last executing test programs: 1.937512456s ago: executing program 1 (id=60695): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) 725.741308ms ago: executing program 2 (id=60713): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) syz_open_procfs(0xffffffffffffffff, 0x0) 725.511198ms ago: executing program 1 (id=60714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r8, 0x2000003, 0x12, r4, 0x0) 725.205768ms ago: executing program 0 (id=60715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x10406) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 585.960682ms ago: executing program 0 (id=60716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0x12) fcntl$setown(r2, 0x8, 0x0) 571.221683ms ago: executing program 0 (id=60717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 456.722124ms ago: executing program 2 (id=60718): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 424.114498ms ago: executing program 0 (id=60719): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xee) 371.437443ms ago: executing program 0 (id=60721): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f0000000900)='environ\x00') close_range(r4, 0xffffffffffffffff, 0x0) 343.577916ms ago: executing program 0 (id=60723): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) 342.795816ms ago: executing program 2 (id=60724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) 322.973848ms ago: executing program 3 (id=60725): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe831cb58833da74d, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x2, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd2a, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 270.479054ms ago: executing program 3 (id=60726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 263.344444ms ago: executing program 2 (id=60727): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 215.572769ms ago: executing program 1 (id=60728): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) 215.268659ms ago: executing program 3 (id=60729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x81) 214.742049ms ago: executing program 2 (id=60730): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 148.420936ms ago: executing program 1 (id=60731): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_open_procfs(0x0, &(0x7f0000000900)='environ\x00') close_range(r4, 0xffffffffffffffff, 0x0) 147.929306ms ago: executing program 3 (id=60732): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d800"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 124.735798ms ago: executing program 1 (id=60733): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003c40)="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", 0x3c1}], 0x1}}], 0x1, 0x8014) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) 93.096651ms ago: executing program 2 (id=60734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000000c0)="debd4decd162052585", 0x9}, {&(0x7f00000001c0)="eb64cf0f0f5397123cadcf9204aab8ad6df2b8214171b151d1e8e54223b587ee7d70c7f6af11c14716f6fea560f0fb2be88d1ff1e6", 0x35}, {&(0x7f0000000380)="7012b0d70ef141b83f66c33020ea7bed2af34d6c1bc1a415927bd98168fcb6b96bffafe6e838e93175cf7a3e0a77a9f5f2c462cac3bd034e776a6ba2d40540217a5be5708069c99dae9b5f0dc2d0b091bc2516d558c759612ee7f9dd12a3ef219516b7f3876517c5747e8b96358bcab116de1d110bc71760a9356d0c846c79ae0dded1cdf39301c0e96f6577afdb7f47ae2ac72abdbcfae8bfec46dfb30c5944be3a522dbbaf32f982b9c6213402dd72e2254e", 0xb3}, {&(0x7f0000000200)="b01459f1a5c2ba0351fd2ae7b447aedcfd313acae2b013f731fedb527b113ab8ee8a22fe74e0da100bda75c2cf50049d3ddfd8be288130ae0fc57da66e436a143c0f8aa96b9745c61fee7078feb35d6700196b6d4826d333b31d748300bc5b707045b9080c092702b0697c8c8b", 0x6d}, {&(0x7f00000002c0)="d73a58952684d0b641f9fcc3bee5d3f39035e76a29693a6b0a8efa8a456b72f38945d5c1b1dab4cc22c3dc1cb35ed6", 0x2f}, {&(0x7f00000004c0)="b941", 0x2}], 0x6}, 0x4008000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4, 0x5, '\x00', 0x1}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000500)={"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"}) 78.491462ms ago: executing program 3 (id=60735): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe831cb58833da74d, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x2, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd2a, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 49.019775ms ago: executing program 1 (id=60736): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0x11, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 0s ago: executing program 3 (id=60737): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.2.52364'. [ 1927.695678][T13134] netlink: 76 bytes leftover after parsing attributes in process `syz.1.52366'. [ 1927.748908][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52366'. [ 1928.055357][ T1081] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1928.220172][ T1081] usb 3-1: Using ep0 maxpacket: 32 [ 1928.236144][ T1081] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1928.244276][ T1081] usb 3-1: config 1 has no interface number 0 [ 1928.274548][ T1081] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1928.310360][ T1081] usb 3-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1928.319534][ T1081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.339698][ T1081] usb 3-1: Product: syz [ 1928.359865][ T1081] usb 3-1: Manufacturer: syz [ 1928.364477][ T1081] usb 3-1: SerialNumber: syz [ 1928.525828][T13165] binder: Bad value for 'max' [ 1928.604526][ T1081] usb 3-1: USB disconnect, device number 71 [ 1929.123758][T13192] binder: Binderfs stats mode cannot be changed during a remount [ 1929.142972][ T36] audit: type=1326 audit(1763144396.605:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.52396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1929.146722][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52395'. [ 1929.483034][T13224] netlink: 104 bytes leftover after parsing attributes in process `syz.1.52409'. [ 1930.271131][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 1930.271146][ T36] audit: type=1326 audit(1763144397.735:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.300740][ T36] audit: type=1326 audit(1763144397.735:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.324224][ T36] audit: type=1326 audit(1763144397.735:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.349269][ T36] audit: type=1326 audit(1763144397.735:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.372776][ T36] audit: type=1326 audit(1763144397.735:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.396413][ T36] audit: type=1326 audit(1763144397.735:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.419871][ T36] audit: type=1326 audit(1763144397.735:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.443324][ T36] audit: type=1326 audit(1763144397.735:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.467245][ T36] audit: type=1326 audit(1763144397.735:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1930.492707][ T36] audit: type=1326 audit(1763144397.735:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.52432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff62d58f6c9 code=0x50000 [ 1931.940934][T13328] binder: Bad value for 'max' [ 1932.044338][T13338] netlink: 104 bytes leftover after parsing attributes in process `syz.1.52463'. [ 1932.085344][ T7335] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1932.246412][ T7335] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 1932.264376][ T7335] usb 1-1: config 1 has no interface number 0 [ 1932.282104][ T7335] usb 1-1: config 1 interface 105 has no altsetting 0 [ 1932.302846][ T7335] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1932.317980][ T7335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.341150][ T7335] usb 1-1: Product: syz [ 1932.360914][ T7335] usb 1-1: Manufacturer: syz [ 1932.371545][ T7335] usb 1-1: SerialNumber: syz [ 1932.455322][ T1081] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1932.584477][ T7335] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71 [ 1932.601280][ T7335] usb 1-1: USB disconnect, device number 78 [ 1932.635318][ T1081] usb 4-1: Using ep0 maxpacket: 16 [ 1932.651585][ T1081] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1932.669065][ T1081] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.691033][ T1081] usb 4-1: config 0 has no interfaces? [ 1932.703416][ T1081] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1932.725868][ T1081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.744125][ T1081] usb 4-1: Product: syz [ 1932.758388][ T1081] usb 4-1: Manufacturer: syz [ 1932.768852][ T1081] usb 4-1: SerialNumber: syz [ 1932.787741][ T1081] usb 4-1: config 0 descriptor?? [ 1932.970188][T13395] binder: Bad value for 'max' [ 1932.996229][ T1081] usb 4-1: USB disconnect, device number 74 [ 1933.015772][T13399] netlink: 165 bytes leftover after parsing attributes in process `syz.2.52491'. [ 1933.365331][ T7335] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1933.530918][ T7335] usb 1-1: Using ep0 maxpacket: 32 [ 1933.551380][ T7335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.575321][ T7335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.608759][ T7335] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1933.642287][ T7335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.674059][ T7335] usb 1-1: config 0 descriptor?? [ 1933.690220][ T7335] hub 1-1:0.0: USB hub found [ 1933.890887][ T7335] hub 1-1:0.0: 1 port detected [ 1933.972148][T13453] binder: Bad value for 'max' [ 1934.086274][T13466] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1934.086291][T13466] rust_binder: Read failure Err(EFAULT) in pid:769 [ 1934.508199][ T7335] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1934.521635][ T1081] usb 1-1: USB disconnect, device number 79 [ 1935.396502][T13507] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1935.396521][T13507] rust_binder: Read failure Err(EFAULT) in pid:1213 [ 1935.475325][ T1081] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1935.645313][ T1081] usb 4-1: Using ep0 maxpacket: 32 [ 1935.661208][T13515] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1935.679124][ T1081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.695309][ T1081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.728602][ T1081] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1935.745331][ T7335] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1935.773196][ T1081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.805752][ T1081] usb 4-1: config 0 descriptor?? [ 1935.827863][ T1081] hub 4-1:0.0: USB hub found [ 1935.915310][ T7335] usb 3-1: Using ep0 maxpacket: 16 [ 1935.977640][ T7335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1936.012833][ T7335] usb 3-1: config index 0 descriptor too short (expected 28443, got 27) [ 1936.025348][ T1081] hub 4-1:0.0: 1 port detected [ 1936.035334][ T7335] usb 3-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 1936.069725][ T7335] usb 3-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 1936.112408][ T7335] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 1936.159514][ T7335] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1936.188747][ T7335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.206900][ T7335] usb 3-1: Product: syz [ 1936.215332][ T7335] usb 3-1: Manufacturer: syz [ 1936.222510][ T7335] usb 3-1: SerialNumber: syz [ 1936.437624][ T7335] usb 3-1: USB disconnect, device number 72 [ 1936.634752][T25547] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1936.642145][T25547] usb 4-1: USB disconnect, device number 75 [ 1936.648131][ T7335] usb 4-1: Failed to suspend device, error -19 [ 1936.945327][T13550] netlink: 76 bytes leftover after parsing attributes in process `syz.2.52564'. [ 1936.955378][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52564'. [ 1937.364188][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.371475][T13580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.378617][T13580] bridge_slave_0: entered allmulticast mode [ 1937.384939][T13580] bridge_slave_0: entered promiscuous mode [ 1937.391650][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.398879][T13580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.406069][T13580] bridge_slave_1: entered allmulticast mode [ 1937.412485][T13580] bridge_slave_1: entered promiscuous mode [ 1937.513244][T13580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.520352][T13580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.527672][T13580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.534716][T13580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.558293][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.565949][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.580649][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.587715][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.595788][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.602836][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.616597][ T331] veth1_macvtap: left promiscuous mode [ 1937.622135][ T331] veth0_vlan: left promiscuous mode [ 1937.689668][T13580] veth0_vlan: entered promiscuous mode [ 1937.702086][T13580] veth1_macvtap: entered promiscuous mode [ 1937.715330][ T7335] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1937.905348][ T7335] usb 4-1: Using ep0 maxpacket: 32 [ 1937.916335][ T7335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.937453][ T7335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1937.975375][ T7335] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1938.004660][ T7335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.035090][ T7335] usb 4-1: config 0 descriptor?? [ 1938.063248][ T7335] hub 4-1:0.0: USB hub found [ 1938.263839][ T7335] hub 4-1:0.0: 1 port detected [ 1938.521704][T13603] netlink: 173 bytes leftover after parsing attributes in process `syz.0.52586'. [ 1938.881460][ T7335] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1938.893018][ T7335] usb 4-1: USB disconnect, device number 76 [ 1938.928582][T13625] binder: Bad value for 'max' [ 1938.999165][T13631] netlink: 76 bytes leftover after parsing attributes in process `syz.1.52599'. [ 1939.035433][T13631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52599'. [ 1939.075049][T13631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52599'. [ 1939.815355][T25547] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1939.965720][T25547] usb 1-1: Using ep0 maxpacket: 32 [ 1939.972949][T25547] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1939.981089][T25547] usb 1-1: config 1 has no interface number 0 [ 1939.987265][ T7335] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1940.004967][T25547] usb 1-1: config 1 interface 3 has no altsetting 0 [ 1940.013351][T25547] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1940.022537][T25547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.038579][T25547] usb 1-1: Product: syz [ 1940.047278][T25547] usb 1-1: Manufacturer: syz [ 1940.057254][T25547] usb 1-1: SerialNumber: syz [ 1940.156286][ T7335] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1940.166691][ T7335] usb 4-1: config 1 has no interface number 0 [ 1940.184759][ T7335] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1940.195044][ T7335] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1940.204915][ T7335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.239664][ T7335] usb 4-1: Product: syz [ 1940.243860][ T7335] usb 4-1: Manufacturer: syz [ 1940.255319][ T7335] usb 4-1: SerialNumber: syz [ 1940.277208][T25547] usb 1-1: USB disconnect, device number 80 [ 1940.288955][T13665] netlink: 173 bytes leftover after parsing attributes in process `syz.2.52614'. [ 1940.487621][ T7335] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1940.509819][ T7335] usb 4-1: USB disconnect, device number 77 [ 1940.806009][T13689] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1940.806027][T13689] rust_binder: Read failure Err(EFAULT) in pid:845 [ 1940.819436][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52629'. [ 1941.355334][T25547] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1941.426688][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1941.426707][ T36] audit: type=1326 audit(1763144408.895:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.456440][ T36] audit: type=1326 audit(1763144408.895:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.480016][ T36] audit: type=1326 audit(1763144408.895:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.504094][ T36] audit: type=1326 audit(1763144408.895:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.525355][T25547] usb 4-1: device descriptor read/64, error -71 [ 1941.527758][ T36] audit: type=1326 audit(1763144408.895:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.557217][ T36] audit: type=1326 audit(1763144408.895:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.580915][ T36] audit: type=1326 audit(1763144408.895:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.604502][ T36] audit: type=1326 audit(1763144408.895:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.627972][ T36] audit: type=1326 audit(1763144408.895:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.651925][ T36] audit: type=1326 audit(1763144408.895:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13747 comm="syz.2.52654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413af8f6c9 code=0x50000 [ 1941.775313][T25547] usb 4-1: device descriptor read/64, error -71 [ 1941.821614][T13758] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1941.821631][T13758] rust_binder: Read failure Err(EFAULT) in pid:873 [ 1942.036869][T25547] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1942.205324][T25547] usb 4-1: device descriptor read/64, error -71 [ 1942.475324][T25547] usb 4-1: device descriptor read/64, error -71 [ 1942.605645][T25547] usb usb4-port1: attempt power cycle [ 1942.955325][T25547] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1943.005980][T25547] usb 4-1: device descriptor read/8, error -71 [ 1943.142517][T25547] usb 4-1: device descriptor read/8, error -71 [ 1943.388436][T25547] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1943.447091][T25547] usb 4-1: device descriptor read/8, error -71 [ 1943.576217][T25547] usb 4-1: device descriptor read/8, error -71 [ 1943.685434][T25547] usb usb4-port1: unable to enumerate USB device [ 1944.645320][ T31] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1944.795310][T25547] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1944.806361][ T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1944.814608][ T31] usb 3-1: config 1 has no interface number 0 [ 1944.830840][ T31] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1944.849142][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1944.868395][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.885414][ T31] usb 3-1: Product: syz [ 1944.899728][ T31] usb 3-1: Manufacturer: syz [ 1944.914491][ T31] usb 3-1: SerialNumber: syz [ 1944.925345][T25547] usb 4-1: device descriptor read/64, error -71 [ 1945.136243][ T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1945.145252][ T31] usb 3-1: USB disconnect, device number 73 [ 1945.175333][T25547] usb 4-1: device descriptor read/64, error -71 [ 1945.415349][T25547] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1945.565338][T25547] usb 4-1: device descriptor read/64, error -71 [ 1945.735362][ T31] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1945.805421][T25547] usb 4-1: device descriptor read/64, error -71 [ 1945.904787][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1945.911294][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1945.919156][T25547] usb usb4-port1: attempt power cycle [ 1945.929766][ T31] usb 1-1: config index 0 descriptor too short (expected 28443, got 27) [ 1945.948377][ T31] usb 1-1: config 15 has too many interfaces: 240, using maximum allowed: 32 [ 1945.975316][ T31] usb 1-1: config 15 has an invalid descriptor of length 34, skipping remainder of the config [ 1946.005381][ T31] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 240 [ 1946.036317][ T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1946.045522][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.053519][ T31] usb 1-1: Product: syz [ 1946.077973][ T31] usb 1-1: Manufacturer: syz [ 1946.082610][ T31] usb 1-1: SerialNumber: syz [ 1946.275325][T25547] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1946.300322][ T31] usb 1-1: USB disconnect, device number 81 [ 1946.326021][T25547] usb 4-1: device descriptor read/8, error -71 [ 1946.453748][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52713'. [ 1946.463723][T25547] usb 4-1: device descriptor read/8, error -71 [ 1946.705372][T25547] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1946.739151][T13890] binder: Bad value for 'max' [ 1946.744822][T25547] usb 4-1: device descriptor read/8, error -71 [ 1946.820637][T13898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52727'. [ 1946.876236][T25547] usb 4-1: device descriptor read/8, error -71 [ 1946.914928][T13911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52733'. [ 1946.998101][T25547] usb usb4-port1: unable to enumerate USB device [ 1947.037419][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52739'. [ 1947.049068][T13925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.52740'. [ 1947.084512][ T36] kauditd_printk_skb: 61 callbacks suppressed [ 1947.084529][ T36] audit: type=1400 audit(1763144414.545:1394): avc: denied { execute } for pid=13928 comm="syz.0.52741" name="file0" dev="ramfs" ino=697474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1947.108593][T13933] binder: Bad value for 'max' [ 1947.113274][ T36] audit: type=1400 audit(1763144414.545:1395): avc: denied { execute_no_trans } for pid=13928 comm="syz.0.52741" path="/file0" dev="ramfs" ino=697474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1947.476474][T13978] netlink: 104 bytes leftover after parsing attributes in process `syz.2.52764'. [ 1949.487192][T14042] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1949.487210][T14042] rust_binder: Read failure Err(EFAULT) in pid:165 [ 1950.806475][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52808'. [ 1951.548767][ T31] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1951.727995][ T31] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1951.738060][ T31] usb 2-1: config 1 has no interface number 0 [ 1951.744150][ T31] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1951.793932][ T31] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1951.813276][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.822448][T14090] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1951.822461][T14090] rust_binder: Read failure Err(EFAULT) in pid:173 [ 1951.841424][ T31] usb 2-1: Product: syz [ 1951.871211][ T31] usb 2-1: Manufacturer: syz [ 1951.888776][ T31] usb 2-1: SerialNumber: syz [ 1951.903925][T14096] netlink: 104 bytes leftover after parsing attributes in process `syz.2.52821'. [ 1952.075315][T25547] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1952.097759][ T31] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 1952.127046][ T31] usb 2-1: USB disconnect, device number 80 [ 1952.225478][T25547] usb 1-1: Using ep0 maxpacket: 32 [ 1952.231587][T25547] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1952.239612][T25547] usb 1-1: config 1 has no interface number 0 [ 1952.257919][T25547] usb 1-1: config 1 interface 3 has no altsetting 0 [ 1952.282089][T25547] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1952.291555][T25547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.312836][T25547] usb 1-1: Product: syz [ 1952.325323][T25547] usb 1-1: Manufacturer: syz [ 1952.340051][T25547] usb 1-1: SerialNumber: syz [ 1952.555091][T25547] usb 1-1: USB disconnect, device number 82 [ 1952.620698][T14124] netlink: 104 bytes leftover after parsing attributes in process `syz.3.52835'. [ 1952.651612][T14130] loop5: detected capacity change from 0 to 7 [ 1952.995467][ T31] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1953.125327][T25547] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1953.156245][ T31] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1953.164475][ T31] usb 3-1: config 1 has no interface number 0 [ 1953.174591][ T31] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1953.186834][ T31] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1953.206786][T14162] binder: Bad value for 'max' [ 1953.211548][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.235321][ T31] usb 3-1: Product: syz [ 1953.239603][ T31] usb 3-1: Manufacturer: syz [ 1953.256127][ T31] usb 3-1: SerialNumber: syz [ 1953.295312][T25547] usb 2-1: Using ep0 maxpacket: 32 [ 1953.305523][T25547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1953.321320][T25547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1953.341911][T25547] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1953.369140][T25547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1953.397773][T25547] usb 2-1: config 0 descriptor?? [ 1953.410349][T25547] hub 2-1:0.0: USB hub found [ 1953.475631][ T31] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 1953.488581][ T31] usb 3-1: USB disconnect, device number 74 [ 1953.528403][T14181] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1953.528419][T14181] rust_binder: Read failure Err(EFAULT) in pid:1044 [ 1953.549188][T14183] binder: Bad value for 'max' [ 1953.604270][T25547] hub 2-1:0.0: 1 port detected [ 1954.212225][T25547] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1954.227621][T25547] usb 2-1: USB disconnect, device number 81 [ 1955.209338][ T36] audit: type=1326 audit(1763144422.675:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.1.52899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749bf8f6c9 code=0x7ffc0000 [ 1955.233200][ T36] audit: type=1326 audit(1763144422.675:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.1.52899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749bf8f6c9 code=0x7ffc0000 [ 1955.262445][ T36] audit: type=1326 audit(1763144422.685:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.1.52899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f749bf8f6c9 code=0x7ffc0000 [ 1955.286774][ T36] audit: type=1326 audit(1763144422.685:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.1.52899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749bf8f6c9 code=0x7ffc0000 [ 1955.351301][T14275] binder: Bad value for 'max' [ 1956.736387][T14313] binder: Bad value for 'max' [ 1957.165332][ T31] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1957.335316][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1957.341586][ T31] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1957.350334][ T31] usb 3-1: config 1 has no interface number 0 [ 1957.369874][ T31] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1957.390462][ T31] usb 3-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1957.405317][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.425312][ T31] usb 3-1: Product: syz [ 1957.435487][ T31] usb 3-1: Manufacturer: syz [ 1957.440073][ T31] usb 3-1: SerialNumber: syz [ 1957.495309][T25547] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1957.665447][T25547] usb 2-1: Using ep0 maxpacket: 16 [ 1957.676519][T25547] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1957.687347][ T31] usb 3-1: USB disconnect, device number 75 [ 1957.693911][T25547] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.714275][T25547] usb 2-1: config 0 has no interfaces? [ 1957.725669][T25547] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1957.735133][T14348] netlink: 104 bytes leftover after parsing attributes in process `syz.3.52940'. [ 1957.754477][T25547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.762513][T25547] usb 2-1: Product: syz [ 1957.775395][T25547] usb 2-1: Manufacturer: syz [ 1957.785817][T25547] usb 2-1: SerialNumber: syz [ 1957.802839][T25547] usb 2-1: config 0 descriptor?? [ 1958.016808][ T31] usb 2-1: USB disconnect, device number 82 [ 1958.054668][T14362] binder: Bad value for 'max' [ 1958.355352][T25547] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1958.497171][T14406] overlay: Unknown parameter 'hash' [ 1958.528793][T25547] usb 4-1: Using ep0 maxpacket: 8 [ 1958.580222][T25547] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1958.587906][ T31] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1958.608948][T25547] usb 4-1: no configurations [ 1958.613549][T25547] usb 4-1: can't read configurations, error -22 [ 1958.765326][T25547] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1958.777858][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1958.805652][ T31] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1958.813726][ T31] usb 3-1: config 1 has no interface number 0 [ 1958.825435][ T31] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1958.846144][ T31] usb 3-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1958.855224][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.878715][ T31] usb 3-1: Product: syz [ 1958.882899][ T31] usb 3-1: Manufacturer: syz [ 1958.897639][ T31] usb 3-1: SerialNumber: syz [ 1958.945298][T25547] usb 4-1: Using ep0 maxpacket: 8 [ 1958.951633][T25547] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1958.965336][T25547] usb 4-1: no configurations [ 1958.969965][T25547] usb 4-1: can't read configurations, error -22 [ 1958.980084][T25547] usb usb4-port1: attempt power cycle [ 1959.035306][T26146] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1959.108529][ T31] usb 3-1: USB disconnect, device number 76 [ 1959.185313][T26146] usb 1-1: Using ep0 maxpacket: 16 [ 1959.191785][T26146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1959.200122][T26146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.215295][T26146] usb 1-1: config 0 has no interfaces? [ 1959.222038][T26146] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1959.231150][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.241209][T26146] usb 1-1: Product: syz [ 1959.251318][T26146] usb 1-1: Manufacturer: syz [ 1959.255980][T26146] usb 1-1: SerialNumber: syz [ 1959.261273][T26146] usb 1-1: config 0 descriptor?? [ 1959.325470][T25547] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1959.345662][T25547] usb 4-1: Using ep0 maxpacket: 8 [ 1959.351951][T25547] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1959.359808][T25547] usb 4-1: no configurations [ 1959.369858][T25547] usb 4-1: can't read configurations, error -22 [ 1959.477244][T26146] usb 1-1: USB disconnect, device number 83 [ 1959.515334][T25547] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1959.535603][T25547] usb 4-1: Using ep0 maxpacket: 8 [ 1959.541874][T25547] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1959.555310][T25547] usb 4-1: no configurations [ 1959.559977][T25547] usb 4-1: can't read configurations, error -22 [ 1959.570136][T25547] usb usb4-port1: unable to enumerate USB device [ 1960.148017][T14457] loop5: detected capacity change from 0 to 7 [ 1960.275308][T26146] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1960.425328][T26146] usb 1-1: Using ep0 maxpacket: 32 [ 1960.431510][T26146] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1960.448398][T26146] usb 1-1: config 1 has no interface number 0 [ 1960.464677][T26146] usb 1-1: config 1 interface 3 has no altsetting 0 [ 1960.484531][T26146] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1960.507729][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1960.525322][T26146] usb 1-1: Product: syz [ 1960.529738][T26146] usb 1-1: Manufacturer: syz [ 1960.534340][T26146] usb 1-1: SerialNumber: syz [ 1960.749568][T26146] usb 1-1: USB disconnect, device number 84 [ 1961.009992][T14503] binder: Binderfs stats mode cannot be changed during a remount [ 1961.475341][T26146] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1961.625341][ T31] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1961.645971][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 1961.659649][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1961.677467][T26146] usb 4-1: no configurations [ 1961.685344][T26146] usb 4-1: can't read configurations, error -22 [ 1961.793175][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1961.799288][ T31] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 1961.808434][ T31] usb 3-1: config 1 has no interface number 0 [ 1961.814532][ T31] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1961.841458][T26146] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1961.856547][ T31] usb 3-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1961.878604][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.895308][ T31] usb 3-1: Product: syz [ 1961.908438][ T31] usb 3-1: Manufacturer: syz [ 1961.919888][ T31] usb 3-1: SerialNumber: syz [ 1962.035324][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 1962.046619][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1962.074466][T26146] usb 4-1: no configurations [ 1962.079178][T26146] usb 4-1: can't read configurations, error -22 [ 1962.095422][T26146] usb usb4-port1: attempt power cycle [ 1962.148249][ T31] usb 3-1: USB disconnect, device number 77 [ 1962.445362][T26146] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1962.485737][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 1962.492074][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1962.505353][T26146] usb 4-1: no configurations [ 1962.515308][T26146] usb 4-1: can't read configurations, error -22 [ 1962.672987][T26146] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1962.715061][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 1962.725248][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1962.732974][T26146] usb 4-1: no configurations [ 1962.737682][T26146] usb 4-1: can't read configurations, error -22 [ 1962.744339][T26146] usb usb4-port1: unable to enumerate USB device [ 1962.798624][T14600] overlayfs: missing 'lowerdir' [ 1963.943901][T14630] binder: Bad value for 'max' [ 1964.360508][T14663] loop5: detected capacity change from 0 to 7 [ 1964.539162][T14682] binder: Bad value for 'max' [ 1965.233521][T14714] binder: Bad value for 'stats' [ 1965.577426][T14722] binder: Binderfs stats mode cannot be changed during a remount [ 1965.786467][T14728] binder: Bad value for 'max' [ 1965.892568][T14734] binder: Bad value for 'stats' [ 1966.796128][T14767] netlink: 100 bytes leftover after parsing attributes in process `syz.0.53143'. [ 1967.312372][T14783] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1967.395332][ T7335] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1967.584809][ T7335] usb 1-1: Using ep0 maxpacket: 32 [ 1967.601053][ T7335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1967.612046][ T7335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1967.655354][ T7335] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1967.684671][ T7335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.705101][ T7335] usb 1-1: config 0 descriptor?? [ 1967.725614][ T7335] hub 1-1:0.0: USB hub found [ 1967.935324][ T7335] hub 1-1:0.0: 1 port detected [ 1967.991648][T14787] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53153'. [ 1968.243563][T14798] 9pnet: Could not find request transport: f [ 1968.738678][ T31] usb 1-1: USB disconnect, device number 85 [ 1969.462227][T14851] netlink: 104 bytes leftover after parsing attributes in process `syz.1.53184'. [ 1969.495322][ T31] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1969.645315][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1969.651822][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1969.662865][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.683346][ T31] usb 1-1: config 0 has no interfaces? [ 1969.693713][ T31] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1969.705305][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.723089][ T31] usb 1-1: Product: syz [ 1969.735312][ T31] usb 1-1: Manufacturer: syz [ 1969.743848][ T31] usb 1-1: SerialNumber: syz [ 1969.755866][ T31] usb 1-1: config 0 descriptor?? [ 1969.973361][ T31] usb 1-1: USB disconnect, device number 86 [ 1970.701224][T14892] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53206'. [ 1970.968016][T14913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53216'. [ 1971.081578][T14923] binder: Bad value for 'max' [ 1971.555315][ T31] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1971.739264][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1971.758489][ T31] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1971.795301][ T31] usb 4-1: config 1 has no interface number 0 [ 1971.801422][ T31] usb 4-1: config 1 interface 3 has no altsetting 0 [ 1971.822840][ T31] usb 4-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 1971.845313][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.873557][ T31] usb 4-1: Product: syz [ 1971.885836][ T31] usb 4-1: Manufacturer: syz [ 1971.890468][ T31] usb 4-1: SerialNumber: syz [ 1972.147577][ T31] usb 4-1: USB disconnect, device number 94 [ 1972.677174][T14983] binder: Bad value for 'max' [ 1972.846129][T15002] syz.3.53255: attempt to access beyond end of device [ 1972.846129][T15002] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1972.895397][T15002] EXT4-fs (loop3): unable to read superblock [ 1973.325186][T15008] binder: Bad value for 'max' [ 1973.845908][T15040] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53276'. [ 1974.198232][T15072] netlink: 