last executing test programs: 12m38.196290884s ago: executing program 1 (id=9137): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m37.739364253s ago: executing program 1 (id=9144): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000680)=ANY=[]) 12m37.660073066s ago: executing program 1 (id=9145): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0xd000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x31, 0x19}, {0x0, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0x9b}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x8, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xf000, 0xd, 0x6, 0x4, 0x1, 0x5, 0xff, 0x5, 0x6, 0xe, 0x8}, {0x4000, 0xf000, 0xa, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xd, 0xa0, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x45, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x10000, 0x7}, 0x80000031, 0x0, 0x3a3b3ab813f3ab01, 0x2024, 0xc, 0x10800, 0x4000, [0x6800000000000000, 0x4, 0x5e, 0x3]}) 12m37.555405671s ago: executing program 1 (id=9147): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) 12m37.498986574s ago: executing program 1 (id=9148): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500), 0x0, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000540)={'syz0\x00', {0xd25e, 0x9, 0x3, 0x453e}, 0x2a, [0x9, 0xf8, 0xc, 0x181fe10b, 0x5, 0x40, 0x249, 0x7, 0x5, 0x7, 0x4, 0x81, 0xd, 0x5, 0x396, 0x5, 0x1, 0x2, 0x0, 0x1, 0x3, 0x40, 0x800, 0x9, 0x6, 0x1, 0xc00, 0x8, 0x7, 0xa, 0x9, 0x2, 0x10, 0xfffffffc, 0x3, 0x2, 0x800, 0x0, 0x80000000, 0x1, 0x2, 0x6, 0xfff, 0x5, 0x1, 0x4, 0xffffffff, 0xfffffff9, 0x9, 0x3, 0x6, 0x10001, 0xaa0, 0x80000001, 0x7, 0x820, 0x1, 0x3ff, 0x6, 0x8, 0x1, 0x3, 0x8000, 0x97], [0x9, 0x28c2, 0x6e, 0x1000, 0xd, 0x7, 0xe775, 0x2, 0x1, 0x1b, 0x3, 0xffffffc0, 0x8, 0x0, 0x4, 0xffffffca, 0x7fffffff, 0x8, 0x7ff, 0x8, 0x5, 0xfffffffb, 0x101, 0x2, 0x6, 0x8, 0x3, 0x9, 0x1000, 0x9f0, 0x81d, 0x60, 0x4, 0x1000, 0x3, 0xfff, 0x3, 0x3, 0x2, 0x1000, 0xcf5b, 0x2, 0xd, 0x3, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1a47, 0x4, 0x8, 0x4, 0x1751, 0x5, 0x7b, 0x9, 0x3, 0x8, 0x4, 0x6, 0xffffffff, 0x200, 0x7], [0x8, 0x6, 0x1, 0x2, 0x9, 0xc, 0x5, 0x6, 0xfff, 0x3, 0x8, 0x1000, 0x3, 0x9, 0x4, 0x1000, 0xfffffffb, 0x54379595, 0x9, 0xb, 0x7ec, 0x0, 0xb3, 0x4, 0x6, 0x3, 0x6, 0x4, 0x800, 0x7, 0x800000, 0x6, 0x2, 0x9, 0x2, 0x4, 0x2, 0xffff, 0x6, 0x8, 0x3, 0xc65, 0xaa, 0x3, 0x6, 0x2, 0x8001, 0x2, 0xd, 0x1, 0x4, 0x0, 0x75a, 0x5, 0x4, 0x7, 0x6, 0x4, 0x4, 0x8, 0x2, 0xa3a7, 0x4], [0x1000, 0xfffffff8, 0xfffffff9, 0x4, 0x80, 0xfffffffc, 0x2, 0x0, 0x4, 0x3, 0x4, 0x10000, 0x2, 0x81, 0x1, 0x4, 0x793, 0x7fff, 0x2, 0x9, 0x163, 0x0, 0x8, 0x3, 0x7, 0x3, 0x8, 0x0, 0x7, 0x4, 0x10, 0xe8, 0x183, 0x0, 0x4, 0x2, 0x6, 0x48c9, 0x80000000, 0x4, 0x8, 0x2, 0x2, 0x3, 0x2, 0x0, 0x0, 0xf, 0x0, 0x3, 0x800, 0x3ff, 0x7fffffff, 0x9e0, 0xffffffff, 0x6, 0x0, 0x10000, 0x8, 0x5, 0x3, 0x9, 0x2, 0x9]}, 0x45c) 12m37.498618224s ago: executing program 1 (id=9149): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x7, 0x3, 0x0, 0x15bd8ee4, 0xe}) 12m34.349357078s ago: executing program 0 (id=9238): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 12m34.324076658s ago: executing program 0 (id=9248): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000000206030000000000000000000000000005000100070000000900020073797a31000000000c0007800800124000000000050005000200000005000400000000000c000300686173683a69"], 0x50}}, 0x0) 12m34.268660501s ago: executing program 0 (id=9252): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x308}}], 0x1, 0x10000814) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000080)={[0xf000, 0x3000, 0x4, 0xeeef0000], 0x7fffffffffffffff, 0xc0}) 12m34.070731399s ago: executing program 0 (id=9259): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12m34.034919131s ago: executing program 0 (id=9261): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 12m33.946984144s ago: executing program 0 (id=9266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) 12m33.893752617s ago: executing program 32 (id=9266): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) 12m22.362526957s ago: executing program 33 (id=9149): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x7, 0x3, 0x0, 0x15bd8ee4, 0xe}) 25.406928399s ago: executing program 4 (id=30094): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) 25.406494969s ago: executing program 4 (id=30095): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/42, 0x2a) getdents64(r1, 0xfffffffffffffffe, 0xff80) 25.363451041s ago: executing program 4 (id=30096): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0xfcee) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x2, 0x3, 0xff) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 25.363071611s ago: executing program 4 (id=30098): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00') 25.309649263s ago: executing program 4 (id=30100): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 25.252058115s ago: executing program 4 (id=30104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 25.218792877s ago: executing program 34 (id=30104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.105675007s ago: executing program 6 (id=30547): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r2) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4040841) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x1ff, r3, &(0x7f00000001c0), 0x0, 0x6e8, 0x0, 0x1, r5}]) 7.008292251s ago: executing program 6 (id=30548): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) 7.008056192s ago: executing program 6 (id=30549): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x80, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 3.7491769s ago: executing program 6 (id=30607): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x4, 0xb6c, &(0x7f0000000100)="1a65", 0x0, 0x2}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.379340716s ago: executing program 6 (id=30609): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0xb7, &(0x7f00000001c0)="d28f7fbb774b0de98bb0fa7b34a38a63762953bab45e02911ec4e3ba1aaac5ef35232c0e12e3f4feb89cf5f8c0af3cb9239b53f28fe9d7739e27482bf6fa8ba008f5091c7cf3272fc9b4379c5583a02e8f98201d1a75b4439d28e7a0be22427596bd13bb07f86c4f9ac8ae75b80d21ca518bd682bf05784646e6e71cd83bc05abf8a5e16c03aad3cda952e2937156ebcf7134b9860b33bb1b5ff1ef9999c17e2b2088a2baf739aa758844b30dfd0fa6e05b72444e60917"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000000c0)={@local, 0x23, r8}) 3.220351623s ago: executing program 6 (id=30615): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040000) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x80, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) 2.323710951s ago: executing program 2 (id=30620): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 2.322532751s ago: executing program 5 (id=30621): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x3f, 0x0}}], 0x1, 0x4000051) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) 2.298131792s ago: executing program 2 (id=30622): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x9b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201da22000000086b1d0101400001020301090289000301f580040904000000010120000a240107000e020102072408020500090c2402020002220106007f3309040100000102000009"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 1.069396864s ago: executing program 5 (id=30636): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) 1.049664615s ago: executing program 5 (id=30637): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000001100)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x10000, 0x4) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 1.002253937s ago: executing program 2 (id=30640): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 892.236932ms ago: executing program 3 (id=30643): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) 560.259486ms ago: executing program 3 (id=30644): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8) 217.64662ms ago: executing program 3 (id=30645): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) sendmsg$sock(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x0) 127.007245ms ago: executing program 5 (id=30646): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500), 