macsec0) entered forwarding state [ 221.431225][ T9207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 221.431260][ T9207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:732 [ 221.556457][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.659031][ T9212] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 222.445340][ T45] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 222.595326][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 222.601901][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.613330][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.623860][ T45] usb 7-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 222.633408][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.642573][ T45] usb 7-1: config 0 descriptor?? [ 223.061640][ T45] playstation 0003:054C:05C4.002D: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.6-1/input0 [ 223.255467][ T45] playstation 0003:054C:05C4.002D: Failed to retrieve feature with reportID 18: -32 [ 223.265483][ T45] playstation 0003:054C:05C4.002D: Failed to retrieve DualShock4 pairing info: -32 [ 223.274998][ T45] playstation 0003:054C:05C4.002D: Failed to get MAC address from DualShock4 [ 223.284044][ T45] playstation 0003:054C:05C4.002D: Failed to create dualshock4. [ 223.292629][ T45] playstation 0003:054C:05C4.002D: probe with driver playstation failed with error -32 [ 223.635481][ T914] Bluetooth: hci0: command 0x1003 tx timeout [ 223.635571][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 225.207240][ T421] usb 7-1: USB disconnect, device number 25 [ 225.233996][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.459887][ T36] audit: type=1400 audit(2000000120.060:1604): avc: denied { create } for pid=9299 comm="syz.7.3769" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 227.235381][ T914] Bluetooth: hci0: command 0x1003 tx timeout [ 227.235376][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.337309][ T36] audit: type=1400 audit(2000000121.930:1605): avc: denied { read write } for pid=9319 comm="syz.8.3768" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.365035][ T36] audit: type=1400 audit(2000000121.930:1606): avc: denied { open } for pid=9319 comm="syz.8.3768" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.390063][ T36] audit: type=1400 audit(2000000121.930:1607): avc: denied { ioctl } for pid=9319 comm="syz.8.3768" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.575422][ T45] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 227.691650][ T9336] overlayfs: failed to clone upperpath [ 227.735368][ T45] usb 9-1: Using ep0 maxpacket: 32 [ 227.742303][ T45] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.751165][ T45] usb 9-1: config 0 has no interface number 0 [ 227.757680][ T45] usb 9-1: config 0 interface 184 has no altsetting 0 [ 227.766473][ T45] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.775743][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.785130][ T45] usb 9-1: Product: syz [ 227.789537][ T45] usb 9-1: Manufacturer: syz [ 227.794518][ T45] usb 9-1: SerialNumber: syz [ 227.799958][ T45] usb 9-1: config 0 descriptor?? [ 227.807398][ T45] smsc75xx v1.0.0 [ 228.063923][ T9358] overlayfs: failed to clone upperpath [ 228.108614][ T36] audit: type=1400 audit(2000000122.710:1608): avc: denied { create } for pid=9362 comm="syz.6.3786" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 228.285080][ T36] audit: type=1326 audit(2000000122.880:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.6.3787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb100f8ec29 code=0x0 [ 228.288895][ T9388] tipc: Enabling of bearer rejected, failed to enable media [ 228.604762][ T9422] tipc: Enabling of bearer rejected, failed to enable media [ 228.814935][ T45] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 229.015687][ T45] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.027067][ T45] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.037689][ T45] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 229.048744][ T45] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 229.058590][ T45] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.068370][ T45] usb 9-1: USB disconnect, device number 12 [ 229.355323][ T31] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 229.506564][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.518150][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.538264][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.557626][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.568546][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.569036][ T36] audit: type=1400 audit(2000000124.170:1610): avc: denied { create } for pid=9444 comm="syz.8.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 229.578020][ T31] usb 7-1: config 0 descriptor?? [ 229.601038][ T9445] SELinux: ebitmap start bit (20) is not a multiple of the map unit size (64) [ 229.614823][ T9445] SELinux: failed to load policy [ 229.865309][ T331] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 230.010457][ T31] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 230.020470][ T331] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.040967][ T31] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 230.057163][ T331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.068475][ T331] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.079276][ T331] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.092553][ T331] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.101652][ T331] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.113688][ T331] usb 9-1: config 0 descriptor?? [ 230.224921][ T64] usb 7-1: USB disconnect, device number 26 [ 230.522213][ T331] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 230.531674][ T331] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 230.775795][ T9450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.784746][ T9450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.844985][ T9480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.854037][ T9480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.884147][ T9485] 9pnet_fd: Insufficient options for proto=fd [ 231.802780][ T9506] overlayfs: failed to clone upperpath [ 232.553027][ T9533] tipc: Enabling of bearer rejected, failed to enable media [ 232.586083][ T64] usb 9-1: USB disconnect, device number 13 [ 232.681071][ T36] audit: type=1400 audit(2000000127.280:1611): avc: denied { map } for pid=9537 comm="syz.0.3860" path="socket:[59488]" dev="sockfs" ino=59488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 232.897388][ T9553] tipc: Enabled bearer , priority 10 [ 232.942012][ T9555] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3869'. [ 233.030656][ T36] audit: type=1400 audit(2000000127.630:1612): avc: denied { sqpoll } for pid=9558 comm="syz.0.