836 bytes leftover after parsing attributes in process `syz.3.53292'. [ 1974.512013][ T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1974.677425][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1974.695133][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1974.705435][ T31] usb 3-1: no configurations [ 1974.723946][ T31] usb 3-1: can't read configurations, error -22 [ 1974.865363][ T31] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1975.024255][T15134] veth0_to_team: mtu greater than device maximum [ 1975.035561][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1975.051850][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1975.066729][ T31] usb 3-1: no configurations [ 1975.081497][ T31] usb 3-1: can't read configurations, error -22 [ 1975.096124][ T31] usb usb3-port1: attempt power cycle [ 1975.165329][T26146] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1975.329730][T26146] usb 2-1: Using ep0 maxpacket: 32 [ 1975.358238][T26146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1975.371982][T26146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1975.398847][T26146] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1975.425315][T26146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.454364][T26146] usb 2-1: config 0 descriptor?? [ 1975.459425][ T31] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1975.477804][T26146] hub 2-1:0.0: USB hub found [ 1975.507796][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1975.516308][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1975.534058][ T31] usb 3-1: no configurations [ 1975.544145][ T31] usb 3-1: can't read configurations, error -22 [ 1975.683592][T26146] hub 2-1:0.0: 1 port detected [ 1975.688458][ T31] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1975.725643][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 1975.742114][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1975.749855][ T31] usb 3-1: no configurations [ 1975.769265][ T31] usb 3-1: can't read configurations, error -22 [ 1975.778946][ T31] usb usb3-port1: unable to enumerate USB device [ 1975.788022][T15172] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53339'. [ 1976.057244][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.064326][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.071510][T15177] bridge_slave_0: entered allmulticast mode [ 1976.078236][T15177] bridge_slave_0: entered promiscuous mode [ 1976.086139][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.093241][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.103250][T15177] bridge_slave_1: entered allmulticast mode [ 1976.109962][T15177] bridge_slave_1: entered promiscuous mode [ 1976.181457][ T9924] bridge_slave_1: left allmulticast mode [ 1976.187272][ T9924] bridge_slave_1: left promiscuous mode [ 1976.192948][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.201278][ T9924] bridge_slave_0: left allmulticast mode [ 1976.207058][ T9924] bridge_slave_0: left promiscuous mode [ 1976.212686][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.235873][T15184] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53342'. [ 1976.285832][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.286617][T26146] hub 2-1:0.0: activate --> -90 [ 1976.292899][T15177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.305069][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.312142][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.339122][ T9924] veth1_macvtap: left promiscuous mode [ 1976.344749][ T9924] veth0_vlan: left promiscuous mode [ 1976.410657][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.425621][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.439253][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.446438][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.460235][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.467319][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.486980][T26146] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1976.495560][T26146] usb 2-1: USB disconnect, device number 83 [ 1976.496205][T15177] veth0_vlan: entered promiscuous mode [ 1976.516549][T15177] veth1_macvtap: entered promiscuous mode [ 1976.708788][T15211] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53352'. [ 1976.829401][T15229] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53361'. [ 1977.031583][T15258] netlink: 104 bytes leftover after parsing attributes in process `syz.1.53375'. [ 1977.798578][T26146] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1977.968106][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1977.984029][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1977.996348][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1978.005333][T26146] usb 3-1: can't read configurations, error -61 [ 1978.063700][T15308] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53400'. [ 1978.163437][T15317] netlink: 104 bytes leftover after parsing attributes in process `syz.1.53397'. [ 1978.172642][T26146] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1978.335318][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1978.347683][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1978.356443][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1978.364005][T26146] usb 3-1: can't read configurations, error -61 [ 1978.383752][T26146] usb usb3-port1: attempt power cycle [ 1978.744228][T26146] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1978.785680][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1978.793813][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1978.815647][T15366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53426'. [ 1978.846339][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1978.853919][T26146] usb 3-1: can't read configurations, error -61 [ 1978.995341][T26146] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1979.035723][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1979.045688][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1979.055959][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1979.063573][T26146] usb 3-1: can't read configurations, error -61 [ 1979.087544][T26146] usb usb3-port1: unable to enumerate USB device [ 1979.365312][T26146] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1979.511490][T15399] binder: Bad value for 'max' [ 1979.526372][T26146] usb 1-1: Using ep0 maxpacket: 16 [ 1979.538048][T26146] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1979.546499][T26146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1979.561426][T26146] usb 1-1: config 0 has no interfaces? [ 1979.578415][T26146] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1979.597184][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.615308][T26146] usb 1-1: Product: syz [ 1979.625334][T26146] usb 1-1: Manufacturer: syz [ 1979.640282][T26146] usb 1-1: SerialNumber: syz [ 1979.655906][T26146] usb 1-1: config 0 descriptor?? [ 1979.754706][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.761932][T15407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.769319][T15407] bridge_slave_0: entered allmulticast mode [ 1979.775865][T15407] bridge_slave_0: entered promiscuous mode [ 1979.782460][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.789754][T15407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.797008][T15407] bridge_slave_1: entered allmulticast mode [ 1979.803426][T15407] bridge_slave_1: entered promiscuous mode [ 1979.858393][ T331] bridge_slave_1: left allmulticast mode [ 1979.864086][ T331] bridge_slave_1: left promiscuous mode [ 1979.870004][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.872788][T26146] usb 1-1: USB disconnect, device number 87 [ 1979.883371][ T331] bridge_slave_0: left allmulticast mode [ 1979.889128][ T331] bridge_slave_0: left promiscuous mode [ 1979.894748][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.977482][T15407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.984575][T15407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1979.991897][T15407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.998947][T15407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.026399][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.035818][ T331] veth1_macvtap: left promiscuous mode [ 1980.041323][ T331] veth0_vlan: left promiscuous mode [ 1980.099127][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.106198][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.148835][T15407] veth0_vlan: entered promiscuous mode [ 1980.160948][T15407] veth1_macvtap: entered promiscuous mode [ 1980.479900][ T36] audit: type=1400 audit(1763144447.945:1400): avc: denied { lock } for pid=15442 comm="syz.0.53457" path="socket:[708209]" dev="sockfs" ino=708209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1980.795364][T26146] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1980.974855][T26146] usb 4-1: Using ep0 maxpacket: 16 [ 1980.990224][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1981.000861][T26146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1981.021203][T26146] usb 4-1: config 0 has no interfaces? [ 1981.038107][T26146] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1981.067447][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.095292][T26146] usb 4-1: Product: syz [ 1981.105331][T26146] usb 4-1: Manufacturer: syz [ 1981.120049][T26146] usb 4-1: SerialNumber: syz [ 1981.140420][T26146] usb 4-1: config 0 descriptor?? [ 1981.373173][T26146] usb 4-1: USB disconnect, device number 95 [ 1981.564385][T15459] loop5: detected capacity change from 0 to 7 [ 1982.604503][ T36] audit: type=1400 audit(1763144450.065:1401): avc: denied { mounton } for pid=15506 comm="syz.2.53488" path="/proc/488/task" dev="proc" ino=708570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1983.108241][T15525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53495'. [ 1983.137479][T15525] bridge_slave_1: left allmulticast mode [ 1983.143138][T15525] bridge_slave_1: left promiscuous mode [ 1983.175410][T15525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.207760][T15525] bridge_slave_0: left allmulticast mode [ 1983.238384][T15525] bridge_slave_0: left promiscuous mode [ 1983.261730][T15525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.516402][T15595] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53529'. [ 1984.670426][T15607] veth0_to_team: mtu greater than device maximum [ 1984.712133][T15609] binder: Unknown parameter 'conte' [ 1985.157787][T15643] loop5: detected capacity change from 0 to 7 [ 1985.689405][T15677] loop5: detected capacity change from 0 to 7 [ 1985.735303][ T7335] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1985.807686][T15685] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53574'. [ 1985.896500][ T7335] usb 2-1: Using ep0 maxpacket: 16 [ 1985.918998][ T7335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1985.939630][ T7335] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.978525][ T7335] usb 2-1: config 0 has no interfaces? [ 1985.994992][ T7335] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1986.014249][ T7335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.042107][ T7335] usb 2-1: Product: syz [ 1986.059000][ T7335] usb 2-1: Manufacturer: syz [ 1986.063811][ T7335] usb 2-1: SerialNumber: syz [ 1986.092040][ T7335] usb 2-1: config 0 descriptor?? [ 1986.313176][ T7335] usb 2-1: USB disconnect, device number 84 [ 1986.448359][T15742] veth0_to_team: mtu greater than device maximum [ 1986.548426][T15748] 9pnet_fd: Insufficient options for proto=fd [ 1986.592996][T15750] binder: Unknown parameter 'contextÌðÔ' [ 1987.058134][T15766] FAT-fs (rnullb0): bogus number of reserved sectors [ 1987.064827][T15766] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1987.155889][ T36] audit: type=1400 audit(1763144454.625:1402): avc: denied { unmount } for pid=13580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1987.785303][T26146] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1987.957610][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1987.976232][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1988.002852][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1988.016700][T26146] usb 3-1: can't read configurations, error -61 [ 1988.155306][T26146] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1988.335307][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1988.353383][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1988.376327][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1988.404139][T26146] usb 3-1: can't read configurations, error -61 [ 1988.416115][T26146] usb usb3-port1: attempt power cycle [ 1988.555500][T15864] veth0_to_team: mtu greater than device maximum [ 1988.680957][T15872] binder: Bad value for 'max' [ 1988.775311][T26146] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1988.835314][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1988.841605][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1988.860180][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1988.869542][T26146] usb 3-1: can't read configurations, error -61 [ 1989.025305][T26146] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1989.076655][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 1989.086308][T26146] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1989.115803][T26146] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1989.134622][T26146] usb 3-1: can't read configurations, error -61 [ 1989.156124][T26146] usb usb3-port1: unable to enumerate USB device [ 1990.235468][T15898] binder: Bad value for 'context' [ 1990.315947][T15904] veth0_to_team: mtu greater than device maximum [ 1990.794004][T15924] netlink: 104 bytes leftover after parsing attributes in process `syz.3.53687'. [ 1991.224157][T15943] loop5: detected capacity change from 0 to 7 [ 1991.321598][T15947] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53700'. [ 1991.835379][T15979] binder: Bad value for 'context' [ 1992.356425][T16015] netlink: 104 bytes leftover after parsing attributes in process `syz.1.53732'. [ 1993.225308][T26146] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1993.391936][T26146] usb 4-1: Using ep0 maxpacket: 16 [ 1993.408034][T26146] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1993.416806][T26146] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.440250][T26146] usb 4-1: config 0 has no interfaces? [ 1993.450181][T16041] netlink: 136 bytes leftover after parsing attributes in process `syz.0.53738'. [ 1993.471200][T26146] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1993.481912][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.515299][T26146] usb 4-1: Product: syz [ 1993.529757][T26146] usb 4-1: Manufacturer: syz [ 1993.539718][T26146] usb 4-1: SerialNumber: syz [ 1993.555145][T26146] usb 4-1: config 0 descriptor?? [ 1993.764580][T16056] netlink: 104 bytes leftover after parsing attributes in process `syz.2.53751'. [ 1993.775061][T26146] usb 4-1: USB disconnect, device number 96 [ 1997.051285][T16205] veth0_to_team: mtu greater than device maximum [ 1997.493795][T16263] veth0_to_team: mtu greater than device maximum [ 1997.913585][T16311] veth0_to_team: mtu greater than device maximum [ 1998.636606][T16370] veth0_to_team: mtu greater than device maximum [ 1999.168852][T16396] veth0_to_team: mtu greater than device maximum [ 1999.508333][T16433] loop5: detected capacity change from 0 to 7 [ 2001.217937][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53977'. [ 2001.236045][T16527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.53969'. [ 2001.372003][T16541] loop5: detected capacity change from 0 to 7 [ 2002.746762][ T36] audit: type=1400 audit(1763144470.215:1403): avc: denied { getopt } for pid=16571 comm="syz.0.54000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2004.001591][T16643] veth0_to_team: mtu greater than device maximum [ 2004.273055][T16657] loop5: detected capacity change from 0 to 7 [ 2007.375662][T16775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.54090'. [ 2007.646703][T16799] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54107'. [ 2007.979048][T16846] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2007.995293][T16846] overlayfs: missing 'lowerdir' [ 2009.052471][T16894] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54155'. [ 2009.484951][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54176'. [ 2009.504148][T16940] bridge_slave_1: left allmulticast mode [ 2009.515329][T16940] bridge_slave_1: left promiscuous mode [ 2009.535342][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 2009.556286][T16940] bridge_slave_0: left allmulticast mode [ 2009.571671][T16940] bridge_slave_0: left promiscuous mode [ 2009.586479][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.445909][T17303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.54353'. [ 2015.644565][T17325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.54365'. [ 2015.803857][T17336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.811478][T17336] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.818741][T17336] bridge_slave_0: entered allmulticast mode [ 2015.825038][T17336] bridge_slave_0: entered promiscuous mode [ 2015.831893][T17336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.839090][T17336] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.846312][T17336] bridge_slave_1: entered allmulticast mode [ 2015.852599][T17336] bridge_slave_1: entered promiscuous mode [ 2015.856773][T17346] 9pnet_fd: Insufficient options for proto=fd [ 2015.920315][T17336] bridge0: port 2(bridge_slave_1) entered blocking state [ 2015.927406][T17336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2015.934687][T17336] bridge0: port 1(bridge_slave_0) entered blocking state [ 2015.941755][T17336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2015.966993][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.974493][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.006364][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.013440][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2016.021385][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.028451][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2016.046105][T26412] bridge_slave_1: left allmulticast mode [ 2016.051838][T26412] bridge_slave_1: left promiscuous mode [ 2016.058127][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2016.065964][T26412] bridge_slave_0: left allmulticast mode [ 2016.071626][T26412] bridge_slave_0: left promiscuous mode [ 2016.078427][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.172604][T17336] veth0_vlan: entered promiscuous mode [ 2016.185918][T17336] veth1_macvtap: entered promiscuous mode [ 2016.285870][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54368'. [ 