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 76.889846ms ago: executing program 3 (id=30647): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) 76.641146ms ago: executing program 2 (id=30648): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) 76.460297ms ago: executing program 5 (id=30649): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x84022, 0x0) 58.967587ms ago: executing program 3 (id=30650): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x47, 0x0, &(0x7f0000000200)="8b500200cd864231b996623c8df2e03839b8dfb0d7865c6fefe39ea389c7aa220de978dcab534586578e40fae0a3789b088ab8b56d769cd2cade8a2938a4cfd98b310000000000"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 37.034198ms ago: executing program 5 (id=30651): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x3f, 0x0}}], 0x1, 0x4000051) syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) 36.632588ms ago: executing program 2 (id=30652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000880)={0x7, {{0xa, 0x4e21, 0x3, @mcast1}}, 0x1, 0x8, [{{0xa, 0x4e22, 0xaeb2, @private1, 0x7}}, {{0xa, 0x4e21, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e24, 0xf, @loopback, 0x7e}}, {{0xa, 0x4e20, 0x7, @loopback, 0x2}}, {{0xa, 0x4e20, 0x40000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {{0xa, 0x4e23, 0x3, @mcast1}}, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}, {{0xa, 0x4e24, 0x2, @empty, 0x942}}]}, 0x490) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 36.344858ms ago: executing program 3 (id=30653): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x1) fchdir(r5) open(&(0x7f0000000180)='.\x00', 0x44080, 0x1a8) 0s ago: executing program 2 (id=30654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x3e, &(0x7f00002cef88), 0x0) sendto$inet6(r5, &(0x7f0000001100)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000100)=0x10000, 0x4) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) kernel console output (not intermixed with test programs): 72.287987][T22857] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.304052][T22857] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.311158][T22857] bridge_slave_1: entered allmulticast mode [ 972.336187][T22857] bridge_slave_1: entered promiscuous mode [ 972.355792][T20709] bridge_slave_1: left allmulticast mode [ 972.362131][T20709] bridge_slave_1: left promiscuous mode [ 972.371470][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.384554][T20709] bridge_slave_0: left allmulticast mode [ 972.393030][T20709] bridge_slave_0: left promiscuous mode [ 972.400109][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.525850][T20709] veth1_macvtap: left promiscuous mode [ 972.531750][T20709] veth0_vlan: left promiscuous mode [ 972.571786][ T36] audit: type=1400 audit(1763543025.890:9412): avc: denied { watch watch_reads } for pid=22893 comm="syz.4.26176" path="/file1" dev="ramfs" ino=422534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 972.585959][T20709] veth0_to_batadv (unregistering): left allmulticast mode [ 972.634095][ T36] audit: type=1400 audit(1763543025.920:9413): avc: denied { execute_no_trans } for pid=22893 comm="syz.4.26176" path="/file0" dev="ramfs" ino=422533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 972.704852][T22857] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.712043][T22857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.719393][T22857] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.726464][T22857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.753274][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.756630][T22915] futex_wake_op: syz.3.26182 tries to shift op by -1; fix this program [ 972.768945][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.780385][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.787479][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.804456][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.811546][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.841010][T22857] veth0_vlan: entered promiscuous mode [ 972.856938][T22857] veth1_macvtap: entered promiscuous mode [ 973.049378][T22934] futex_wake_op: syz.4.26190 tries to shift op by -1; fix this program [ 973.745976][T22944] fuse: Unknown parameter 'user_id00000000000000000000' [ 973.915515][T22952] futex_wake_op: syz.2.26199 tries to shift op by -1; fix this program [ 973.974826][T22954] 9pnet_fd: Insufficient options for proto=fd [ 974.254073][ T858] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 974.275923][T22960] rust_binder: 238: no such ref 2 [ 974.297374][T22962] fuse: Bad value for 'fd' [ 974.404063][ T858] usb 3-1: Using ep0 maxpacket: 16 [ 974.411557][ T858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.422597][ T858] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 974.442862][ T858] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 974.474822][ T858] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.483909][ T858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 974.501565][ T858] usb 3-1: SerialNumber: syz [ 974.515587][T22956] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 974.526621][ T858] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 974.554203][ T453] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 974.556209][T22981] fuse: Bad value for 'fd' [ 974.604164][ T36] audit: type=1326 audit(1763543027.920:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.3.26217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57378f6c9 code=0x7ffc0000 [ 974.628132][ T36] audit: type=1326 audit(1763543027.930:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.3.26217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57378f6c9 code=0x7ffc0000 [ 974.659305][ T36] audit: type=1326 audit(1763543027.950:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.3.26217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff57378f6c9 code=0x7ffc0000 [ 974.685567][ T36] audit: type=1326 audit(1763543027.950:9417): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.3.26217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57378f6c9 code=0x7ffc0000 [ 974.710054][ T36] audit: type=1326 audit(1763543027.950:9418): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22988 comm="syz.3.26217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57378f6c9 code=0x7ffc0000 [ 974.715243][ T453] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 974.756406][ T858] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 974.767938][ T858] usb 3-1: USB disconnect, device number 50 [ 974.794863][ T453] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 974.814590][ T453] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 974.829285][ T453] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 974.845382][ T453] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 974.864169][ T453] usb 5-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 974.877109][ T453] usb 5-1: string descriptor 0 read error: -22 [ 974.883356][ T453] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 974.892514][ T453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.910767][ T36] audit: type=1400 audit(1763543028.230:9419): avc: denied { create } for pid=22998 comm="syz.3.26222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 974.962400][T23001] fuse: Bad value for 'fd' [ 975.124940][ T858] usb 5-1: USB disconnect, device number 51 [ 975.247790][ T36] audit: type=1400 audit(1763543028.560:9420): avc: denied { name_bind } for pid=23031 comm="syz.3.26239" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 975.412927][T23063] futex_wake_op: syz.2.26253 tries to shift op by -1; fix this program [ 975.415462][ T36] audit: type=1400 audit(1763543028.740:9421): avc: denied { create } for pid=23064 comm="syz.5.26254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 975.588143][T23088] futex_wake_op: syz.5.26265 tries to shift op by -1; fix this program [ 975.879307][T23115] futex_wake_op: syz.4.26276 tries to shift op by -1; fix this program [ 977.696795][ T36] audit: type=1400 audit(1763543031.020:9422): avc: denied { setattr } for pid=23236 comm="syz.5.26327" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 