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 233.690397][ T31] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 233.705374][ T31] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 233.719091][ T31] hid-generic 0003:0004:0000.0030: unknown main item tag 0x0 [ 233.734527][ T31] hid-generic 0003:0004:0000.0030: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 233.769400][ T9595] overlayfs: failed to clone upperpath [ 233.865437][ T9608] overlayfs: failed to clone upperpath [ 233.877601][ T9610] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 233.906935][ T9612] netlink: 'syz.0.3893': attribute type 4 has an invalid length. [ 234.930018][ T36] audit: type=1326 audit(2000000129.530:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9648 comm="syz.8.3911" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9e3fd85be7 code=0x0 [ 235.334920][ T9658] netfs: Couldn't get user pages (rc=-14) [ 235.527891][ T9667] VFS: Mount too revealing [ 236.028775][ T36] audit: type=1400 audit(2000000130.630:1614): avc: denied { mount } for pid=9681 comm="syz.6.3922" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 236.546733][ T36] audit: type=1400 audit(2000000131.150:1615): avc: denied { unmount } for pid=5485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 236.813705][ T9710] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 236.821242][ T9710] overlayfs: failed to set xattr on upper [ 236.829180][ T9710] overlayfs: ...falling back to redirect_dir=nofollow. [ 236.837548][ T9710] overlayfs: ...falling back to uuid=null. [ 236.878021][ T9715] overlayfs: failed to clone upperpath [ 236.927502][ T9723] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 236.955300][ T36] audit: type=1400 audit(2000000131.550:1616): avc: denied { create } for pid=9722 comm="syz.8.3938" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632E2F94169AE115DDD [ 237.024171][ T36] audit: type=1400 audit(2000000131.550:1617): avc: denied { associate } for pid=9722 comm="syz.8.3938" name="work" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632E2F94169AE115DDD [ 237.085297][ T36] audit: type=1400 audit(2000000131.550:1618): avc: denied { setattr } for pid=9722 comm="syz.8.3938" name="work" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632E2F94169AE115DDD [ 237.125297][ T36] audit: type=1400 audit(2000000131.550:1619): avc: denied { write } for pid=9722 comm="syz.8.3938" name="work" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632E2F94169AE115DDD [ 237.161663][ T36] audit: type=1400 audit(2000000131.550:1620): avc: denied { write open } for pid=9722 comm="syz.8.3938" path=2F202864656C6574656429 dev="tmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4B0D814E10E14464AB3517E8B7D3513391426BD994796298CFF0D3ADFCA373D0FFBF84012C9D7EFAD43B6333981F70086F9AB9CDBAD06650D7D2B83632E2F94169AE115DDD [ 237.695493][ T9755] overlayfs: failed to clone upperpath [ 237.712090][ T9757] Invalid ELF header magic: != ELF [ 237.717898][ T422] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 237.877025][ T422] usb 9-1: config 1 has an invalid interface descriptor of length 5, skipping [ 237.886139][ T422] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.896659][ T422] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.908249][ T422] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.917733][ T422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.926238][ T422] usb 9-1: Product: syz [ 237.930501][ T422] usb 9-1: Manufacturer: syz [ 237.935384][ T422] usb 9-1: SerialNumber: syz [ 238.145754][ T422] usb 9-1: 0:2 : does not exist [ 238.150830][ T422] usb 9-1: unit 4 not found! [ 238.157915][ T422] usb 9-1: USB disconnect, device number 14 [ 238.167166][ T8758] udevd[8758]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 238.815668][ T9797] kvm: pic: non byte write [ 238.821109][ T9797] kvm: Disabled LAPIC found during irq injection [ 238.948227][ T9815] netlink: 'syz.7.3977': attribute type 4 has an invalid length. [ 238.957558][ T9815] netlink: 'syz.7.3977': attribute type 4 has an invalid length. [ 239.885315][ T45] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 239.965378][ T31] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 240.035410][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 240.042760][ T45] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 240.052625][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.062193][ T45] usb 9-1: config 0 descriptor?? [ 240.088106][ T9862] overlayfs: failed to clone lowerpath [ 240.106958][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 240.106978][ T36] audit: type=1400 audit(2000000134.710:1630): avc: denied { watch watch_reads } for pid=9863 comm="syz.0.3999" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 240.146494][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.157979][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.167985][ T31] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 240.177523][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.186796][ T31] usb 7-1: config 0 descriptor?? [ 240.308054][ T45] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 