2016.296270][T26412] veth1_macvtap: left promiscuous mode [ 2016.301783][T26412] veth0_vlan: left promiscuous mode [ 2016.315464][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54368'. [ 2016.345316][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54368'. [ 2016.476091][T17402] netlink: 104 bytes leftover after parsing attributes in process `syz.1.54396'. [ 2016.621788][T17423] netlink: 104 bytes leftover after parsing attributes in process `syz.3.54405'. [ 2016.941134][T17468] overlayfs: failed to resolve './file1/file0': -2 [ 2017.215373][T17491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.54439'. [ 2017.665605][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54451'. [ 2017.906283][T17524] overlayfs: missing 'lowerdir' [ 2018.987864][T17536] netlink: 104 bytes leftover after parsing attributes in process `syz.2.54462'. [ 2020.923627][T17624] 9pnet_fd: Insufficient options for proto=fd [ 2021.022182][T17634] overlayfs: missing 'lowerdir' [ 2021.036557][T17636] fuse: Bad value for 'group_id' [ 2021.041536][T17636] fuse: Bad value for 'group_id' [ 2021.105927][T17640] binder: Unknown parameter 'contextÌ' [ 2021.181577][T17646] __nla_validate_parse: 1 callbacks suppressed [ 2021.181593][T17646] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54516'. [ 2023.795914][T17827] overlayfs: missing 'lowerdir' [ 2024.584001][T17893] overlayfs: failed to resolve './file0': -2 [ 2025.404600][T17906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54640'. [ 2026.156862][T17979] exFAT-fs (rnullb0): invalid boot record signature [ 2026.185287][T17979] exFAT-fs (rnullb0): failed to read boot sector [ 2026.191626][T17979] exFAT-fs (rnullb0): failed to recognize exfat type [ 2027.058528][ T36] audit: type=1326 audit(1763144494.525:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17988 comm="syz.0.54679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd883b8f6c9 code=0x7fc00000 [ 2027.365343][T26146] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 2027.547128][T26146] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2027.555405][T26146] usb 1-1: config 0 has no interface number 0 [ 2027.576595][T26146] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2027.608198][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.621208][T26146] usb 1-1: Product: syz [ 2027.645325][T26146] usb 1-1: Manufacturer: syz [ 2027.654718][T26146] usb 1-1: SerialNumber: syz [ 2027.669413][T26146] usb 1-1: config 0 descriptor?? [ 2027.689649][T26146] ums-karma 1-1:0.46: USB Mass Storage device detected [ 2027.891878][T26146] usb 1-1: USB disconnect, device number 88 [ 2028.262440][T18023] binder: Unknown parameter 'contextÌÈf@âÞ®N [ 2028.262440][T18023] úòFoðÀÄ"á™ÅÁ cß' [ 2028.526084][T18042] binder: Unknown parameter 'contextÌÈf@âÞ®N [ 2028.526084][T18042] úòFoðÀÄ"á™ÅÁ cß' [ 2028.797429][T18066] binder: Unknown parameter 'contextÌÈf@âÞ®N [ 2028.797429][T18066] úòFoðÀÄ"á™ÅÁ cß' [ 2029.076975][T18083] binder: Bad value for 'stats' [ 2029.106641][T18085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18085 comm=syz.3.54725 [ 2029.282407][T18102] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54732'. [ 2029.770030][T18149] binder: Bad value for 'context' [ 2029.801094][T18154] No source specified [ 2030.382228][T18215] netlink: 104 bytes leftover after parsing attributes in process `syz.2.54784'. [ 2030.453667][T18218] binder: Bad value for 'stats' [ 2031.264374][T18242] binder: Bad value for 'stats' [ 2031.476827][T18258] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54805'. [ 2032.475643][T18290] binder: Bad value for 'stats' [ 2032.848301][T18314] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 2033.026170][T18322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54836'. [ 2033.665437][T18351] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54850'. [ 2033.814625][T18364] overlay: Unknown parameter 'hash' [ 2033.876506][T18368] binder: Unknown parameter 'contextÌ' [ 2034.586172][T18433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54888'. [ 2035.086207][T18469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.54906'. [ 2037.800408][T18548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.807733][T18548] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.814815][T18548] bridge_slave_0: entered allmulticast mode [ 2037.821408][T18548] bridge_slave_0: entered promiscuous mode [ 2037.828602][T18548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.835803][T18548] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.842889][T18548] bridge_slave_1: entered allmulticast mode [ 2037.849516][T18548] bridge_slave_1: entered promiscuous mode [ 2037.921848][T18548] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.928947][T18548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2037.936276][T18548] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.943319][T18548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.039979][T18548] veth0_vlan: entered promiscuous mode [ 2038.078339][T18548] veth1_macvtap: entered promiscuous mode [ 2038.158139][T26412] veth1_macvtap: left promiscuous mode [ 2038.163687][T26412] veth0_vlan: left promiscuous mode [ 2039.368711][T18640] binder: Bad value for 'stats' [ 2039.487846][T18654] netlink: 'syz.0.54990': attribute type 16 has an invalid length. [ 2039.515309][T18654] netlink: 'syz.0.54990': attribute type 2 has an invalid length. [ 2039.523130][T18654] netlink: 64094 bytes leftover after parsing attributes in process `syz.0.54990'. [ 2039.585298][T26146] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2039.715274][T26146] usb 2-1: device descriptor read/64, error -71 [ 2039.905310][ T7335] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2039.955277][T26146] usb 2-1: device descriptor read/64, error -71 [ 2040.055295][ T7335] usb 1-1: Using ep0 maxpacket: 16 [ 2040.061752][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2040.080242][ T7335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.100511][ T7335] usb 1-1: config 0 has no interfaces? [ 2040.110241][ T7335] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2040.125303][ T7335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.145300][ T7335] usb 1-1: Product: syz [ 2040.149468][ T7335] usb 1-1: Manufacturer: syz [ 2040.161505][ T7335] usb 1-1: SerialNumber: syz [ 2040.180987][ T7335] usb 1-1: config 0 descriptor?? [ 2040.195300][T26146] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2040.346012][T26146] usb 2-1: device descriptor read/64, error -71 [ 2040.394063][ T31] usb 1-1: USB disconnect, device number 89 [ 2040.585273][T26146] usb 2-1: device descriptor read/64, error -71 [ 2040.695354][T26146] usb usb2-port1: attempt power cycle [ 2040.755297][ T7335] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 2040.920641][ T7335] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2040.935487][ T7335] usb 4-1: config 0 has no interface number 0 [ 2040.949636][ T7335] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2040.965268][ T7335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2040.983436][ T7335] usb 4-1: Product: syz [ 2040.987639][ T7335] usb 4-1: Manufacturer: syz [ 2040.992258][ T7335] usb 4-1: SerialNumber: syz [ 2041.007589][ T7335] usb 4-1: config 0 descriptor?? [ 2041.026127][ T7335] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2041.037408][T26146] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2041.076756][T26146] usb 2-1: device descriptor read/8, error -71 [ 2041.206346][T26146] usb 2-1: device descriptor read/8, error -71 [ 2041.218326][ T7335] usb 4-1: USB disconnect, device number 97 [ 2041.445304][T26146] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2041.476172][T26146] usb 2-1: device descriptor read/8, error -71 [ 2041.616221][T26146] usb 2-1: device descriptor read/8, error -71 [ 2041.729089][T26146] usb usb2-port1: unable to enumerate USB device [ 2042.686493][T18854] overlayfs: failed to resolve './file0': -2 [ 2042.935344][ T7335] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 2043.125585][ T7335] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2043.133706][ T7335] usb 1-1: config 0 has no interface number 0 [ 2043.154453][ T7335] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2043.176698][ T7335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.202802][ T7335] usb 1-1: Product: syz [ 2043.211598][ T7335] usb 1-1: Manufacturer: syz [ 2043.228733][ T7335] usb 1-1: SerialNumber: syz [ 2043.246219][ T7335] usb 1-1: config 0 descriptor?? [ 2043.265734][ T7335] ums-karma 1-1:0.46: USB Mass Storage device detected [ 2043.453512][ T7335] usb 1-1: USB disconnect, device number 90 [ 2043.633242][T18902] binder: Unknown parameter 'contextÌ' [ 2044.196117][T18957] overlay: Unknown parameter 'hash' [ 2044.269056][T18962] binder: Bad value for 'stats' [ 2044.274863][T18965] overlayfs: overlapping lowerdir path [ 2046.208089][T19081] binder: Bad value for 'stats' [ 2047.442649][T19136] overlay: Unknown parameter 'hash' [ 2049.210722][ T36] audit: type=1326 audit(1763144516.675:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.2.55254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2049.234717][ T36] audit: type=1326 audit(1763144516.675:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.2.55254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2049.258721][ T36] audit: type=1326 audit(1763144516.675:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.2.55254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2049.477916][T19227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.55264'. [ 2049.488545][T19228] SELinux: policydb string does not match my string SE Linux [ 2049.515319][T19228] SELinux: failed to load policy [ 2049.935301][T26146] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2050.095291][T26146] usb 3-1: Using ep0 maxpacket: 8 [ 2050.101350][T26146] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 2050.109562][T26146] usb 3-1: config 0 has no interface number 0 [ 2050.119668][T26146] usb 3-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2050.155280][T26146] usb 3-1: config 0 interface 200 has no altsetting 0 [ 2050.192463][T26146] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2050.201568][T26146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.225275][T26146] usb 3-1: Product: syz [ 2050.239600][T26146] usb 3-1: Manufacturer: syz [ 2050.256097][T26146] usb 3-1: SerialNumber: syz [ 2050.276559][T26146] usb 3-1: config 0 descriptor?? [ 2050.488320][T26146] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 2050.515137][T26146] usb 3-1: USB disconnect, device number 90 [ 2050.543476][T19261] 9pnet_fd: Insufficient options for proto=fd [ 2051.555321][T19313] binder: Bad value for 'stats' [ 2051.931837][T19353] binder: Bad value for 'stats' [ 2052.096646][T19372] binder: Bad value for 'stats' [ 2052.140884][T19376] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 2052.155263][ T31] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2052.219528][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55338'. [ 2052.320905][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.351473][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2052.375286][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.397292][ T31] usb 1-1: Product: syz [ 2052.401554][ T31] usb 1-1: Manufacturer: syz [ 2052.416393][T19395] overlayfs: failed to resolve './file1/file0': -2 [ 2052.425456][ T31] usb 1-1: SerialNumber: syz [ 2053.649876][ T31] cdc_ncm 1-1:1.0: failed to get mac address [ 2053.656183][ T31] cdc_ncm 1-1:1.0: bind() failure [ 2053.675297][ T31] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2053.705053][ T31] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2053.726790][ T31] usb 1-1: USB disconnect, device number 91 [ 2056.976665][ T36] audit: type=1400 audit(1763144524.445:1408): avc: denied { search } for pid=19520 comm="syz.2.55406" name="/" dev="configfs" ino=2324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.995289][ T31] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2056.999191][ T36] audit: type=1400 audit(1763144524.445:1409): avc: denied { write } for pid=19520 comm="syz.2.55406" name="/" dev="configfs" ino=2324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.999220][ T36] audit: type=1400 audit(1763144524.445:1410): avc: denied { add_name } for pid=19520 comm="syz.2.55406" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2056.999245][ T36] audit: type=1400 audit(1763144524.445:1411): avc: denied { create } for pid=19520 comm="syz.2.55406" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 2057.375289][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 2057.382899][ T31] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 2057.391093][ T31] usb 2-1: config 0 has no interface number 0 [ 2057.401553][ T31] usb 2-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2057.427445][ T31] usb 2-1: config 0 interface 200 has no altsetting 0 [ 2057.444289][ T31] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2057.453448][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.464811][ T31] usb 2-1: Product: syz [ 2057.473321][ T31] usb 2-1: Manufacturer: syz [ 2057.485264][ T31] usb 2-1: SerialNumber: syz [ 2057.498177][ T31] usb 2-1: config 0 descriptor?? [ 2057.710988][ T31] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 2057.728287][ T31] usb 2-1: USB disconnect, device number 89 [ 2058.085264][T26146] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2058.236231][T26146] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2058.247678][T26146] usb 4-1: config 0 has no interface number 0 [ 2058.262055][T26146] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2058.278747][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.315278][T26146] usb 4-1: Product: syz [ 2058.328278][T26146] usb 4-1: Manufacturer: syz [ 2058.345255][T26146] usb 4-1: SerialNumber: syz [ 2058.359401][T26146] usb 4-1: config 0 descriptor?? [ 2058.380151][T26146] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2058.560770][T19597] binder: Unknown parameter 'contex' [ 2058.580077][T26146] usb 4-1: USB disconnect, device number 98 [ 2059.839334][T19726] binder: Bad value for 'stats' [ 2061.793306][T19788] overlayfs: missing 'lowerdir' [ 2063.455346][T26146] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2063.615324][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2063.635324][T26146] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2063.644449][T26146] usb 1-1: config 0 has no interface number 0 [ 2063.673915][T26146] usb 1-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2063.699055][T26146] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2063.719598][T26146] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2063.735259][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.758073][T26146] usb 1-1: Product: syz [ 2063.762247][T26146] usb 1-1: Manufacturer: syz [ 2063.790766][T26146] usb 1-1: SerialNumber: syz [ 2063.809454][T26146] usb 1-1: config 0 descriptor?? [ 2064.019273][T26146] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2064.038625][T26146] usb 1-1: USB disconnect, device number 92 [ 2067.009350][T20130] binder: Bad value for 'stats' [ 2067.219244][ T36] audit: type=1400 audit(1763144534.685:1412): avc: denied { execute } for pid=20153 comm="syz.0.55712" path="/411/blkio.bfq.group_wait_time" dev="tmpfs" ino=2522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2067.656270][T20208] binder: Bad value for 'stats' [ 2068.833934][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55762'. [ 2069.616816][ T36] audit: type=1400 audit(1763144537.085:1413): avc: denied { mounton } for pid=20276 comm="syz.2.55774" path="/205/file0" dev="tmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2073.208291][T20409] netlink: 80 bytes leftover after parsing attributes in process `syz.0.55839'. [ 2073.505269][ T31] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 2073.615183][T20427] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.622286][T20427] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.629663][T20427] bridge_slave_0: entered allmulticast mode [ 2073.636350][T20427] bridge_slave_0: entered promiscuous mode [ 2073.642958][T20427] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.650323][T20427] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.657799][T20427] bridge_slave_1: entered allmulticast mode [ 2073.658552][ T31] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2073.664257][T20427] bridge_slave_1: entered promiscuous mode [ 2073.685294][ T31] usb 1-1: config 0 has no interface number 0 [ 2073.703590][ T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2073.712776][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.732975][ T31] usb 1-1: Product: syz [ 2073.745260][ T31] usb 1-1: Manufacturer: syz [ 2073.759593][T20427] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.761301][ T31] usb 1-1: SerialNumber: syz [ 2073.766654][T20427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.766749][T20427] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.781812][ T31] usb 1-1: config 0 descriptor?? [ 2073.785534][T20427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.808497][ T31] ums-karma 1-1:0.46: USB Mass Storage device detected [ 2073.841932][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.849409][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.869596][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.876680][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.886877][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.893935][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.904910][ T331] bridge_slave_1: left allmulticast mode [ 2073.910611][ T331] bridge_slave_1: left promiscuous mode [ 2073.916666][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.924378][ T331] bridge_slave_0: left allmulticast mode [ 2073.930568][ T331] bridge_slave_0: left promiscuous mode [ 2073.936583][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2074.011884][ T31] usb 1-1: USB disconnect, device number 93 [ 2074.025083][T20427] veth0_vlan: entered promiscuous mode [ 2074.039899][ T331] veth1_macvtap: left promiscuous mode [ 2074.045995][ T331] veth0_vlan: left promiscuous mode [ 2074.105681][T20427] veth1_macvtap: entered promiscuous mode [ 2074.306002][T20447] binder: Bad value for 'stats' [ 2074.333146][T20449] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2075.130041][T20529] binder: Bad value for 'stats' [ 2075.661484][T20585] 9pnet_fd: Insufficient options for proto=fd [ 2076.255296][ T31] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2076.435298][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 2076.458725][ T31] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2076.477039][ T31] usb 4-1: config 0 has no interface number 0 [ 2076.495113][ T31] usb 4-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2076.538230][ T31] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2076.564282][ T31] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2076.586486][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.614768][ T31] usb 4-1: Product: syz [ 2076.627298][ T31] usb 4-1: Manufacturer: syz [ 2076.655134][ T31] usb 4-1: SerialNumber: syz [ 2076.665444][ T31] usb 4-1: config 0 descriptor?? [ 2076.877449][ T31] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 2076.906039][ T31] usb 4-1: USB disconnect, device number 99 [ 2077.889136][ T36] audit: type=1400 audit(1763144545.355:1414): avc: denied { create } for pid=20724 comm="syz.1.55982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2078.180679][T20744] overlayfs: failed to resolve './file0': -2 [ 2078.588499][T20758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.55997'. [ 2079.073397][T20773] overlayfs: failed to resolve './file0': -2 [ 2079.242462][T20803] overlayfs: failed to resolve './file0': -2 [ 2079.702544][T20880] overlayfs: failed to resolve './file1': -2 [ 2079.715300][ T31] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 2079.897736][ T31] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 2079.915267][ T31] usb 2-1: config 0 has no interface number 0 [ 2079.929101][ T31] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2079.948440][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.976704][ T31] usb 2-1: Product: syz [ 2079.981393][ T31] usb 2-1: Manufacturer: syz [ 2080.000843][ T31] usb 2-1: SerialNumber: syz [ 2080.020575][ T31] usb 2-1: config 0 descriptor?? [ 2080.036840][ T31] ums-karma 2-1:0.46: USB Mass Storage device detected [ 2080.237992][ T31] usb 2-1: USB disconnect, device number 90 [ 2082.975471][T20986] 9pnet_fd: Insufficient options for proto=fd [ 2083.117133][T20997] binder: Unknown parameter 'sta' [ 2084.255273][ T7335] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2084.405247][ T7335] usb 1-1: Using ep0 maxpacket: 16 [ 2084.412742][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2084.421428][ T7335] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2084.429054][ T7335] usb 1-1: can't read configurations, error -61 [ 2084.565269][ T7335] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2084.725301][ T7335] usb 1-1: Using ep0 maxpacket: 16 [ 2084.736834][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2084.746530][ T7335] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2084.756279][ T7335] usb 1-1: can't read configurations, error -61 [ 2084.785082][ T7335] usb usb1-port1: attempt power cycle [ 2085.125289][ T7335] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2085.155582][ T7335] usb 1-1: Using ep0 maxpacket: 16 [ 2085.165251][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2085.176072][ T7335] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2085.185345][ T7335] usb 1-1: can't read configurations, error -61 [ 2085.325521][ T7335] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2085.355563][ T7335] usb 1-1: Using ep0 maxpacket: 16 [ 2085.364462][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2085.376198][ T7335] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2085.384840][ T7335] usb 1-1: can't read configurations, error -61 [ 2085.396631][ T7335] usb usb1-port1: unable to enumerate USB device [ 2085.789452][ T7335] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 2085.852973][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.860099][T21118] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.867442][T21118] bridge_slave_0: entered allmulticast mode [ 2085.873857][T21118] bridge_slave_0: entered promiscuous mode [ 2085.880506][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.887665][T21118] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.894726][T21118] bridge_slave_1: entered allmulticast mode [ 2085.901554][T21118] bridge_slave_1: entered promiscuous mode [ 2085.969267][ T7335] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 2085.977601][ T7335] usb 3-1: config 0 has no interface number 0 [ 2085.982714][T21118] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.985211][ T7335] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2085.990744][T21118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.000543][ T7335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2086.007036][T21118] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.015264][ T7335] usb 3-1: Product: syz [ 2086.021977][T21118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.026372][ T7335] usb 3-1: Manufacturer: syz [ 2086.040445][ T12] veth1_macvtap: left promiscuous mode [ 2086.046061][ T12] veth0_vlan: left promiscuous mode [ 2086.051971][ T7335] usb 3-1: SerialNumber: syz [ 2086.061603][ T7335] usb 3-1: config 0 descriptor?? [ 2086.079300][ T7335] ums-karma 3-1:0.46: USB Mass Storage device detected [ 2086.108725][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2086.116177][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.126891][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.133954][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.142614][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.149661][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.183042][T21118] veth0_vlan: entered promiscuous mode [ 2086.197225][T21118] veth1_macvtap: entered promiscuous mode [ 2086.281300][ T7335] usb 3-1: USB disconnect, device number 91 [ 2087.477709][T21239] fuse: Bad value for 'group_id' [ 2087.482771][T21239] fuse: Bad value for 'group_id' [ 2087.742235][ T36] audit: type=1400 audit(1763144555.205:1415): avc: denied { name_bind } for pid=21268 comm="syz.1.56236" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 2087.805332][ T7335] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2087.907974][T21281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.56242'. [ 2087.935403][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56242'. [ 2087.994843][ T7335] usb 4-1: Using ep0 maxpacket: 8 [ 2088.010993][ T7335] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2088.029400][ T7335] usb 4-1: config 0 has no interface number 0 [ 2088.049624][ T7335] usb 4-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2088.085431][ T7335] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2088.122959][ T7335] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2088.142771][ T7335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.165286][ T7335] usb 4-1: Product: syz [ 2088.169476][ T7335] usb 4-1: Manufacturer: syz [ 2088.204394][ T7335] usb 4-1: SerialNumber: syz [ 2088.222391][ T7335] usb 4-1: config 0 descriptor?? [ 2088.461014][ T7335] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 2088.469297][ T7335] usb 4-1: USB disconnect, device number 100 [ 2089.046342][T21310] netlink: 80 bytes leftover after parsing attributes in process `syz.3.56256'. [ 2089.236122][T21327] overlayfs: missing 'lowerdir' [ 2089.992653][ T36] audit: type=1400 audit(1763144557.455:1416): avc: denied { bind } for pid=21359 comm="syz.3.56281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2090.305525][ T7335] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2090.485255][ T7335] usb 4-1: Using ep0 maxpacket: 16 [ 2090.513673][ T7335] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2090.525320][ T7335] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2090.557915][ T7335] usb 4-1: can't read configurations, error -71 [ 2091.815249][ T7335] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2091.994078][ T7335] usb 3-1: Using ep0 maxpacket: 16 [ 2092.020376][ T7335] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2092.035915][ T7335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.075241][ T7335] usb 3-1: config 0 has no interfaces? [ 2092.096558][ T7335] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2092.135254][ T7335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.165309][ T7335] usb 3-1: Product: syz [ 2092.169631][ T7335] usb 3-1: Manufacturer: syz [ 2092.194392][ T7335] usb 3-1: SerialNumber: syz [ 2092.205678][ T7335] usb 3-1: config 0 descriptor?? [ 2092.415399][ T7335] usb 3-1: USB disconnect, device number 92 [ 2093.213974][T21488] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2096.426201][T21583] binder: Bad value for 'max' [ 2096.547794][T21591] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21591 comm=syz.1.56393 [ 2096.547822][ T36] audit: type=1400 audit(1763144564.015:1417): avc: denied { write } for pid=21590 comm="syz.1.56393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2096.560295][T26146] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2096.835715][T26146] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2096.843807][T26146] usb 4-1: config 0 has no interface number 0 [ 2096.851265][T26146] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2096.860343][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.887812][T26146] usb 4-1: Product: syz [ 2096.891977][T26146] usb 4-1: Manufacturer: syz [ 2096.915241][T26146] usb 4-1: SerialNumber: syz [ 2096.920538][T26146] usb 4-1: config 0 descriptor?? [ 2096.936062][T26146] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2097.138131][T26146] usb 4-1: USB disconnect, device number 103 [ 2097.662727][T21621] binder: Bad value for 'max' [ 2101.064709][T21774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.071842][T21774] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.079237][T21774] bridge_slave_0: entered allmulticast mode [ 2101.085951][T21774] bridge_slave_0: entered promiscuous mode [ 2101.092578][T21774] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.099998][T21774] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.107232][T21774] bridge_slave_1: entered allmulticast mode [ 2101.113607][T21774] bridge_slave_1: entered promiscuous mode [ 2101.180415][T21774] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.187505][T21774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.194798][T21774] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.201875][T21774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.226795][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.234320][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.242091][ T36] audit: type=1326 audit(1763144568.705:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.276543][ T36] audit: type=1326 audit(1763144568.705:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.300553][ T36] audit: type=1326 audit(1763144568.705:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.325556][ T36] audit: type=1326 audit(1763144568.705:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.356328][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.363415][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2101.372714][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.379822][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.388287][ T36] audit: type=1326 audit(1763144568.715:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.414713][ T12] bridge_slave_1: left allmulticast mode [ 2101.420424][ T12] bridge_slave_1: left promiscuous mode [ 2101.426674][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.434030][ T36] audit: type=1326 audit(1763144568.715:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21790 comm="syz.2.56484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384db8f6c9 code=0x7ffc0000 [ 2101.458233][ T12] bridge_slave_0: left allmulticast mode [ 2101.463898][ T12] bridge_slave_0: left promiscuous mode [ 2101.470171][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.573081][T21774] veth0_vlan: entered promiscuous mode [ 2101.585873][T21774] veth1_macvtap: entered promiscuous mode [ 2101.604095][ T12] veth1_macvtap: left promiscuous mode [ 2101.610431][ T12] veth0_vlan: left promiscuous mode [ 2102.421658][T21815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2102.455334][T21815] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2102.787718][T21830] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2102.815293][T21830] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2103.375017][T21855] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2103.394112][T21855] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2103.633816][T21881] overlayfs: missing 'lowerdir' [ 2104.183778][T21924] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21924 comm=syz.2.56548 [ 2108.715672][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56633'. [ 2109.079262][T22145] binder: Bad value for 'max' [ 2109.396253][T22186] overlayfs: missing 'lowerdir' [ 2109.544327][T22208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22208 comm=syz.0.56680 [ 2109.787554][T22227] binder: Bad value for 'max' [ 2110.311591][T22243] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22243 comm=syz.3.56697 [ 2110.447743][T22247] overlayfs: missing 'lowerdir' [ 2111.120521][T22260] overlayfs: missing 'lowerdir' [ 2111.195249][T26146] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 2111.356419][T26146] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 2111.376374][T26146] usb 4-1: config 0 has no interface number 0 [ 2111.394336][T26146] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2111.415250][ T31] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2111.422832][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.444818][T26146] usb 4-1: Product: syz [ 2111.455233][T26146] usb 4-1: Manufacturer: syz [ 2111.459821][T26146] usb 4-1: SerialNumber: syz [ 2111.494931][T26146] usb 4-1: config 0 descriptor?? [ 2111.505586][T26146] ums-karma 4-1:0.46: USB Mass Storage device detected [ 2111.595241][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 2111.602264][ T31] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 2111.615239][ T31] usb 3-1: config 0 has no interface number 0 [ 2111.635246][ T31] usb 3-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2111.665280][ T31] usb 3-1: config 0 interface 200 has no altsetting 0 [ 2111.695317][ T31] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2111.704400][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.714202][T26146] usb 4-1: USB disconnect, device number 104 [ 2111.735896][ T31] usb 3-1: Product: syz [ 2111.740059][ T31] usb 3-1: Manufacturer: syz [ 2111.763033][ T31] usb 3-1: SerialNumber: syz [ 2111.779327][ T31] usb 3-1: config 0 descriptor?? [ 2111.859836][T22280] overlayfs: missing 'lowerdir' [ 2111.958205][T22288] overlayfs: missing 'lowerdir' [ 2112.001581][ T31] usbhid 3-1:0.200: couldn't find an input interrupt endpoint [ 2112.025388][ T31] usb 3-1: USB disconnect, device number 93 [ 2112.581660][T22326] binder: Bad value for 'max' [ 2112.700740][T22337] overlayfs: invalid origin (0000) [ 2113.806042][T22369] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22369 comm=syz.1.56757 [ 2116.997964][T22453] overlayfs: missing 'lowerdir' [ 2117.116137][T22461] fuse: Unknown parameter ''' [ 2117.165154][T22471] overlayfs: missing 'lowerdir' [ 2117.269462][T22488] fuse: Unknown parameter ''' [ 2117.423279][T22504] binder: Bad value for 'max' [ 2117.449393][T22508] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2117.458389][T22508] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2117.470263][T22508] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2117.501949][T22512] overlayfs: missing 'lowerdir' [ 2117.515258][ T7335] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2117.525242][ T31] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 2117.681495][T22522] fuse: Unknown parameter ''' [ 2117.686457][ T7335] usb 2-1: Using ep0 maxpacket: 8 [ 2117.693453][ T31] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 2117.706407][ T7335] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 2117.717862][ T31] usb 3-1: config 0 has no interface number 0 [ 2117.725592][ T7335] usb 2-1: config 0 has no interface number 0 [ 2117.732874][T22524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.56831'. [ 2117.742076][ T7335] usb 2-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2117.756722][ T31] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2117.768511][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.780280][ T7335] usb 2-1: config 0 interface 200 has no altsetting 0 [ 2117.791935][ T31] usb 3-1: Product: syz [ 2117.798274][ T7335] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2117.810654][ T31] usb 3-1: Manufacturer: syz [ 2117.817518][ T7335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.827592][ T31] usb 3-1: SerialNumber: syz [ 2117.837721][ T7335] usb 2-1: Product: syz [ 2117.842098][ T31] usb 3-1: config 0 descriptor?? [ 2117.855294][ T7335] usb 2-1: Manufacturer: syz [ 2117.860784][ T31] ums-karma 3-1:0.46: USB Mass Storage device detected [ 2117.869875][ T7335] usb 2-1: SerialNumber: syz [ 2117.895656][ T7335] usb 2-1: config 0 descriptor?? [ 2118.061584][ T31] usb 3-1: USB disconnect, device number 94 [ 2118.104291][ T7335] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 2118.125097][ T7335] usb 2-1: USB disconnect, device number 91 [ 2118.556243][T22555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.56844'. [ 2118.751465][T22575] overlayfs: missing 'lowerdir' [ 2118.995282][ T7335] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 2119.245691][ T7335] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 2119.253791][ T7335] usb 3-1: config 0 has no interface number 0 [ 2119.271348][ T7335] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2119.280457][ T7335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2119.300643][ T7335] usb 3-1: Product: syz [ 2119.304810][ T7335] usb 3-1: Manufacturer: syz [ 2119.337261][ T7335] usb 3-1: SerialNumber: syz [ 2119.367769][ T7335] usb 3-1: config 0 descriptor?? [ 2119.385681][ T7335] ums-karma 3-1:0.46: USB Mass Storage device detected [ 2119.586174][ T7335] usb 3-1: USB disconnect, device number 95 [ 2119.913979][T22606] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22606 comm=syz.0.56870 [ 2120.031844][T22622] netlink: 80 bytes leftover after parsing attributes in process `syz.0.56877'. [ 2120.143463][T22637] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22637 comm=syz.2.56882 [ 2120.830988][T22706] binder: Bad value for 'max' [ 2121.294119][T22724] binder: Bad value for 'max' [ 2121.326135][T22726] netlink: 80 bytes leftover after parsing attributes in process `syz.3.56927'. [ 2121.945398][T22749] netlink: 80 bytes leftover after parsing attributes in process `syz.1.56938'. [ 2122.557929][T22780] overlayfs: missing 'lowerdir' [ 2122.847177][T22807] overlayfs: missing 'lowerdir' [ 2124.657584][T22856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56992'. [ 2124.935266][ T31] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 2125.086970][ T31] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 2125.095143][ T31] usb 1-1: config 0 has no interface number 0 [ 2125.123220][ T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2125.136787][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.165227][ T31] usb 1-1: Product: syz [ 2125.180179][ T31] usb 1-1: Manufacturer: syz [ 2125.197928][ T31] usb 1-1: SerialNumber: syz [ 2125.224753][ T31] usb 1-1: config 0 descriptor?? [ 2125.230940][T22898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57011'. [ 2125.244673][ T31] ums-karma 1-1:0.46: USB Mass Storage device detected [ 2125.448210][ T31] usb 1-1: USB disconnect, device number 98 [ 2126.587415][T22958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57032'. [ 2127.226567][T22991] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22991 comm=syz.3.57057 [ 2128.026686][T23056] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23056 comm=syz.0.57087 [ 2128.367907][T23079] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23079 comm=syz.1.57097 [ 2128.765417][T23098] binder: Bad value for 'max' [ 2128.821158][T23100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57107'. [ 2129.247650][T23114] binder: Bad value for 'max' [ 2129.373954][T23121] overlayfs: missing 'workdir' [ 2129.391642][T23123] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23123 comm=syz.1.57118 [ 2129.694424][T23141] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23141 comm=syz.0.57129 [ 2129.996653][T23169] overlayfs: failed to resolve './file1': -2 [ 2130.728380][T23207] overlayfs: failed to resolve './file1': -2 [ 2132.599840][T23265] overlayfs: missing 'lowerdir' [ 2132.645244][ T7335] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 2132.845909][ T7335] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 2132.854101][ T7335] usb 2-1: config 0 has no interface number 0 [ 2132.881689][ T7335] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2132.900899][ T7335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.925251][ T7335] usb 2-1: Product: syz [ 2132.929413][ T7335] usb 2-1: Manufacturer: syz [ 2132.964328][ T7335] usb 2-1: SerialNumber: syz [ 2132.994779][ T7335] usb 2-1: config 0 descriptor?? [ 2133.025297][ T7335] ums-karma 2-1:0.46: USB Mass Storage device detected [ 2133.226484][ T7335] usb 2-1: USB disconnect, device number 92 [ 2134.405863][T23309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57207'. [ 2135.166234][T23341] overlayfs: failed to resolve './file1': -2 [ 2135.321328][T23355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57228'. [ 2135.406170][T23361] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23361 comm=syz.1.57232 [ 2135.844534][T23387] overlayfs: failed to resolve './file0': -2 [ 2136.123405][T23410] overlayfs: failed to resolve './file0': -2 [ 2136.258672][T23418] binder: Bad value for 'max' [ 2136.602362][T23451] binder: Bad value for 'max' [ 2136.661870][T23458] overlayfs: failed to resolve './file0': -2 [ 2136.701753][T23462] overlayfs: failed to resolve './file1': -2 [ 2136.806176][T23483] overlayfs: failed to resolve './file0': -2 [ 2136.882166][T23489] overlayfs: failed to resolve './file1': -2 [ 2136.906185][T23492] overlayfs: invalid origin (0000) [ 2137.124982][T23523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57310'. [ 2137.238023][ T31] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 2137.422331][ T31] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 2137.432773][ T31] usb 3-1: config 0 has no interface number 0 [ 2137.453839][ T31] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 2137.484167][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.505229][ T31] usb 3-1: Product: syz [ 2137.522741][ T31] usb 3-1: Manufacturer: syz [ 2137.541227][ T31] usb 3-1: SerialNumber: syz [ 2137.565863][ T31] usb 3-1: config 0 descriptor?? [ 2137.615677][ T31] ums-karma 3-1:0.46: USB Mass Storage device detected [ 2137.815967][ T7335] usb 3-1: USB disconnect, device number 96 [ 2138.566749][T23566] overlayfs: failed to resolve './file1': -2 [ 2138.795376][T23584] overlayfs: failed to resolve './file0': -2 [ 2139.068680][T23608] overlayfs: failed to resolve './file0': -2 [ 2139.246445][T23618] syz.0.57351: attempt to access beyond end of device [ 2139.246445][T23618] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2139.280000][T23618] EXT4-fs (loop0): unable to read superblock [ 2139.426164][T23627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23627 comm=syz.0.57357 [ 2139.445260][T26146] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2139.625241][T26146] usb 2-1: Using ep0 maxpacket: 8 [ 2139.642627][T26146] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 2139.659835][T26146] usb 2-1: config 0 has no interface number 0 [ 2139.672705][T26146] usb 2-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2139.724005][T26146] usb 2-1: config 0 interface 200 has no altsetting 0 [ 2139.745442][T26146] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2139.764684][T26146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.795010][T26146] usb 2-1: Product: syz [ 2139.799283][T26146] usb 2-1: Manufacturer: syz [ 2139.803898][T26146] usb 2-1: SerialNumber: syz [ 2139.818985][T26146] usb 2-1: config 0 descriptor?? [ 2139.916730][T23646] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23646 comm=syz.0.57366 [ 2140.037783][T26146] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 2140.065998][T26146] usb 2-1: USB disconnect, device number 93 [ 2141.545483][T23698] overlayfs: failed to resolve './file0': -2 [ 2142.119714][T23750] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23750 comm=syz.1.57415 [ 2142.965238][T26146] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2143.145256][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 2143.185692][T26146] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2143.193869][T26146] usb 4-1: config 0 has no interface number 0 [ 2143.215242][T26146] usb 4-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2143.265241][T26146] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2143.283491][T26146] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2143.292656][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.318025][T26146] usb 4-1: Product: syz [ 2143.322205][T26146] usb 4-1: Manufacturer: syz [ 2143.355381][T26146] usb 4-1: SerialNumber: syz [ 2143.370375][T26146] usb 4-1: config 0 descriptor?? [ 2143.582616][T26146] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 2143.603426][T26146] usb 4-1: USB disconnect, device number 105 [ 2144.285147][T23884] overlayfs: failed to resolve './file1': -2 [ 2144.318061][T23887] syz.1.57478: attempt to access beyond end of device [ 2144.318061][T23887] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2144.346352][T23889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57481'. [ 2144.372268][T23887] EXT4-fs (loop1): unable to read superblock [ 2144.643070][T23918] binder: Bad value for 'max' [ 2144.854666][T23941] binder: Bad value for 'max' [ 2144.920636][T23949] syz.3.57506: attempt to access beyond end of device [ 2144.920636][T23949] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2144.938947][T23951] overlayfs: failed to resolve './file0': -2 [ 2144.973176][T23949] EXT4-fs (loop3): unable to read superblock [ 2145.105074][T23966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57518'. [ 2145.144676][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57518'. [ 2145.174746][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57518'. [ 2145.606130][T24023] overlayfs: failed to resolve './file1': -2 [ 2145.683205][T24031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1139 [ 2145.895500][T24052] overlayfs: invalid origin (0000) [ 2146.215307][ T31] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2146.394721][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 2146.419557][ T31] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2146.427787][ T31] usb 1-1: config 0 has no interface number 0 [ 2146.441425][ T31] usb 1-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2146.482844][ T31] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2146.504397][ T31] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2146.513569][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.543963][ T31] usb 1-1: Product: syz [ 2146.558269][ T31] usb 1-1: Manufacturer: syz [ 2146.576062][ T31] usb 1-1: SerialNumber: syz [ 2146.593566][ T31] usb 1-1: config 0 descriptor?? [ 2146.811196][ T31] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2146.827772][ T31] usb 1-1: USB disconnect, device number 99 [ 2147.249847][T24110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57587'. [ 2147.570555][T24145] netlink: 44 bytes leftover after parsing attributes in process `syz.2.57603'. [ 2147.616736][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57603'. [ 2147.665306][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57603'. [ 2147.827591][T24165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1095 [ 2148.361829][T24202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57630'. [ 2148.437805][T24204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57632'. [ 2150.425253][ T31] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2150.608537][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 2150.630613][ T31] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2150.642086][ T31] usb 1-1: config 0 has no interface number 0 [ 2150.660801][ T31] usb 1-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2150.705231][ T31] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2150.726497][ T31] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2150.745221][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.773473][ T31] usb 1-1: Product: syz [ 2150.785215][ T31] usb 1-1: Manufacturer: syz [ 2150.789809][ T31] usb 1-1: SerialNumber: syz [ 2150.834974][ T31] usb 1-1: config 0 descriptor?? [ 2151.047521][ T31] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2151.055771][ T31] usb 1-1: USB disconnect, device number 100 [ 2151.076301][T24283] overlayfs: failed to resolve './file0': -2 [ 2151.601408][T24290] __nla_validate_parse: 3 callbacks suppressed [ 2151.601423][T24290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.57673'. [ 2152.697616][T24338] syz.3.57695: attempt to access beyond end of device [ 2152.697616][T24338] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2152.745281][T24338] EXT4-fs (loop3): unable to read superblock [ 2154.376180][T24398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57723'. [ 2154.405364][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57723'. [ 2154.430556][T24398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57723'. [ 2154.591541][T24408] overlayfs: failed to resolve './file1': -2 [ 2155.002775][T24468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1187 [ 2155.122323][T24488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57763'. [ 2155.197972][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57763'. [ 2155.223642][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57763'. [ 2155.481416][T24524] syz.3.57780: attempt to access beyond end of device [ 2155.481416][T24524] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2155.504807][T24524] EXT4-fs (loop3): unable to read superblock [ 2158.115511][T24635] syz.1.57827: attempt to access beyond end of device [ 2158.115511][T24635] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2158.155374][T24635] EXT4-fs (loop1): unable to read superblock [ 2158.445970][T24661] syz.3.57846: attempt to access beyond end of device [ 2158.445970][T24661] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2158.492398][T24661] EXT4-fs (loop3): unable to read superblock [ 2159.224463][T24694] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.231721][T24694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.239115][T24694] bridge_slave_0: entered allmulticast mode [ 2159.245242][ T31] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2159.245862][T24694] bridge_slave_0: entered promiscuous mode [ 2159.259769][T24694] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.266866][T24694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.273951][T24694] bridge_slave_1: entered allmulticast mode [ 2159.280349][T24694] bridge_slave_1: entered promiscuous mode [ 2159.361396][T24694] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.368491][T24694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2159.375881][T24694] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.382937][T24694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2159.407313][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 2159.412516][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.418562][ T31] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2159.428276][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.438058][ T31] usb 1-1: config 0 has no interface number 0 [ 2159.444190][ T31] usb 1-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2159.457028][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.464080][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2159.472519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.479612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2159.503821][T24694] veth0_vlan: entered promiscuous mode [ 2159.518831][T24694] veth1_macvtap: entered promiscuous mode [ 2159.526901][ T31] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2159.549330][ T31] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2159.565257][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.584118][ T31] usb 1-1: Product: syz [ 2159.605229][ T31] usb 1-1: Manufacturer: syz [ 2159.609845][ T31] usb 1-1: SerialNumber: syz [ 2159.617290][ T9924] bridge_slave_1: left allmulticast mode [ 2159.622961][ T9924] bridge_slave_1: left promiscuous mode [ 2159.628901][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.637650][ T9924] bridge_slave_0: left allmulticast mode [ 2159.643437][ T9924] bridge_slave_0: left promiscuous mode [ 2159.643719][ T31] usb 1-1: config 0 descriptor?? [ 2159.654184][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.758138][ T9924] veth1_macvtap: left promiscuous mode [ 2159.763703][ T9924] veth0_vlan: left promiscuous mode [ 2159.894205][ T31] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2159.915329][ T31] usb 1-1: USB disconnect, device number 101 [ 2161.816162][T24789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.823237][T24789] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.830746][T24789] bridge_slave_0: entered allmulticast mode [ 2161.837269][T24789] bridge_slave_0: entered promiscuous mode [ 2161.843893][T24789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.851317][T24789] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.858539][T24789] bridge_slave_1: entered allmulticast mode [ 2161.864885][T24789] bridge_slave_1: entered promiscuous mode [ 2161.941519][T24789] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.948619][T24789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2161.955945][T24789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.962990][T24789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2161.989416][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.997322][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.998618][T24806] overlayfs: invalid origin (0000) [ 2162.016700][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 2162.023759][ T9924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2162.031907][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.038989][ T9924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2162.069964][T24789] veth0_vlan: entered promiscuous mode [ 2162.092962][T24789] veth1_macvtap: entered promiscuous mode [ 2162.119954][T26412] bridge_slave_1: left allmulticast mode [ 2162.127995][T26412] bridge_slave_1: left promiscuous mode [ 2162.133652][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.141951][T26412] bridge_slave_0: left allmulticast mode [ 2162.148079][T26412] bridge_slave_0: left promiscuous mode [ 2162.153715][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.274400][T24823] syz.2.57914: attempt to access beyond end of device [ 2162.274400][T24823] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2162.325445][T24823] EXT4-fs (loop2): unable to read superblock [ 2162.332445][T26412] veth1_macvtap: left promiscuous mode [ 2162.338368][T26412] veth0_vlan: left promiscuous mode [ 2164.049298][T24874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 2165.717936][T24937] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2165.787716][T24937] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2165.832375][T24937] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2166.215261][T24957] syz.1.57978: attempt to access beyond end of device [ 2166.215261][T24957] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 2166.265279][T24957] EXT4-fs (loop1): unable to read superblock [ 2166.409176][T24967] netlink: 44 bytes leftover after parsing attributes in process `syz.2.57981'. [ 2166.452214][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57981'. [ 2166.485263][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57981'. [ 2166.625652][T24977] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2166.664982][T24977] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2166.705253][T24977] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2167.426751][T25015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1084 [ 2168.296029][T25059] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58023'. [ 2168.345270][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58023'. [ 2168.374874][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58023'. [ 2168.864861][T25091] overlayfs: invalid origin (0000) [ 2169.125162][T25113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:809 [ 2169.456838][T25130] overlayfs: missing 'lowerdir' [ 2170.416441][T25178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1140 [ 2170.628488][T25187] overlayfs: invalid origin (0000) [ 2170.959484][T25200] overlayfs: missing 'lowerdir' [ 2171.035292][T26146] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2171.206479][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2171.221817][T26146] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2171.252848][T26146] usb 1-1: config 0 has no interface number 0 [ 2171.270488][T25221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 2171.272990][T26146] usb 1-1: config 0 interface 200 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 2171.294681][T25223] overlayfs: missing 'lowerdir' [ 2171.305424][T25224] overlayfs: invalid origin (0000) [ 2171.346518][T26146] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2171.378196][T26146] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2171.387526][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.409330][T26146] usb 1-1: Product: syz [ 2171.422739][T26146] usb 1-1: Manufacturer: syz [ 2171.437548][T26146] usb 1-1: SerialNumber: syz [ 2171.460366][T26146] usb 1-1: config 0 descriptor?? [ 2171.485569][T25243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:103 [ 2171.510797][T25247] overlayfs: missing 'lowerdir' [ 2171.685687][T26146] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2171.705259][T26146] usb 1-1: USB disconnect, device number 102 [ 2171.759196][T25267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58122'. [ 2171.795271][T25267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58122'. [ 2171.825272][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58122'. [ 2172.543680][T25325] overlayfs: missing 'lowerdir' [ 2172.895958][T25342] No source specified [ 2173.369035][T25361] overlayfs: missing 'lowerdir' [ 2173.706081][T25384] overlayfs: missing 'lowerdir' [ 2174.355303][T25400] overlayfs: invalid origin (0000) [ 2174.506151][T25405] overlayfs: missing 'lowerdir' [ 2175.051358][T25420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58189'. [ 2175.082739][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.58189'. [ 2175.112141][T25420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58189'. [ 2176.708410][T25484] overlayfs: missing 'lowerdir' [ 2177.565637][T25503] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2177.604784][T25503] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2177.645286][T25503] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2178.075943][T25518] overlayfs: missing 'lowerdir' [ 2178.546167][T25553] overlayfs: missing 'workdir' [ 2180.618857][T25652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.626725][T25652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.634101][T25652] bridge_slave_0: entered allmulticast mode [ 2180.640726][T25652] bridge_slave_0: entered promiscuous mode [ 2180.647804][T25652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.654869][T25652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.662234][T25652] bridge_slave_1: entered allmulticast mode [ 2180.669441][T25652] bridge_slave_1: entered promiscuous mode [ 2180.741892][T25652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.749387][T25652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2180.756745][T25652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.763893][T25652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2180.790551][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.798757][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.810187][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.817301][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2180.827368][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.834527][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2180.903866][T25652] veth0_vlan: entered promiscuous mode [ 2180.922650][T25652] veth1_macvtap: entered promiscuous mode [ 2180.931598][ T12] bridge_slave_1: left allmulticast mode [ 2180.938314][ T12] bridge_slave_1: left promiscuous mode [ 2180.943979][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.953003][ T12] bridge_slave_0: left allmulticast mode [ 2180.958999][ T12] bridge_slave_0: left promiscuous mode [ 2180.964673][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2181.090137][ T12] veth1_macvtap: left promiscuous mode [ 2181.095858][ T12] veth0_vlan: left promiscuous mode [ 2184.203699][T26010] overlayfs: invalid origin (0000) [ 2184.726294][T26051] overlayfs: invalid origin (0000) [ 2188.776086][T26293] netlink: 80 bytes leftover after parsing attributes in process `syz.1.58567'. [ 2188.947288][T26304] overlayfs: missing 'lowerdir' [ 2189.109585][T26316] netlink: 80 bytes leftover after parsing attributes in process `syz.2.58576'. [ 2189.181833][T26324] overlayfs: missing 'lowerdir' [ 2189.633091][T26348] overlayfs: missing 'lowerdir' [ 2190.166574][T26386] netlink: 44 bytes leftover after parsing attributes in process `syz.0.58606'. [ 2202.627548][T26966] binder: Unknown parameter 'coîte­ ' [ 2204.015009][T27029] binder: Bad value for 'max' [ 2207.535012][T27234] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.542329][T27234] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.549552][T27234] bridge_slave_0: entered allmulticast mode [ 2207.557186][T27234] bridge_slave_0: entered promiscuous mode [ 2207.563973][T27234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.572239][T27234] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.579556][T27234] bridge_slave_1: entered allmulticast mode [ 2207.586205][T27234] bridge_slave_1: entered promiscuous mode [ 2207.657294][T27234] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.664496][T27234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.671911][T27234] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.679083][T27234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.706227][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.713897][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.744935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.752137][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.770262][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.777552][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.802956][ T12] bridge_slave_1: left allmulticast mode [ 2207.809069][ T12] bridge_slave_1: left promiscuous mode [ 2207.817211][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.825012][ T12] bridge_slave_0: left allmulticast mode [ 2207.831024][ T12] bridge_slave_0: left promiscuous mode [ 2207.837050][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.912133][T27234] veth0_vlan: entered promiscuous mode [ 2207.926628][T27234] veth1_macvtap: entered promiscuous mode [ 2207.978797][ T12] veth1_macvtap: left promiscuous mode [ 2207.984418][ T12] veth0_vlan: left promiscuous mode [ 2208.422430][T27278] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2208.472465][T27278] overlayfs: missing 'lowerdir' [ 2208.623938][T27290] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2208.675485][T27290] overlayfs: missing 'lowerdir' [ 2208.935705][T27310] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2208.977347][T27310] overlayfs: missing 'lowerdir' [ 2210.844745][T27368] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2210.880689][T27368] overlayfs: missing 'lowerdir' [ 2211.247228][T27380] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2211.299361][T27380] overlayfs: missing 'lowerdir' [ 2212.697709][T27395] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2212.735649][T27395] overlayfs: missing 'lowerdir' [ 2213.895728][T27421] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2213.945263][T27421] overlayfs: missing 'lowerdir' [ 2214.615832][T27445] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2214.665319][T27445] overlayfs: missing 'lowerdir' [ 2215.078074][T26146] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2215.255267][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2215.277919][T26146] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2215.291483][T26146] usb 1-1: can't read configurations, error -61 [ 2215.455282][T26146] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2215.615732][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2215.626645][T26146] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2215.644443][T26146] usb 1-1: can't read configurations, error -61 [ 2215.661135][T26146] usb usb1-port1: attempt power cycle [ 2216.005246][T26146] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2216.045618][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2216.052078][T26146] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2216.060017][T26146] usb 1-1: can't read configurations, error -61 [ 2216.206995][T26146] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2216.255546][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2216.262006][T26146] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2216.271199][T26146] usb 1-1: can't read configurations, error -61 [ 2216.287825][T26146] usb usb1-port1: unable to enumerate USB device [ 2216.430687][T27487] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2216.487521][T27487] overlayfs: missing 'lowerdir' [ 2217.555416][T27523] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2217.570127][T27523] overlayfs: missing 'lowerdir' [ 2218.240226][T27577] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2218.295263][T27577] overlayfs: missing 'lowerdir' [ 2218.569742][T27590] binder: Bad value for 'max' [ 2219.057047][T27609] binder: Bad value for 'max' [ 2219.710225][T27663] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2219.774335][T27663] overlayfs: missing 'lowerdir' [ 2221.546819][T27706] binder: Bad value for 'max' [ 2222.516652][T27731] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2222.546803][T27731] overlayfs: missing 'lowerdir' [ 2222.933053][T27763] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2222.968343][T27763] overlayfs: missing 'lowerdir' [ 2223.293895][T27790] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2223.327573][T27790] overlayfs: missing 'lowerdir' [ 2223.945924][ T31] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2224.126014][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 2224.145875][ T31] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 2224.154107][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.194649][ T31] usb 2-1: config 0 has no interface number 0 [ 2224.206207][ T31] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2224.255210][ T31] usb 2-1: config 0 interface 200 has no altsetting 0 [ 2224.273646][ T31] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2224.285240][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.304395][ T31] usb 2-1: Product: syz [ 2224.311162][ T31] usb 2-1: Manufacturer: syz [ 2224.325973][ T31] usb 2-1: SerialNumber: syz [ 2224.344246][ T31] usb 2-1: config 0 descriptor?? [ 2224.567592][ T31] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 2224.588397][ T31] usb 2-1: USB disconnect, device number 94 [ 2225.191235][T27901] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2225.241258][T27901] overlayfs: missing 'lowerdir' [ 2225.342573][T27913] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2225.385329][T27913] overlayfs: missing 'lowerdir' [ 2225.494304][T27928] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2225.521402][T27928] overlayfs: missing 'lowerdir' [ 2225.610365][T27937] binder: Bad value for 'max' [ 2225.717231][T27948] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2225.771464][T27948] overlayfs: missing 'lowerdir' [ 2226.025252][ T31] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2226.205237][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 2226.216193][ T31] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 2226.241772][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2226.285251][ T31] usb 4-1: config 0 has no interface number 0 [ 2226.291485][ T31] usb 4-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2226.350358][ T31] usb 4-1: config 0 interface 200 has no altsetting 0 [ 2226.392088][ T31] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2226.402082][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.436614][ T31] usb 4-1: Product: syz [ 2226.451721][ T31] usb 4-1: Manufacturer: syz [ 2226.475205][ T31] usb 4-1: SerialNumber: syz [ 2226.485766][ T31] usb 4-1: config 0 descriptor?? [ 2226.493641][T27976] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2226.535558][T27976] overlayfs: missing 'lowerdir' [ 2226.737155][ T31] usbhid 4-1:0.200: couldn't find an input interrupt endpoint [ 2226.756588][ T31] usb 4-1: USB disconnect, device number 106 [ 2227.825349][T28031] binder: Bad value for 'max' [ 2229.245266][T28072] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2229.305373][T28072] overlayfs: missing 'lowerdir' [ 2230.346065][T28101] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2230.395258][T28101] overlayfs: missing 'lowerdir' [ 2231.255214][T26146] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2231.429038][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2231.474758][T26146] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2231.483222][T26146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2231.513659][T26146] usb 1-1: config 0 has no interface number 0 [ 2231.542349][T26146] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2231.587801][T26146] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2231.608996][T26146] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2231.618156][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.648436][T26146] usb 1-1: Product: syz [ 2231.652644][T26146] usb 1-1: Manufacturer: syz [ 2231.675214][T26146] usb 1-1: SerialNumber: syz [ 2231.693887][T26146] usb 1-1: config 0 descriptor?? [ 2231.913583][T26146] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2231.943066][T26146] usb 1-1: USB disconnect, device number 107 [ 2232.632994][T28198] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2232.645261][T28198] overlayfs: missing 'lowerdir' [ 2232.679647][T28202] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2232.701726][T28202] overlayfs: missing 'lowerdir' [ 2232.865267][T26146] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2233.025314][T26146] usb 1-1: Using ep0 maxpacket: 8 [ 2233.040773][T26146] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 2233.062713][T26146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.099295][T26146] usb 1-1: config 0 has no interface number 0 [ 2233.111888][T26146] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2233.139526][T26146] usb 1-1: config 0 interface 200 has no altsetting 0 [ 2233.165146][T26146] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 2233.184866][T26146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.207293][T26146] usb 1-1: Product: syz [ 2233.220284][T26146] usb 1-1: Manufacturer: syz [ 2233.229275][T26146] usb 1-1: SerialNumber: syz [ 2233.239525][T26146] usb 1-1: config 0 descriptor?? [ 2233.321012][T28270] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2233.333014][T28270] overlayfs: missing 'lowerdir' [ 2233.478945][T26146] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 2233.494591][T26146] usb 1-1: USB disconnect, device number 108 [ 2234.410051][T28353] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2234.434913][T28353] overlayfs: missing 'lowerdir' [ 2235.097975][T28403] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2235.140497][T28403] overlayfs: missing 'lowerdir' [ 2235.912725][T28432] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2235.964930][T28432] overlayfs: missing 'lowerdir' [ 2238.495036][T28494] binder: Bad value for 'max' [ 2238.906639][T28520] binder: Bad value for 'max' [ 2238.990265][T28524] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2239.027111][T28524] overlayfs: missing 'lowerdir' [ 2239.350797][T28547] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2239.405359][T28547] overlayfs: missing 'lowerdir' [ 2242.288863][T28680] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2242.356425][T28680] overlayfs: missing 'lowerdir' [ 2242.690696][T28712] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2242.742511][T28712] overlayfs: missing 'lowerdir' [ 2248.611130][T28963] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2248.648326][T28963] overlayfs: missing 'lowerdir' [ 2249.559053][T29023] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2249.573910][T29023] overlayfs: missing 'lowerdir' [ 2249.730402][T29039] overlayfs: overlapping lowerdir path [ 2249.964150][T29053] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2249.992836][T29053] overlayfs: missing 'lowerdir' [ 2250.734904][T29094] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2250.764482][T29096] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2250.780745][T29094] overlayfs: missing 'lowerdir' [ 2250.794094][T29096] overlayfs: missing 'lowerdir' [ 2250.837696][T29098] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2250.855007][T29100] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2250.877266][T29100] overlayfs: missing 'lowerdir' [ 2250.883248][T29098] overlayfs: missing 'lowerdir' [ 2250.928926][T29102] overlayfs: failed to resolve './file1/file0': -2 [ 2251.392389][T29120] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2251.445824][T29120] overlayfs: missing 'lowerdir' [ 2251.962323][T29163] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2252.001738][T29163] overlayfs: missing 'lowerdir' [ 2252.428985][T29188] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2252.485244][T29188] overlayfs: missing 'lowerdir' [ 2252.862956][T29204] overlayfs: failed to resolve './file1/file0': -2 [ 2253.086572][T29209] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2253.145239][T29209] overlayfs: missing 'lowerdir' [ 2254.320946][T29260] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2254.357732][T29260] overlayfs: missing 'lowerdir' [ 2255.567860][T29296] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2255.599464][T29296] overlayfs: missing 'lowerdir' [ 2256.728698][T29339] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2256.755320][T29339] overlayfs: missing 'lowerdir' [ 2257.607237][T29353] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2257.663513][T29353] overlayfs: missing 'lowerdir' [ 2258.038913][T29365] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2258.076818][T29365] overlayfs: missing 'lowerdir' [ 2258.126926][T29369] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2258.165218][T29369] overlayfs: missing 'lowerdir' [ 2261.247209][T29440] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2261.278338][T29440] overlayfs: missing 'lowerdir' [ 2261.498280][T29457] binder: Bad value for 'max' [ 2261.695775][T29462] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2261.745235][T29462] overlayfs: missing 'lowerdir' [ 2261.835615][T29466] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2261.895198][T29466] overlayfs: missing 'lowerdir' [ 2263.350430][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59942'. [ 2263.382219][T29517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59942'. [ 2263.432539][T29517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59942'. [ 2263.597924][ T36] audit: type=1400 audit(1763144731.065:1424): avc: denied { nlmsg_write } for pid=29543 comm="syz.3.59970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2264.115166][ T36] audit: type=1400 audit(1763144731.575:1425): avc: denied { setopt } for pid=29609 comm="syz.1.59999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2264.115275][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59999'. [ 2264.222611][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59999'. [ 2264.455200][ T31] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2264.540610][T29644] netlink: 'syz.0.60014': attribute type 6 has an invalid length. [ 2264.615190][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 2264.627948][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2264.649910][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2264.675002][ T31] usb 4-1: config 0 has no interfaces? [ 2264.695062][ T31] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 2264.720795][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.748087][ T31] usb 4-1: Product: syz [ 2264.775303][ T31] usb 4-1: Manufacturer: syz [ 2264.779923][ T31] usb 4-1: SerialNumber: syz [ 2264.799329][ T31] usb 4-1: config 0 descriptor?? [ 2264.924006][T29672] bridge0: entered allmulticast mode [ 2264.939451][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60027'. [ 2264.968835][T29672] bridge_slave_1: left allmulticast mode [ 2264.974498][T29672] bridge_slave_1: left promiscuous mode [ 2264.984654][ T36] audit: type=1400 audit(1763144732.445:1426): avc: denied { execute_no_trans } for pid=29677 comm="syz.0.60030" path="/224/file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2265.007344][ T31] usb 4-1: USB disconnect, device number 107 [ 2265.017322][T29672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2265.041127][T29672] bridge_slave_0: left allmulticast mode [ 2265.057016][T29672] bridge_slave_0: left promiscuous mode [ 2265.082678][T29672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.110402][T29672] bridge0 (unregistering): left allmulticast mode [ 2265.326804][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60049'. [ 2265.405237][ T7335] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2265.575871][ T7335] usb 1-1: Using ep0 maxpacket: 32 [ 2265.592633][ T7335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2265.620608][ T7335] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2265.646983][ T7335] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2265.675315][ T7335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2265.709581][T29745] IPv6: NLM_F_CREATE should be specified when creating new route [ 2265.724320][ T7335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2265.740233][ T7335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.761646][ T7335] usb 1-1: Product: syz [ 2265.770846][ T7335] usb 1-1: Manufacturer: syz [ 2265.787673][ T7335] usb 1-1: SerialNumber: syz [ 2265.937116][T29762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:985 [ 2265.965538][ T36] audit: type=1400 audit(1763144733.435:1427): avc: denied { sqpoll } for pid=29763 comm="syz.3.60071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2266.008680][ T7335] usb 1-1: 0:2 : does not exist [ 2266.034875][ T7335] usb 1-1: USB disconnect, device number 109 [ 2266.111227][T29775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60076'. [ 2266.125618][T29775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60076'. [ 2266.422341][T29802] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.429477][T29802] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.437094][T29802] bridge_slave_0: entered allmulticast mode [ 2266.443603][T29802] bridge_slave_0: entered promiscuous mode [ 2266.450978][T29802] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.458950][T29802] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.466407][T29802] bridge_slave_1: entered allmulticast mode [ 2266.472921][T29802] bridge_slave_1: entered promiscuous mode [ 2266.534071][T29817] can0: slcan on ttyS3. [ 2266.609723][T29815] can0 (unregistered): slcan off ttyS3. [ 2266.630425][T29802] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.637631][T29802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.645511][T29802] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.652574][T29802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.725445][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.746074][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.758096][T26412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.765375][T26412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.801440][T26412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.808636][T26412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.837022][T29802] veth0_vlan: entered promiscuous mode [ 2266.854997][T29802] veth1_macvtap: entered promiscuous mode [ 2267.230955][T29916] GUP no longer grows the stack in syz.2.60124 (29916): 200000005000-200000008000 (200000004000) [ 2267.266202][T29916] CPU: 1 UID: 0 PID: 29916 Comm: syz.2.60124 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2267.266248][T29916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2267.266262][T29916] Call Trace: [ 2267.266269][T29916] [ 2267.266277][T29916] __dump_stack+0x21/0x30 [ 2267.266309][T29916] dump_stack_lvl+0x10c/0x190 [ 2267.266335][T29916] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2267.266361][T29916] ? futex_lock_pi_atomic+0xdd/0xc70 [ 2267.266388][T29916] dump_stack+0x19/0x20 [ 2267.266413][T29916] fixup_user_fault+0x63d/0x6d0 [ 2267.266437][T29916] fault_in_user_writeable+0x76/0xe0 [ 2267.266455][T29916] futex_lock_pi+0x258/0xa10 [ 2267.266479][T29916] ? __cfi_futex_lock_pi+0x10/0x10 [ 2267.266502][T29916] ? __kasan_check_write+0x18/0x20 [ 2267.266530][T29916] ? wake_up_q+0x10f/0x1c0 [ 2267.266560][T29916] ? __cfi_futex_wake_mark+0x10/0x10 [ 2267.266589][T29916] ? mas_find+0x358/0x5f0 [ 2267.266608][T29916] ? __kasan_check_write+0x18/0x20 [ 2267.266644][T29916] do_futex+0x25c/0x500 [ 2267.266663][T29916] ? __cfi_do_futex+0x10/0x10 [ 2267.266682][T29916] ? __vm_munmap+0x2c7/0x370 [ 2267.266702][T29916] __se_sys_futex+0x28f/0x300 [ 2267.266723][T29916] ? __x64_sys_futex+0x110/0x110 [ 2267.266743][T29916] ? __kasan_check_write+0x18/0x20 [ 2267.266772][T29916] __x64_sys_futex+0xe9/0x110 [ 2267.266792][T29916] x64_sys_call+0x227f/0x2ee0 [ 2267.266820][T29916] do_syscall_64+0x58/0xf0 [ 2267.266845][T29916] ? clear_bhb_loop+0x50/0xa0 [ 2267.266866][T29916] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2267.266886][T29916] RIP: 0033:0x7fb70d58f6c9 [ 2267.266903][T29916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2267.266919][T29916] RSP: 002b:00007fb70e379038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2267.266940][T29916] RAX: ffffffffffffffda RBX: 00007fb70d7e5fa0 RCX: 00007fb70d58f6c9 [ 2267.266955][T29916] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 2267.266968][T29916] RBP: 00007fb70d611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2267.266980][T29916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2267.266993][T29916] R13: 00007fb70d7e6038 R14: 00007fb70d7e5fa0 R15: 00007ffc3b8efe88 [ 2267.267009][T29916] [ 2267.268323][T26412] tipc: Subscription rejected, illegal request [ 2268.385224][T26146] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2268.445129][T30007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30007 comm=syz.1.60165 [ 2268.561765][T30020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2268.586344][T26146] usb 4-1: Using ep0 maxpacket: 8 [ 2268.601079][T26146] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2268.613307][T26146] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2268.639122][T30026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=30026 comm=syz.2.60176 [ 2268.660280][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2268.689958][T26146] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2268.731887][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2268.765562][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2268.793848][T26146] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2268.835211][T26146] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2268.853689][T26146] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2268.865232][T26146] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2268.905237][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2268.925352][T26146] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2268.947734][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2268.959678][ T31] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2268.972088][T30043] bridge0: port 1(bridge_slave_0) entered blocking state [ 2268.979375][T30043] bridge0: port 1(bridge_slave_0) entered disabled state [ 2268.986582][T30043] bridge_slave_0: entered allmulticast mode [ 2268.993088][T30043] bridge_slave_0: entered promiscuous mode [ 2268.999876][T30043] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.007157][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2269.007815][T30043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.025913][T30043] bridge_slave_1: entered allmulticast mode [ 2269.032392][T30043] bridge_slave_1: entered promiscuous mode [ 2269.042127][T26146] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2269.069971][T26146] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2269.078027][T26146] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2269.089644][T26146] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2269.110750][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2269.128593][T26146] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2269.148146][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 2269.159798][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2269.170745][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2269.185380][T26146] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2269.193524][T30043] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.197338][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2269.204418][T30043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.215491][T26146] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2269.222202][T30043] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.235843][ T31] usb 3-1: config 0 has no interfaces? [ 2269.242674][T30043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.262721][T26146] usb 4-1: config 168 interface 0 has no altsetting 0 [ 2269.271117][ T31] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 0.01 [ 2269.285937][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.288351][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.302475][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.311388][T26146] usb 4-1: string descriptor 0 read error: -22 [ 2269.318766][T26146] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2269.322805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.331897][ T31] usb 3-1: Product: syz [ 2269.335624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.344414][T26146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.357484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.358758][ T31] usb 3-1: Manufacturer: syz [ 2269.364551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.376626][ T31] usb 3-1: SerialNumber: syz [ 2269.392515][ T31] usb 3-1: config 0 descriptor?? [ 2269.418301][T30043] veth0_vlan: entered promiscuous mode [ 2269.432572][T30043] veth1_macvtap: entered promiscuous mode [ 2269.587631][ T31] usb 4-1: USB disconnect, device number 108 [ 2269.603797][ T7335] usb 3-1: USB disconnect, device number 97 [ 2269.633025][T30090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60202'. [ 2269.652729][T30090] netlink: 32 bytes leftover after parsing attributes in process `syz.1.60202'. [ 2269.672222][T30093] netlink: 'syz.0.60203': attribute type 2 has an invalid length. [ 2269.687243][T30093] netlink: 1 bytes leftover after parsing attributes in process `syz.0.60203'. [ 2270.581376][T30206] syzkaller0: entered promiscuous mode [ 2270.596541][T30206] syzkaller0: entered allmulticast mode [ 2271.172676][T30257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2271.395233][ T31] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2271.467187][T30272] lo: entered allmulticast mode [ 2271.472803][T30271] lo: left allmulticast mode [ 2271.546556][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2271.587582][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2271.608655][T30286] netlink: 44 bytes leftover after parsing attributes in process `syz.1.60293'. [ 2271.633614][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2271.645026][T30286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60293'. [ 2271.675197][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2271.689906][T30286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60293'. [ 2271.724857][ T31] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2271.763235][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.793899][ T31] usb 4-1: config 0 descriptor?? [ 2271.814344][T30258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2272.247695][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.275879][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.303674][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.323263][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.351091][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.373715][ T31] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 2272.402879][ T31] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 2272.416919][ T31] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2272.506090][T25547] usb 4-1: USB disconnect, device number 109 [ 2273.259581][T30454] fuse: Unknown parameter '0x0000000000000005' [ 2274.274365][T30524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60405'. [ 2274.728908][T30539] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 2275.115253][T30594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60440'. [ 2275.146918][T30594] netlink: 32 bytes leftover after parsing attributes in process `syz.2.60440'. [ 2276.143313][T30658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2277.106252][T30705] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2277.380963][T30726] tipc: Failed to remove unknown binding: 66,1,1/0:2751335277/2751335279 [ 2277.432094][T30726] tipc: Failed to remove unknown binding: 66,1,1/0:2751335277/2751335279 [ 2277.470763][T30726] tipc: Failed to remove unknown binding: 66,1,1/0:2751335277/2751335279 [ 2277.573500][T30741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 2277.854599][T30761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 2278.712425][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60550'. [ 2278.946141][ T36] audit: type=1400 audit(1763144746.415:1428): avc: denied { mount } for pid=30849 comm="syz.2.60561" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2279.814552][T30895] loop5: detected capacity change from 0 to 7 [ 2282.705264][T30996] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 2282.743867][T30996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:810 [ 2283.332623][T31038] tc_dump_action: action bad kind [ 2283.477896][T31046] netlink: 'syz.3.60654': attribute type 4 has an invalid length. [ 2283.588716][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60659'. [ 2283.837063][T31074] kvm: emulating exchange as write [ 2284.016497][T31078] IPv6: NLM_F_CREATE should be specified when creating new route [ 2284.655554][ T36] audit: type=1400 audit(1763144752.125:1429): avc: denied { read } for pid=31119 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: [ 2285.090493][T31135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) Stopping network: [ 2285.335177][ T36] audit: type=1400 audit(1763144752.795:1430): avc: denied { read write } for pid=31155 comm="ip" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 2285.409535][ T36] audit: type=1400 audit(1763144752.845:1431): avc: denied { unlink } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 2285.445755][T31163] Dead loop on virtual device ip6_vti0, fix it urgently! OK Stopping iptables: [ 2285.489447][ T36] audit: type=1400 audit(1763144752.955:1432): avc: denied { read write } for pid=31166 comm="iptables" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK [ 2285.528106][ T36] audit: type=1400 audit(1763144752.985:1433): avc: denied { search } for pid=31166 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping system message bus: [ 2285.563303][ T36] audit: type=1400 audit(1763144752.985:1434): avc: denied { write } for pid=31166 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2285.605202][ T36] audit: type=1400 audit(1763144752.985:1435): avc: denied { add_name } for pid=31166 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2285.655189][ T36] audit: type=1400 audit(1763144752.985:1436): avc: denied { create } for pid=31166 comm="iptables" name="xtables.lock" scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 done [ 2285.695189][ T36] audit: type=1400 audit(1763144752.985:1437): avc: denied { read open } for pid=31166 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=20393 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2285.745184][ T36] audit: type=1400 audit(1763144752.985:1438): avc: denied { lock } for pid=31166 comm="iptables" path="/run/xtables.lock" dev="tmpfs" ino=20393 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 killall: can't kill pid 23260: No such process killall: can't kill pid 23261: No such process killall: can't kill pid 23550: No such process killall: can't kill pid 23838: No such process Stopping klogd: OK Stopping acpid: [ 2286.617194][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60715'. [ 2286.984227][T31239] IPv6: NLM_F_CREATE should be specified when creating new route OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK umount: can't remount debugfs read-only [ 2287.280608][T31266] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.135 closed by remote host. [ 2287.341458][T31272] netlink: 56 bytes leftover after parsing attributes in process `syz.3.60737'. [ 2287.716846][T26412] bridge_slave_1: left allmulticast mode [ 2287.723067][T26412] bridge_slave_1: left promiscuous mode [ 2287.729247][T26412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2287.737971][T26412] bridge_slave_0: left allmulticast mode [ 2287.743659][T26412] bridge_slave_0: left promiscuous mode [ 2287.750013][T26412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.859287][T26412] veth1_macvtap: left promiscuous mode [ 2287.864821][T26412] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 2289.429738][T31273] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2289.437223][T31273] ACPI: PM: Preparing to enter system sleep state S5 [ 2289.444648][T31273] kvm: exiting hardware virtualization [ 2289.450438][T31273] reboot: Power down serialport: VM disconnected.