978.085373][T23257] futex_wake_op: syz.4.26345 tries to shift op by -1; fix this program [ 978.623660][T23282] futex_wake_op: syz.5.26357 tries to shift op by -1; fix this program [ 981.364093][ T330] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 981.525133][ T330] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 981.525942][T23384] netlink: 112 bytes leftover after parsing attributes in process `syz.2.26407'. [ 981.544095][ T330] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 981.575356][ T330] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.604072][ T330] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 981.623646][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.644567][T23347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 981.654113][ T330] usb 4-1: invalid MIDI out EP 0 [ 981.680597][ T330] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 981.862053][ T4647] usb 4-1: USB disconnect, device number 66 [ 982.399575][T23418] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 982.424146][ T36] audit: type=1400 audit(1763543035.740:9423): avc: denied { relabelto } for pid=23417 comm="syz.5.26423" name="524" dev="tmpfs" ino=3213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 982.483069][ T36] audit: type=1400 audit(1763543035.740:9424): avc: denied { associate } for pid=23417 comm="syz.5.26423" name="524" dev="tmpfs" ino=3213 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 982.554058][ T36] audit: type=1400 audit(1763543035.750:9425): avc: denied { write } for pid=23417 comm="syz.5.26423" name="524" dev="tmpfs" ino=3213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 982.614201][ T36] audit: type=1400 audit(1763543035.750:9426): avc: denied { add_name } for pid=23417 comm="syz.5.26423" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 982.663272][ T36] audit: type=1400 audit(1763543035.750:9427): avc: denied { create } for pid=23417 comm="syz.5.26423" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.728746][ T36] audit: type=1400 audit(1763543035.750:9428): avc: denied { associate } for pid=23417 comm="syz.5.26423" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 982.774054][ T36] audit: type=1400 audit(1763543035.750:9429): avc: denied { read append open } for pid=23417 comm="syz.5.26423" path="/524/cpuacct.usage_percpu" dev="tmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.824081][ T36] audit: type=1400 audit(1763543035.780:9430): avc: denied { remove_name } for pid=19297 comm="syz-executor" name="cpuacct.usage_percpu" dev="tmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 982.863023][T23440] tmpfs: Bad value for 'nr_blocks' [ 982.885243][ T36] audit: type=1400 audit(1763543035.780:9431): avc: denied { unlink } for pid=19297 comm="syz-executor" name="cpuacct.usage_percpu" dev="tmpfs" ino=3219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 982.910588][ T36] audit: type=1400 audit(1763543035.780:9432): avc: denied { rmdir } for pid=19297 comm="syz-executor" name="524" dev="tmpfs" ino=3213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 983.504064][ T9] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 983.655149][ T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 983.663787][ T9] usb 4-1: config 0 has no interface number 0 [ 983.672594][ T9] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 983.690316][ T9] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 63147, setting to 64 [ 983.703063][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 983.712333][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.724675][ T9] usb 4-1: Product: syz [ 983.728866][ T9] usb 4-1: Manufacturer: syz [ 983.733481][ T9] usb 4-1: SerialNumber: syz [ 983.739275][ T9] usb 4-1: config 0 descriptor?? [ 983.744538][T23459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 983.751743][T23459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 983.924094][ T858] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 983.970090][ T330] usb 4-1: USB disconnect, device number 67 [ 984.094070][ T858] usb 3-1: Using ep0 maxpacket: 8 [ 984.100243][ T858] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 984.110699][ T858] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 984.120009][ T858] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 984.129309][ T858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.284082][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 984.346314][ T858] usb 3-1: USB disconnect, device number 51 [ 984.434092][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 984.440484][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 984.449901][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.458910][ T9] usb 5-1: config 0 descriptor?? [ 984.671282][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 984.677634][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 984.693275][ T9] usb 5-1: USB disconnect, device number 52 [ 985.068065][T23555] loop5: detected capacity change from 0 to 7 [ 986.239285][ T62] bridge_slave_1: left allmulticast mode [ 986.245156][ T62] bridge_slave_1: left promiscuous mode [ 986.250793][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.259878][ T62] bridge_slave_0: left allmulticast mode [ 986.265641][ T62] bridge_slave_0: left promiscuous mode [ 986.271274][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.380455][T23632] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.387608][T23632] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.397695][T23632] bridge_slave_0: entered allmulticast mode [ 986.412779][T23632] bridge_slave_0: entered promiscuous mode [ 986.427502][T23632] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.434641][T23632] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.441711][T23632] bridge_slave_1: entered allmulticast mode [ 986.448941][T23632] bridge_slave_1: entered promiscuous mode [ 986.496172][ T62] veth1_macvtap: left promiscuous mode [ 986.501709][ T62] veth0_vlan: left promiscuous mode [ 986.662936][T23632] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.670103][T23632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.677439][T23632] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.684497][T23632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.705801][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.713237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.735489][T20709] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.742544][T20709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.758207][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.765281][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.818358][T23632] veth0_vlan: entered promiscuous mode [ 986.830814][T23632] veth1_macvtap: entered promiscuous mode [ 986.874661][ T45] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 987.045392][ T45] usb 6-1: config 0 has an invalid interface number: 72 but max is 0 [ 987.053811][ T45] usb 6-1: config 0 has no interface number 0 [ 987.061440][ T45] usb 6-1: config 0 interface 72 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 987.079460][ T45] usb 6-1: New USB device found, idVendor=0846, idProduct=9043, bcdDevice=a5.7c [ 987.156713][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.164911][ T45] usb 6-1: Product: syz [ 987.169264][ T45] usb 6-1: Manufacturer: syz [ 987.173872][ T45] usb 6-1: SerialNumber: syz [ 987.179561][ T45] usb 6-1: config 0 descriptor?? [ 987.410563][ T45] usb 6-1: USB disconnect, device number 45 [ 988.574106][ T45] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 988.740527][ T45] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 988.764047][ T45] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 988.775353][ T45] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 988.792570][ T45] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 988.806272][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.818426][T23787] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.828199][ T45] usb 6-1: invalid MIDI out EP 0 [ 988.851054][ T45] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 988.863423][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 989.028414][ T45] usb 6-1: USB disconnect, device