241.310550][ T45] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.321179][ T45] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 241.331943][ T45] asix 9-1:0.0: probe with driver asix failed with error -71 [ 241.340392][ T45] usb 9-1: USB disconnect, device number 15 [ 242.718269][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4010'. [ 242.742640][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 242.750003][ T9892] tipc: Failed to remove unknown binding: 66,1,1/0:385715614/385715616 [ 242.750521][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 242.760648][ T9892] tipc: Failed to remove unknown binding: 66,1,1/0:385715614/385715616 [ 242.768594][ T31] usb 7-1: USB disconnect, device number 27 [ 242.783314][ T36] audit: type=1400 audit(2000000137.380:1631): avc: denied { watch watch_reads } for pid=9887 comm="syz.8.4009" path="/184/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=lnk_file permissive=1 [ 242.857905][ T9905] Invalid ELF header len 56 [ 242.859177][ T36] audit: type=1400 audit(2000000137.460:1632): avc: denied { module_load } for pid=9904 comm="syz.8.4016" path="/186/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 242.933493][ T9908] kvm: pic: non byte write [ 242.941627][ T9908] kvm: Disabled LAPIC found during irq injection [ 242.956053][ T9917] netlink: 'syz.7.4021': attribute type 11 has an invalid length. [ 243.074504][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.082145][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.089976][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.097707][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.106636][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.115083][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.125063][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.133811][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.141576][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.150320][ T9934] IPv4: Oversized IP packet from 172.20.20.11 [ 243.204669][ T9941] overlayfs: failed to clone upperpath [ 243.255318][ T31] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 243.405363][ T45] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 243.415457][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 243.421740][ T31] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 243.430280][ T31] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 243.439094][ T31] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 243.448138][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.458354][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 243.468665][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 243.482213][ T31] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 243.492762][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.503019][ T31] usb 7-1: config 0 descriptor?? [ 243.566360][ T45] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.576797][ T45] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.587512][ T45] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 243.597318][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.605427][ T45] usb 9-1: Product: syz [ 243.609887][ T45] usb 9-1: Manufacturer: syz [ 243.614851][ T45] usb 9-1: SerialNumber: syz [ 243.711473][ T31] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 243.725305][ T31] usb 7-1: USB disconnect, device number 28 [ 243.732267][ T31] usblp0: removed [ 244.025642][ T45] usb 9-1: 0:2 : does not exist [ 244.155296][ T31] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 244.305287][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 244.311929][ T31] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 244.321191][ T31] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 244.330205][ T31] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 244.339316][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.349290][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.359258][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 244.372730][ T31] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 244.382278][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.391312][ T31] usb 7-1: config 0 descriptor?? [ 244.429494][ T45] usb 9-1: USB disconnect, device number 16 [ 244.438845][ T8758] udevd[8758]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 244.599013][ T31] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 244.801862][ T45] usb 7-1: USB disconnect, device number 29 [ 244.808791][ T45] usblp0: removed [ 245.037029][ T9986] bridge0: port 4(ip6gretap0) entered blocking state [ 245.044101][ T9986] bridge0: port 4(ip6gretap0) entered disabled state [ 245.051242][ T9986] ip6gretap0: entered allmulticast mode [ 245.057565][ T9986] ip6gretap0: entered promiscuous mode [ 245.063346][ T9986] bridge0: port 4(ip6gretap0) entered blocking state [ 245.070081][ T9986] bridge0: port 4(ip6gretap0) entered forwarding state [ 245.236154][ T9993] netlink: 1351 bytes leftover after parsing attributes in process `syz.7.4054'. [ 245.799761][ T9999] netlink: 'syz.8.4056': attribute type 4 has an invalid length. [ 245.809967][ T9999] netlink: 'syz.8.4056': attribute type 4 has an invalid length. [ 245.897516][ T36] audit: type=1400 audit(2000000140.500:1633): avc: denied { read } for pid=10003 comm="syz.8.4058" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 245.922580][ T36] audit: type=1400 audit(2000000140.500:1634): avc: denied { open } for pid=10003 comm="syz.8.4058" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 245.988147][T10010] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 245.997592][T10010] overlayfs: missing 'lowerdir' [ 246.457372][T10035] input: syz1 as /devices/virtual/input/input30 [ 246.599007][T10049] netlink: 'syz.7.4077': attribute type 4 has an invalid length. [ 246.959526][T10065] overlayfs: failed to clone upperpath [ 247.222654][T10077] bridge0: port 4(veth0_to_bridge) entered blocking state [ 