number 46 [ 989.792701][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 989.792722][ T36] audit: type=1326 audit(1763543043.110:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.864967][ T36] audit: type=1326 audit(1763543043.140:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.889019][ T36] audit: type=1326 audit(1763543043.140:9439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.921936][ T36] audit: type=1326 audit(1763543043.140:9440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.947097][ T36] audit: type=1326 audit(1763543043.150:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.971400][ T36] audit: type=1326 audit(1763543043.150:9442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 989.995623][ T36] audit: type=1326 audit(1763543043.150:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 990.019937][ T36] audit: type=1326 audit(1763543043.150:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 990.043999][ T36] audit: type=1326 audit(1763543043.150:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 990.067952][ T36] audit: type=1326 audit(1763543043.150:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23868 comm="syz.5.26634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1eb18f6c9 code=0x7ffc0000 [ 990.110111][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26639'. [ 990.234074][T21734] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 990.394066][T21734] usb 5-1: Using ep0 maxpacket: 16 [ 990.404767][T21734] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 990.412966][T21734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.444058][T21734] usb 5-1: config 0 has no interface number 0 [ 990.450189][T21734] usb 5-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 990.474069][T21734] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.495457][T21734] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 990.504705][T21734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.512709][T21734] usb 5-1: Product: syz [ 990.534043][T21734] usb 5-1: Manufacturer: syz [ 990.538680][T21734] usb 5-1: SerialNumber: syz [ 990.554160][T21734] usb 5-1: config 0 descriptor?? [ 990.559445][T23877] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 990.568753][T21734] net1080 5-1:0.147: probe with driver net1080 failed with error -22 [ 990.769415][ T9] usb 5-1: USB disconnect, device number 53 [ 991.476555][ T330] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 991.659305][ T330] usb 6-1: Using ep0 maxpacket: 8 [ 991.679068][ T330] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 991.704077][ T330] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 991.723462][ T330] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 991.723607][T23953] futex_wake_op: syz.2.26674 tries to shift op by -1; fix this program [ 991.740894][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.965630][ T330] usb 6-1: USB disconnect, device number 47 [ 992.364778][T23972] futex_wake_op: syz.4.26683 tries to shift op by -1; fix this program [ 992.920209][ T405] bridge_slave_1: left allmulticast mode [ 992.926087][ T405] bridge_slave_1: left promiscuous mode [ 992.932808][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.954534][ T405] bridge_slave_0: left allmulticast mode [ 992.960206][ T405] bridge_slave_0: left promiscuous mode [ 992.974111][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.093498][ T405] veth1_macvtap: left promiscuous mode [ 993.105529][ T405] veth0_vlan: left promiscuous mode [ 993.323623][T23988] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.346393][T23988] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.363631][T23988] bridge_slave_0: entered allmulticast mode [ 993.371838][T23988] bridge_slave_0: entered promiscuous mode [ 993.390140][T23988] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.409117][T23988] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.429111][T23988] bridge_slave_1: entered allmulticast mode [ 993.452496][T23988] bridge_slave_1: entered promiscuous mode [ 993.594983][T23988] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.602103][T23988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.609430][T23988] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.616491][T23988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.679775][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.687225][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.707990][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.715077][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.748719][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.755800][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.797592][T23988] veth0_vlan: entered promiscuous mode [ 993.818667][T23988] veth1_macvtap: entered promiscuous mode [ 994.214127][T24053] futex_wake_op: syz.4.26718 tries to shift op by -1; fix this program [ 994.233971][T24055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1279 sclass=netlink_route_socket pid=24055 comm=syz.5.26719 [ 994.460598][T24073] futex_wake_op: syz.5.26728 tries to shift op by -1; fix this program [ 994.990954][T24101] futex_wake_op: syz.4.26738 tries to shift op by -1; fix this program [ 995.000092][ T4647] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 995.165263][ T4647] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 995.175661][ T4647] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 995.184983][ T4647] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 995.194317][ T4647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.396173][T24121] futex_wake_op: syz.2.26752 tries to shift op by -1; fix this program [ 995.413610][ T9] usb 6-1: USB disconnect, device number 48 [ 995.613638][T24141] futex_wake_op: syz.2.26761 tries to shift op by -1; fix this program [ 995.715267][T24155] 9pnet_fd: Insufficient options for proto=fd [ 996.150746][T24183] futex_wake_op: syz.4.26783 tries to shift op by -1; fix this program [ 996.216521][ T36] audit: type=1400 audit(1763543049.540:9447): avc: denied { read } for pid=24186 comm="syz.4.26786" lport=28 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 996.390542][ T36] audit: type=1400 audit(1763543049.710:9448): avc: denied { create } for pid=24199 comm="syz.4.26791" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 996.432070][T24206] futex_wake_op: syz.2.26794 tries to shift op by -1; fix this program [ 996.433197][ T36] audit: type=1400 audit(1763543049.730:9449): avc: denied { write } for pid=24199 comm="syz.4.26791" name="file0" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 996.500449][ T36] audit: type=1400 audit(1763543049.730:9450): avc: denied { open } for pid=24199 comm="syz.4.26791" path="/280/file0" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 996.554121][ T36] audit: type=1400 audit(1763543049.730:9451): avc: denied { ioctl } for pid=24199 comm="syz.4.26791" path="/280/file0" dev="tmpfs" ino=1734 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 996.604060][ T36] audit: type=1400 audit(1763543049.750:9452): avc: denied { unlink } for pid=22026 comm="syz-executor" name="file0" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 997.507065][T24232] futex_wake_op: syz.4.26804 tries to shift op by -1; fix this program [ 997.583089][ T36] audit: type=1400 audit(1763543050.900:9453): avc: denied { search } for pid=24243 comm="syz.4.26812" name="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 997.811343][T24252] futex_wake_op: syz.3.26817 tries to shift op by -1; fix this program [ 997.867374][ T4647] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 997.914921][ T36] audit: type=1326 audit(1763543051.240:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24262 comm="syz.3.26822" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x0 [ 998.034172][ T4647] usb 5-1: Using ep0 maxpacket: 8 [ 998.045224][ T4647] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 998.061103][ T4647] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 998.078183][ T4647] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 998.087474][ T4647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.136271][T24273] futex_wake_op: syz.3.26827 tries to shift op by -1; fix this program [ 998.298864][ T4647] usb 5-1: USB disconnect, device number 54 [ 998.338095][T24293] futex_wake_op: syz.2.26837 tries to shift op by -1; fix this program [ 998.502396][T24312] futex_wake_op: syz.3.26847 tries to shift op by -1; fix this program [ 998.895889][T24355] futex_wake_op: syz.5.26868 tries to shift op by -1; fix this program [ 1000.621344][T24443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 1000.634078][ T4647] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1000.815185][ T4647] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1000.826344][ T4647] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1000.837436][ T4647] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1000.848371][ T4647] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1000.857582][ T4647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.867059][T24432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1000.880182][ T4647] usb 3-1: invalid MIDI out EP 0 [ 1000.904867][ T4647] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1001.081773][ T9] usb 3-1: USB disconnect, device number 52 [ 1001.501479][T24479] No source specified [ 1002.004056][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1002.154074][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1002.160626][ T9] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 1002.169137][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.179433][ T9] usb 6-1: config 0 has no interface number 0 [ 1002.185824][ T9] usb 6-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1002.195951][ T9] usb 6-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1002.210560][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1002.219803][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.227969][ T9] usb 6-1: Product: syz [ 1002.232187][ T9] usb 6-1: Manufacturer: syz [ 1002.236991][ T9] usb 6-1: SerialNumber: syz [ 1002.242432][ T9] usb 6-1: config 0 descriptor?? [ 1002.249636][T24494] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1002.257813][ T9] net1080 6-1:0.147: probe with driver net1080 failed with error -22 [ 1002.462146][ T9] usb 6-1: USB disconnect, device number 49 [ 1002.980608][T24558] netlink: 104 bytes leftover after parsing attributes in process `syz.5.26964'. [ 1003.534058][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1003.705154][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1003.717837][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1003.728945][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1003.738762][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1003.753329][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1003.762547][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1003.784042][ T9] usb 3-1: SerialNumber: syz [ 1003.793864][T24554] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1003.805977][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1003.824139][ T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 1004.026146][ T45] usb 3-1: USB disconnect, device number 53 [ 1004.470344][T24647] netlink: 'syz.4.27004': attribute type 4 has an invalid length. [ 1004.486886][T24647] netlink: 'syz.4.27004': attribute type 4 has an invalid length. [ 1004.862854][T24671] SELinux: Context is not valid (left unmapped). [ 1004.872703][ T36] audit: type=1400 audit(1763543058.190:9455): avc: denied { relabelto } for pid=24670 comm="syz.2.27016" name="blkio.bfq.io_serviced" dev="ramfs" ino=433662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 1004.898224][ T36] audit: type=1400 audit(1763543058.190:9456): avc: denied { associate } for pid=24670 comm="syz.2.27016" name="blkio.bfq.io_serviced" dev="ramfs" ino=433662 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="" [ 1005.117206][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1005.274068][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1005.294931][ T9] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 1005.314075][ T9] usb 6-1: config 0 has no interface number 0 [ 1005.324071][ T9] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1005.354059][ T9] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1005.384458][ T9] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 1005.393553][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.411771][ T9] usb 6-1: Product: syz [ 1005.424057][ T9] usb 6-1: Manufacturer: syz [ 1005.428962][ T9] usb 6-1: SerialNumber: syz [ 1005.439378][ T9] usb 6-1: config 0 descriptor?? [ 1005.449239][T24682] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1005.662410][ T4647] usb 6-1: USB disconnect, device number 50 [ 1006.023257][ T36] audit: type=1326 audit(1763543059.340:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.3.27041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1006.049630][ T36] audit: type=1326 audit(1763543059.370:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.3.27041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1006.080818][ T36] audit: type=1326 audit(1763543059.370:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.3.27041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1006.104797][ T36] audit: type=1326 audit(1763543059.370:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.3.27041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1006.133644][ T36] audit: type=1326 audit(1763543059.370:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.3.27041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1006.811340][T24808] No source specified [ 1007.344054][ T45] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1007.495102][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 1007.501554][ T45] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1007.510511][ T45] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1007.520737][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.531062][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.540218][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.548274][ T45] usb 3-1: Product: syz [ 1007.552472][ T45] usb 3-1: Manufacturer: syz [ 1007.557125][ T45] usb 3-1: SerialNumber: syz [ 1007.764811][T24875] futex_wake_op: syz.4.27115 tries to shift op by -1; fix this program [ 1007.970930][ T45] usb 3-1: 0:2 : does not exist [ 1007.978342][ T45] usb 3-1: USB disconnect, device number 54 [ 1008.306707][T24895] futex_wake_op: syz.4.27125 tries to shift op by -1; fix this program [ 1008.449248][T24914] futex_wake_op: syz.4.27134 tries to shift op by -1; fix this program [ 1008.826511][ T45] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1008.853665][T24958] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1008.853689][T24958] rust_binder: Read failure Err(EFAULT) in pid:221 [ 1008.964071][ T45] usb 3-1: device descriptor read/64, error -71 [ 1009.000479][ T36] audit: type=1400 audit(1763543062.320:9462): avc: denied { create } for pid=24972 comm="syz.5.27163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 1009.216947][ T45] usb 3-1: device descriptor read/64, error -71 [ 1009.474081][ T45] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1009.559882][T25016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27184'. [ 1009.587591][T25018] futex_wake_op: syz.3.27185 tries to shift op by -1; fix this program [ 1009.614063][ T45] usb 3-1: device descriptor read/64, error -71 [ 1009.657309][T25026] cgroup2: Unknown parameter 'me' [ 1009.854076][ T45] usb 3-1: device descriptor read/64, error -71 [ 1009.965930][ T45] usb usb3-port1: attempt power cycle [ 1010.314125][ T45] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1010.345088][ T45] usb 3-1: device descriptor read/8, error -71 [ 1010.395949][ T36] audit: type=1400 audit(1763543063.720:9463): avc: denied { create } for pid=25108 comm="syz.4.27230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1010.485033][ T45] usb 3-1: device descriptor read/8, error -71 [ 1010.734057][ T45] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1010.755802][ T45] usb 3-1: device descriptor read/8, error -71 [ 1010.902873][ T45] usb 3-1: device descriptor read/8, error -71 [ 1011.015504][ T45] usb usb3-port1: unable to enumerate USB device [ 1011.324063][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1011.474105][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1011.488738][ T9] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 1011.504748][ T9] usb 5-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 1011.514401][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.524357][ T9] usb 5-1: Product: syz [ 1011.534512][ T9] usb 5-1: Manufacturer: syz [ 1011.539239][ T9] usb 5-1: SerialNumber: syz [ 1011.547497][ T9] usb 5-1: config 0 descriptor?? [ 1011.756119][ T858] usb 5-1: USB disconnect, device number 55 [ 1015.658215][T25618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27477'. [ 1017.887023][ T13] bridge_slave_1: left allmulticast mode [ 1017.892724][ T13] bridge_slave_1: left promiscuous mode [ 1017.914143][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.932160][ T13] bridge_slave_0: left allmulticast mode [ 1017.941678][ T13] bridge_slave_0: left promiscuous mode [ 1017.957112][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.085588][ T13] veth1_macvtap: left promiscuous mode [ 1018.091120][ T13] veth0_vlan: left promiscuous mode [ 1019.645627][T25739] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1019.664074][T25739] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1019.664100][T25739] rust_binder: Read failure Err(EFAULT) in pid:440 [ 1020.234069][ T45] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1020.444045][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 1020.450360][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.463759][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.485615][ T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1020.504032][ T45] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1020.514155][ T45] usb 6-1: Product: syz [ 1020.518341][ T45] usb 6-1: Manufacturer: syz [ 1020.533224][ T45] usb 6-1: SerialNumber: syz [ 1020.544194][ T45] usb 6-1: config 0 descriptor?? [ 1020.753135][ T45] usb 6-1: USB disconnect, device number 51 [ 1021.125819][T25793] tmpfs: Bad value for 'nr_blocks' [ 1021.307585][T25814] netlink: 'syz.4.27568': attribute type 4 has an invalid length. [ 1022.236557][T25905] netlink: 'syz.5.27611': attribute type 4 has an invalid length. [ 1023.314098][T30828] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1023.485107][T30828] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1023.507325][T30828] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1023.535877][T30828] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1023.546882][T30828] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1023.556352][T30828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.569116][T25951] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1023.578872][T30828] usb 5-1: invalid MIDI out EP 0 [ 1023.606896][T14312] udevd[14312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1023.623599][T30828] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1023.776545][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27648'. [ 1023.779127][T30828] usb 5-1: USB disconnect, device number 56 [ 1025.874043][ T4647] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1026.045183][ T4647] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1026.064050][ T4647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.072831][ T4647] usb 5-1: config 0 descriptor?? [ 1026.140546][ T9] kernel write not supported for file /627/net/snmp (pid: 9 comm: kworker/0:0) [ 1026.264069][T30828] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1026.404048][ T9] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1026.424058][T30828] usb 6-1: Using ep0 maxpacket: 8 [ 1026.430639][T30828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1026.439255][T30828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.449721][T30828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.460375][T30828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1026.469808][T30828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.478892][T30828] usb 6-1: Product: syz [ 1026.483132][T30828] usb 6-1: Manufacturer: syz [ 1026.487948][T30828] usb 6-1: SerialNumber: syz [ 1026.555106][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1026.566227][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1026.577345][ T9] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1026.588799][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1026.598014][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.610227][T26095] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1026.618745][ T9] usb 3-1: invalid MIDI out EP 0 [ 1026.636606][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1026.702489][T30828] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1026.715196][T30828] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1026.734820][T30828] usb 6-1: USB disconnect, device number 52 [ 1026.734851][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1026.827981][ T9] usb 3-1: USB disconnect, device number 59 [ 1027.227991][T26107] netlink: 132 bytes leftover after parsing attributes in process `syz.5.27706'. [ 1027.506147][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1027.664036][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1027.680414][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1027.701440][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1027.721425][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.742484][ T9] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.753915][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.764028][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.782316][ T9] usb 6-1: Product: syz [ 1027.788793][ T9] usb 6-1: Manufacturer: syz [ 1027.798882][ T9] usb 6-1: SerialNumber: syz [ 1028.012394][ T9] usb 6-1: USB disconnect, device number 53 [ 1028.029618][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1028.651066][ T858] usb 5-1: USB disconnect, device number 57 [ 1028.836055][T30828] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1028.994048][T30828] usb 6-1: Using ep0 maxpacket: 8 [ 1029.004600][T30828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1029.013052][T30828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.023281][T30828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1029.043770][T30828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1029.070954][T30828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.094107][T30828] usb 6-1: Product: syz [ 1029.104056][T30828] usb 6-1: Manufacturer: syz [ 1029.108687][T30828] usb 6-1: SerialNumber: syz [ 1029.346477][T30828] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1029.375075][T30828] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1029.397592][T30828] usb 6-1: USB disconnect, device number 54 [ 1029.419137][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1030.422653][ T36] audit: type=1326 audit(1763543083.736:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.447447][ T36] audit: type=1326 audit(1763543083.736:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.471326][ T36] audit: type=1326 audit(1763543083.746:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.495914][ T36] audit: type=1326 audit(1763543083.746:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.520641][ T36] audit: type=1326 audit(1763543083.746:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.544228][ T36] audit: type=1326 audit(1763543083.746:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.587676][ T36] audit: type=1326 audit(1763543083.746:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.611634][ T36] audit: type=1326 audit(1763543083.746:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26295 comm="syz.3.27797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6fdf98f6c9 code=0x7ffc0000 [ 1030.635713][ T36] audit: type=1400 audit(1763543083.786:9472): avc: denied { execheap } for pid=26297 comm="syz.3.27798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1030.850813][T26335] netlink: 140 bytes leftover after parsing attributes in process `syz.4.27816'. [ 1031.635159][T26403] netlink: 'syz.5.27851': attribute type 4 has an invalid length. [ 1032.556292][T26438] netlink: 'syz.3.27868': attribute type 4 has