247.229883][T10077] bridge0: port 4(veth0_to_bridge) entered disabled state [ 247.237300][T10077] veth0_to_bridge: entered allmulticast mode [ 247.243844][T10077] veth0_to_bridge: entered promiscuous mode [ 247.250131][T10077] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 247.262632][T10077] bridge0: port 4(veth0_to_bridge) entered blocking state [ 247.270259][T10077] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 247.532814][ T36] audit: type=1400 audit(2000000142.130:1635): avc: denied { setattr } for pid=10097 comm="syz.6.4097" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 247.788549][T10118] tipc: Enabled bearer , priority 0 [ 247.815940][T10116] tipc: Resetting bearer [ 247.857178][T10116] tipc: Disabling bearer [ 248.598182][T10148] overlayfs: failed to clone upperpath [ 248.625961][ T701] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.637496][T10155] overlayfs: failed to clone upperpath [ 249.875706][ C1] net_ratelimit: 22 callbacks suppressed [ 249.875729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.894228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.906749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.918855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.931213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.944169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.956542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.968725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.981048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.993533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.675304][ T914] Bluetooth: hci0: command 0x1003 tx timeout [ 250.676949][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.698912][T10151] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 250.935336][ T421] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 251.107403][ T421] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 251.118981][ T421] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.129547][ T421] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 251.143397][ T421] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 251.153310][ T421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.164216][ T421] usb 7-1: config 0 descriptor?? [ 251.577403][ T421] holtek_kbd 0003:04D9:A055.0031: item fetching failed at offset 5/7 [ 251.597219][ T421] holtek_kbd 0003:04D9:A055.0031: probe with driver holtek_kbd failed with error -22 [ 251.747684][T10233] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 251.771395][T10233] kvm: pic: non byte read [ 251.791601][T10233] kvm: pic: level sensitive irq not supported [ 251.792565][T10233] kvm: pic: non byte read [ 251.805951][ T421] usb 7-1: USB disconnect, device number 30 [ 251.833199][T10233] kvm: pic: non byte read [ 251.844643][T10233] kvm: pic: non byte read [ 251.855648][T10233] kvm: pic: non byte read [ 252.495304][ T421] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 252.655287][ T421] usb 9-1: Using ep0 maxpacket: 32 [ 252.664270][ T421] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.674858][ T421] usb 9-1: config 0 has no interface number 0 [ 252.681537][ T421] usb 9-1: config 0 interface 184 has no altsetting 0 [ 252.690480][ T421] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.700189][ T421] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.708703][ T421] usb 9-1: Product: syz [ 252.713135][ T421] usb 9-1: Manufacturer: syz [ 252.718799][ T421] usb 9-1: SerialNumber: syz [ 252.725548][ T421] usb 9-1: config 0 descriptor?? [ 252.732990][ T421] smsc75xx v1.0.0 [ 252.737193][ T421] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 252.748068][ T421] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -22 [ 253.241980][T10278] kvm: pic: non byte write [ 253.246807][T10278] kvm: pic: non byte write [ 253.251952][T10278] kvm: pic: non byte write [ 253.257824][T10278] kvm: pic: non byte write [ 253.263408][T10278] kvm: pic: non byte write [ 253.269381][T10278] kvm: pic: non byte write [ 253.274919][T10278] kvm: pic: non byte write [ 253.280240][T10278] kvm: pic: non byte write [ 253.304919][T10278] kvm: pic: non byte write [ 253.311377][T10278] kvm: pic: non byte write [ 253.815293][ T421] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 253.975295][ T421] usb 7-1: Using ep0 maxpacket: 32 [ 253.982360][ T421] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 253.991413][ T421] usb 7-1: config 0 has no interface number 0 [ 253.997764][ T421] usb 7-1: config 0 interface 184 has no altsetting 0 [ 254.006678][ T421] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.016068][ T421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.024212][ T421] usb 7-1: Product: syz [ 254.029080][ T421] usb 7-1: Manufacturer: syz [ 254.033924][ T421] usb 7-1: SerialNumber: syz [ 254.040472][ T421] usb 7-1: config 0 descriptor?? [ 254.048638][ T421] smsc75xx v1.0.0 [ 254.649571][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 254.677033][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.745548][ T36] audit: type=1326 audit(2000000149.330:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10320 comm="syz.0.4186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f2a76585be7 code=0x0 [ 254.885305][ C1] net_ratelimit: 90504 callbacks suppressed [ 254.885327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.903939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.916451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.929141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.941383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.953967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.966259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.978433][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.991214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.004244][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.064449][ T422] usb 9-1: USB disconnect, device number 17 [ 255.745295][ T422] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 255.915314][ T422] usb 9-1: Using ep0 maxpacket: 32 [ 255.923007][ T422] usb 9-1: unable to get BOS descriptor or descriptor too short [ 255.932202][ T422] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 255.955280][ T422] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 255.978977][ T422] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 255.995594][ T422] usb 9-1: config 128 has no interface number 0 [ 256.002213][ T422] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 256.014181][ T422] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.025351][ T422] usb 9-1: config 128 interface 127 has no altsetting 0 [ 256.034054][ T422] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 256.053788][ T422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.073839][ T422] usb 9-1: Product: syz [ 256.082365][ T422] usb 9-1: Manufacturer: syz [ 256.090953][ T422] usb 9-1: SerialNumber: syz [ 256.178851][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 256.217360][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 256.249025][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 256.278489][ T421] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 256.305356][ T421] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 256.347050][ T421] usb 7-1: USB disconnect, device number 31 [ 256.359511][ T422] usb 9-1: USB disconnect, device number 18 [ 256.387656][ T8796] udevd[8796]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 257.175309][ T422] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 257.227733][ T36] audit: type=1400 audit(2000000151.822:1637): avc: denied { rename } for pid=10354 comm="syz.6.4199" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 257.336386][ T422] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 257.352787][ T422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.378732][ T422] usb 9-1: config 0 descriptor?? [ 258.248972][T10380] veth0_vlan: entered allmulticast mode [ 258.386075][T10381] veth0_vlan: left promiscuous mode [ 258.400682][T10381] veth0_vlan: entered promiscuous mode [ 259.807872][ T422] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 259.840311][ T422] asix 9-1:0.0: probe with driver asix failed with error -71 [ 259.875392][ T422] usb 9-1: USB disconnect, device number 19 [ 259.895286][ C1] net_ratelimit: 18851 callbacks suppressed [ 259.895307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.914204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.926538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.939304][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.951895][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.964662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.977063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.989662][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.004714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.017466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.421633][ T36] audit: type=1400 audit(2000000155.012:1638): avc: denied { ioctl } for pid=10426 comm="syz.8.4223" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 261.250654][T10439] picdev_write: 56 callbacks suppressed [ 261.250678][T10439] kvm: pic: non byte write [ 261.795552][ T422] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 262.014874][ T422] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 262.045048][ T422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.078461][ T422] usb 9-1: config 0 descriptor?? [ 263.605702][T10490] overlayfs: failed to clone upperpath [ 264.643538][ T422] usb 9-1: Cannot set autoneg [ 264.649645][ T422] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 264.676718][ T422] usb 9-1: USB disconnect, device number 20 [ 265.035590][ C1] net_ratelimit: 19122 callbacks suppressed [ 265.035611][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.054575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.067588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.080334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.092991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.105618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.118551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.132110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.145107][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.158020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.370547][ T36] audit: type=1326 audit(2000000159.952:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.0.4256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a7658ec29 code=0x0 [ 267.098462][ T36] audit: type=1326 audit(2000000161.692:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.0.4267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a7658ec29 code=0x0 [ 267.575296][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 267.736584][ T9] usb 9-1: config 0 has an invalid interface number: 199 but max is 1 [ 267.746077][ T9] usb 9-1: config 0 has no interface number 1 [ 267.753854][ T9] usb 9-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 267.764574][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.778568][ T9] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 267.788048][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.796891][ T9] usb 9-1: SerialNumber: syz [ 267.803964][ T9] usb 9-1: config 0 descriptor?? [ 267.811898][ T9] usb 9-1: Found UVC 0.00 device (0002:0000) [ 267.830153][ T9] usb 9-1: No valid video chain found. [ 268.025271][ T9] usb 9-1: USB disconnect, device number 21 [ 268.826067][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 268.996444][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.007967][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.018488][ T9] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 269.028834][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.049475][ T9] usb 9-1: config 0 descriptor?? [ 270.074975][ C1] net_ratelimit: 20457 callbacks suppressed [ 270.074999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.094020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.106909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.119774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.132871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.145877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.159253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.171985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.184853][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.197407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.518441][ T9] hid-led 0003:0FC5:B080.0032: probe with driver hid-led failed with error -32 [ 270.538795][ T9] usb 9-1: USB disconnect, device number 22 [ 270.812808][T10625] overlayfs: failed to clone upperpath [ 270.849751][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4294'. [ 270.975024][ T36] audit: type=1400 audit(2000000165.562:1641): avc: denied { mounton } for pid=10634 comm="syz.6.4296" path="/389/file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.033114][ T36] audit: type=1400 audit(2000000165.562:1642): avc: denied { read write } for pid=10634 comm="syz.6.4296" name="file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 271.081367][ T36] audit: type=1400 audit(2000000165.562:1643): avc: denied { open } for pid=10634 comm="syz.6.4296" path="/389/file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 272.855029][T10694] tipc: Enabling of bearer rejected, failed to enable media [ 272.914235][T10697] tipc: Enabling of bearer rejected, failed to enable media [ 272.975869][T10705] overlayfs: failed to clone upperpath [ 273.161753][T10715] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaa [ 273.935453][T10740] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4337'. [ 273.944919][T10740] 0M: renamed from bridge_slave_0 (while UP) [ 274.075296][ T9] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 274.238024][ T9] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 274.249416][ T9] usb 9-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.264644][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 274.271944][ T9] usb 9-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 274.282053][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.291783][ T9] usb 9-1: config 0 descriptor?? [ 274.302083][T10738] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 274.718519][ T9] thrustmaster 0003:044F:B654.0033: item fetching failed at offset 2/5 [ 274.750396][ T9] thrustmaster 0003:044F:B654.0033: parse failed [ 274.767396][ T9] thrustmaster 0003:044F:B654.0033: probe with driver thrustmaster failed with error -22 [ 274.938940][ T9] usb 9-1: USB disconnect, device number 23 [ 275.075357][ C1] net_ratelimit: 21207 callbacks suppressed [ 275.075380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.093813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.106295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.119031][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.131523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.144042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.156405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.169118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.181645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.194576][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.366619][T10764] netlink: 'syz.6.4348': attribute type 32 has an invalid length. [ 275.374825][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4348'. [ 275.817890][T10785] overlayfs: failed to clone lowerpath [ 275.836053][T10785] netlink: 'syz.7.4357': attribute type 4 has an invalid length. [ 275.869166][T10785] netlink: 'syz.7.4357': attribute type 4 has an invalid length. [ 276.005834][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4361'. [ 276.852545][ T36] audit: type=1400 audit(2000000171.442:1644): avc: denied { connect } for pid=10822 comm="syz.8.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 277.205310][ T422] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 277.365355][ T422] usb 9-1: Using ep0 maxpacket: 32 [ 277.373702][ T422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.385505][ T422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.396996][ T422] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 277.407972][ T422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.426133][ T422] usb 9-1: config 0 descriptor?? [ 277.602514][T10845] tipc: Started in network mode [ 277.607756][T10845] tipc: Node identity 4, cluster identity 4711 [ 277.613973][T10845] tipc: Node number set to 4 [ 277.848745][ T422] kone 0003:1E7D:2CED.0034: unbalanced collection at end of report description [ 277.887454][ T422] kone 0003:1E7D:2CED.0034: parse failed [ 277.915570][ T422] kone 0003:1E7D:2CED.0034: probe with driver kone failed with error -22 [ 278.552119][ T9] usb 9-1: USB disconnect, device number 24 [ 279.005276][ T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 279.176348][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.197404][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.223529][ T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 279.248548][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.285434][ T9] usb 9-1: config 0 descriptor?? [ 279.411048][T10878] overlayfs: failed to resolve './bus/../file0': -2 [ 279.707261][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.717176][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.730935][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.747440][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.768236][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.784187][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.812169][ T9] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 279.850049][ T9] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 279.912249][T10891] overlayfs: failed to clone upperpath [ 279.945835][ T9] cp2112 0003:10C4:EA90.0035: Part Number: 0x00 Device Version: 0x00 [ 280.085348][ C1] net_ratelimit: 22867 callbacks suppressed [ 280.085371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.104536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.117118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.129523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.141953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.154490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.167077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.182474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.195336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.208091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.716582][ T9] cp2112 0003:10C4:EA90.0035: error reading lock byte: -71 [ 280.740357][ T9] usb 9-1: USB disconnect, device number 25 [ 280.834977][T10914] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10914 comm=syz.7.4413 [ 281.024536][ T36] audit: type=1326 audit(2000000175.612:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10922 comm="syz.0.4417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a7658ec29 code=0x0 [ 281.114254][T10928] overlayfs: failed to resolve './file0': -2 [ 281.557732][ T330] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 281.969338][ T330] usb 9-1: Using ep0 maxpacket: 32 [ 282.016591][ T330] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 282.024894][ T330] usb 9-1: config 0 has no interface number 0 [ 282.045344][ T330] usb 9-1: config 0 interface 230 has no altsetting 0 [ 282.115616][ T330] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 282.124828][ T330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.156096][ T330] usb 9-1: Product: syz [ 282.160320][ T330] usb 9-1: Manufacturer: syz [ 282.165025][ T330] usb 9-1: SerialNumber: syz [ 282.206889][ T330] usb 9-1: config 0 descriptor?? [ 282.230705][ T330] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 282.278167][ T330] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 283.346341][T10979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10979 comm=syz.7.4437 [ 283.520695][ T36] audit: type=1400 audit(2000000178.112:1646): avc: denied { rename } for pid=10982 comm="syz.6.4438" name="file5" dev="tmpfs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.719428][ T330] ums-usbat 9-1:0.230: probe with driver ums-usbat failed with error -5 [ 284.792251][ T330] usb 9-1: USB disconnect, device number 26 [ 284.831639][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'. [ 285.095301][ C1] net_ratelimit: 24308 callbacks suppressed [ 285.095323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.095362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 285.101762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.114033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 285.126375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.138651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 285.151135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.163747][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 285.176190][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.188200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.105300][ C0] net_ratelimit: 89273 callbacks suppressed [ 290.105325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.105443][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.111675][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.123866][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.135954][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.148287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.160248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.172496][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.184574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 290.196977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.245249][ C1] sched: DL replenish lagged too much [ 295.115242][ C1] net_ratelimit: 89616 callbacks suppressed [ 295.115265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.115305][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 295.121722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.133659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 295.145788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.157764][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 295.170199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.182045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 295.194360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.206450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.125301][ C0] net_ratelimit: 92136 callbacks suppressed [ 300.125325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.125511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.131761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.144947][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.157534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.170436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.182937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.195544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.207781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 300.220056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.409974][ T31] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 302.656887][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 304.037653][ T31] usb 9-1: device descriptor read/all, error -71 [ 305.135260][ C1] net_ratelimit: 88743 callbacks suppressed [ 305.135284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.135307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 305.141453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.153622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 305.166108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.177898][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 305.190368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.202609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 305.214935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.227684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.145246][ C0] net_ratelimit: 89442 callbacks suppressed [ 310.145271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.145289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.151374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.163616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.175603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.187775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.200028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.212312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.224556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 310.237328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.155230][ C0] net_ratelimit: 86455 callbacks suppressed [ 315.155254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 315.155265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.155512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.161372][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 315.174043][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.186425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 315.198695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.210745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 315.223415][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.235991][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.165266][ C0] net_ratelimit: 89739 callbacks suppressed [ 320.165291][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.165469][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.171327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.184136][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.196466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.208814][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.220826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.233174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.245307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 320.257732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.175292][ C0] net_ratelimit: 89936 callbacks suppressed [ 325.175317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 325.175393][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.181668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 325.194236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.206272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 325.218727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.231343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 325.244306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.256032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 325.268651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.178295][T11052] overlayfs: failed to clone upperpath [ 330.185262][ C0] net_ratelimit: 88484 callbacks suppressed [ 330.185286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 330.185346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.191310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 330.203810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.215956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 330.228121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.240417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 330.252649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.264453][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 330.276972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.195219][ C0] net_ratelimit: 85742 callbacks suppressed [ 335.195241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 335.195384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.201597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 335.213988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.226025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 335.238232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.249968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 335.261989][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.273908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 335.286116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.451160][ T36] audit: type=1400 audit(2000000232.992:1647): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1560]" dev="pipefs" ino=1560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 340.205263][ C0] net_ratelimit: 85443 callbacks suppressed [ 340.205288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 340.205485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.211397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 340.223690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.235961][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 340.248397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.260290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 340.272663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.284837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 340.297058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.215236][ C0] net_ratelimit: 91068 callbacks suppressed [ 345.215260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 345.215383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.221455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 345.234023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.246673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 345.258808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.271149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 345.284050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.296127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:00:00:00:00:79:74, vlan:0) [ 345.308223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)