an invalid length. [ 1034.974041][ T4647] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1035.134050][ T4647] usb 6-1: Using ep0 maxpacket: 8 [ 1035.145376][ T4647] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1035.164717][ T4647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.184033][ T4647] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1035.205039][ T4647] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.214165][ T4647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.222180][ T4647] usb 6-1: Product: syz [ 1035.244047][ T4647] usb 6-1: Manufacturer: syz [ 1035.248741][ T4647] usb 6-1: SerialNumber: syz [ 1035.462861][ T4647] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1035.483150][ T4647] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1035.503131][ T4647] usb 6-1: USB disconnect, device number 55 [ 1035.513614][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1036.387271][T26707] cgroup: No subsys list or none specified [ 1037.162169][T26752] netlink: 'syz.2.28016': attribute type 4 has an invalid length. [ 1037.846377][T26776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1038.718109][ T36] audit: type=1400 audit(1763543091.849:9473): avc: denied { create } for pid=26820 comm="syz.4.28043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 1039.265282][T20709] bridge_slave_1: left allmulticast mode [ 1039.271085][T20709] bridge_slave_1: left promiscuous mode [ 1039.284692][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.308148][T20709] bridge_slave_0: left allmulticast mode [ 1039.313822][T20709] bridge_slave_0: left promiscuous mode [ 1039.329601][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.572065][T20709] veth1_macvtap: left promiscuous mode [ 1039.577620][T20709] veth0_vlan: left promiscuous mode [ 1039.636358][T26888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.643417][T26888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.650540][T26888] bridge_slave_0: entered allmulticast mode [ 1039.656775][T26888] bridge_slave_0: entered promiscuous mode [ 1039.663394][T26888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.670479][T26888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.677586][T26888] bridge_slave_1: entered allmulticast mode [ 1039.684170][T26888] bridge_slave_1: entered promiscuous mode [ 1039.784441][T26888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.791532][T26888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.798861][T26888] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.805918][T26888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.873561][T26888] veth0_vlan: entered promiscuous mode [ 1039.893853][T26888] veth1_macvtap: entered promiscuous mode [ 1039.987623][T26949] netlink: 120 bytes leftover after parsing attributes in process `syz.4.28105'. [ 1039.997286][T26949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28105'. [ 1040.013028][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28105'. [ 1040.039256][T26956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1279 sclass=netlink_route_socket pid=26956 comm=syz.2.28109 [ 1040.473705][T26986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.28123'. [ 1041.734621][ T858] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1041.918801][ T858] usb 6-1: Using ep0 maxpacket: 8 [ 1041.928776][ T858] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1041.941205][ T858] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.962095][ T858] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.974554][ T858] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.995053][ T858] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.003070][ T858] usb 6-1: Product: syz [ 1042.016283][ T858] usb 6-1: Manufacturer: syz [ 1042.027126][ T858] usb 6-1: SerialNumber: syz [ 1042.261245][ T858] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1042.288826][ T858] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1042.299510][ T858] usb 6-1: USB disconnect, device number 56 [ 1042.310851][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1042.934559][T27088] netlink: 20 bytes leftover after parsing attributes in process `syz.5.28173'. [ 1043.717253][ T858] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1043.893759][ T858] usb 3-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 1043.912254][ T858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.931395][ T858] usb 3-1: Product: syz [ 1043.942126][ T858] usb 3-1: Manufacturer: syz [ 1043.953015][ T858] usb 3-1: SerialNumber: syz [ 1043.964667][ T858] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1043.974932][ T858] r8152-cfgselector 3-1: config 0 descriptor?? [ 1043.989208][ T858] r8152 3-1:0.0: Expected endpoints are not found [ 1044.211170][T27134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.223219][T27134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.243737][T21734] r8152-cfgselector 3-1: USB disconnect, device number 60 [ 1045.843238][T27354] tmpfs: Bad value for 'huge' [ 1046.136838][ T36] audit: type=1400 audit(1763543098.698:9474): avc: denied { write } for pid=27375 comm="syz.3.28316" name="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1046.219984][ T36] audit: type=1400 audit(1763543098.698:9475): avc: denied { add_name } for pid=27375 comm="syz.3.28316" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1046.257107][T27382] tmpfs: Bad value for 'huge' [ 1046.263989][ T36] audit: type=1400 audit(1763543098.698:9476): avc: denied { create } for pid=27375 comm="syz.3.28316" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1047.314601][T27455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27455 comm=syz.4.28354 [ 1050.016127][T27559] TCP: TCP_TX_DELAY enabled [ 1050.358667][ T4647] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1050.521142][ T4647] usb 3-1: Using ep0 maxpacket: 16 [ 1050.531649][ T4647] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1050.540417][ T4647] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.552128][ T4647] usb 3-1: config 0 has no interface number 0 [ 1050.558546][ T4647] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1050.570706][ T4647] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.585863][ T4647] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1050.595122][ T4647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.606498][ T4647] usb 3-1: Product: syz [ 1050.610995][ T4647] usb 3-1: Manufacturer: syz [ 1050.615700][ T4647] usb 3-1: SerialNumber: syz [ 1050.623767][ T4647] usb 3-1: config 0 descriptor?? [ 1050.631187][T27567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1050.639050][ T4647] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1050.862645][ T4647] usb 3-1: USB disconnect, device number 61 [ 1051.528849][T27738] tmpfs: Bad value for 'huge' [ 1052.856043][T27812] tmpfs: Bad value for 'huge' [ 1053.013039][T21734] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1053.186376][T21734] usb 3-1: Using ep0 maxpacket: 8 [ 1053.195978][T21734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1053.208759][T21734] usb 3-1: config 0 has no interfaces? [ 1053.220012][T21734] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 1053.240039][T21734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.259001][T21734] usb 3-1: Product: syz [ 1053.263237][T21734] usb 3-1: Manufacturer: syz [ 1053.267848][T21734] usb 3-1: SerialNumber: syz [ 1053.284242][T21734] usb 3-1: config 0 descriptor?? [ 1053.508775][ T45] usb 3-1: USB disconnect, device number 62 [ 1055.678243][ T45] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1055.851589][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1055.864162][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.872875][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.890205][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1055.911580][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1055.920846][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.938453][ T45] usb 3-1: Product: syz [ 1055.949148][ T45] usb 3-1: Manufacturer: syz [ 1055.959920][ T45] usb 3-1: SerialNumber: syz [ 1056.192174][ T45] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1056.216127][T20709] bridge_slave_1: left allmulticast mode [ 1056.226103][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1056.235734][T20709] bridge_slave_1: left promiscuous mode [ 1056.252640][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.261346][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1056.277314][ T45] usb 3-1: USB disconnect, device number 63 [ 1056.295189][T20709] bridge_slave_0: left allmulticast mode [ 1056.300918][T20709] bridge_slave_0: left promiscuous mode [ 1056.306567][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.489734][T20709] veth1_macvtap: left promiscuous mode [ 1056.495345][T20709] veth0_vlan: left promiscuous mode [ 1056.559219][T27970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.566354][T27970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.580777][T27970] bridge_slave_0: entered allmulticast mode [ 1056.591252][T27970] bridge_slave_0: entered promiscuous mode [ 1056.597820][T27970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.604959][T27970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.617314][T27970] bridge_slave_1: entered allmulticast mode [ 1056.638410][T27970] bridge_slave_1: entered promiscuous mode [ 1056.735908][T27970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.743018][T27970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.750321][T27970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.757394][T27970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.799580][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.827340][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.863013][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.870100][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.890199][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.897273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.961395][T27970] veth0_vlan: entered promiscuous mode [ 1056.990789][T27970] veth1_macvtap: entered promiscuous mode [ 1057.239001][T28021] netlink: 'syz.3.28629': attribute type 4 has an invalid length. [ 1058.853132][ T36] audit: type=1326 audit(1763543110.337:9477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28052 comm="syz.2.28644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ce298f6c9 code=0x7fc00000 [ 1058.953795][T28072] tmpfs: Bad value for 'huge' [ 1059.167396][T28095] tmpfs: Bad value for 'huge' [ 1060.034091][ T36] audit: type=1326 audit(1763543111.518:9478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.3.28675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703758f6c9 code=0x7fc00000 [ 1060.692043][ T36] audit: type=1326 audit(1763543112.127:9479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.3.28675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703758f6c9 code=0x7fc00000 [ 1060.737922][ T36] audit: type=1326 audit(1763543112.127:9480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28118 comm="syz.3.28675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f703758f6c9 code=0x7fc00000 [ 1061.311915][T28162] tmpfs: Bad value for 'huge' [ 1061.630254][T28184] tmpfs: Bad value for 'huge' [ 1061.929668][ T4647] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1062.115182][ T4647] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1062.135525][ T4647] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1062.157116][ T4647] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1062.178887][ T4647] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.187949][ T4647] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.200978][T28188] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1062.221429][ T4647] usb 5-1: invalid MIDI out EP 0 [ 1062.251084][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1062.267783][ T4647] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1062.267803][T28217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.28722'. [ 1062.441278][ T4647] usb 5-1: USB disconnect, device number 58 [ 1063.728081][ T9] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1063.903014][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1063.915662][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1063.938959][ T9] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.960754][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1063.977287][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.997292][T28263] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1064.005637][ T9] usb 4-1: invalid MIDI out EP 0 [ 1064.017959][T28279] loop5: detected capacity change from 0 to 7 [ 1064.022317][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1064.028622][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1064.229820][ T9] usb 4-1: USB disconnect, device number 68 [ 1064.833175][T30828] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1065.017347][T30828] usb 3-1: Using ep0 maxpacket: 16 [ 1065.025517][T30828] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1065.044705][T30828] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.067808][T30828] usb 3-1: config 0 has no interface number 0 [ 1065.082349][T30828] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1065.103350][T30828] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.118114][T30828] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1065.136510][T30828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.144595][T30828] usb 3-1: Product: syz [ 1065.153512][T30828] usb 3-1: Manufacturer: syz [ 1065.169015][T30828] usb 3-1: SerialNumber: syz [ 1065.177487][T30828] usb 3-1: config 0 descriptor?? [ 1065.190979][T28295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1065.199174][T30828] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1065.428262][T30828] usb 3-1: USB disconnect, device number 64 [ 1065.636095][T28345] loop5: detected capacity change from 0 to 7 [ 1065.680534][T28351] tmpfs: Bad value for 'huge' [ 1065.978404][T28375] loop5: detected capacity change from 0 to 7 [ 1066.660026][T28453] netlink: 56 bytes leftover after parsing attributes in process `syz.2.28836'. [ 1067.103717][T28481] netlink: 44 bytes leftover after parsing attributes in process `syz.5.28850'. [ 1067.117890][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.5.28850'. [ 1067.236477][T28491] netlink: 56 bytes leftover after parsing attributes in process `syz.2.28856'. [ 1067.759912][T28521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28870'. [ 1068.841840][ T858] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1069.015179][ T858] usb 3-1: Using ep0 maxpacket: 16 [ 1069.027090][ T858] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1069.046298][ T858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.067761][ T858] usb 3-1: config 0 has no interface number 0 [ 1069.077538][ T858] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1069.096848][ T858] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1069.123583][ T858] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1069.132809][ T858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.141073][ T858] usb 3-1: Product: syz [ 1069.145433][ T858] usb 3-1: Manufacturer: syz [ 1069.150092][ T858] usb 3-1: SerialNumber: syz [ 1069.155565][ T858] usb 3-1: config 0 descriptor?? [ 1069.161139][T28545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.169195][ T858] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1069.391079][ T858] usb 3-1: USB disconnect, device number 65 [ 1071.550423][T30828] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1071.712896][T30828] usb 4-1: Using ep0 maxpacket: 16 [ 1071.722355][T30828] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.740160][T30828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1071.746985][T30828] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.00 [ 1071.756108][T30828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.767410][T30828] usb 4-1: config 0 descriptor?? [ 1071.998401][T30828] usbhid 4-1:0.0: can't add hid device: -71 [ 1072.007567][T30828] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1072.011335][T28698] tmpfs: Bad value for 'huge' [ 1072.017963][T30828] usb 4-1: USB disconnect, device number 69 [ 1072.076931][T28706] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28961'. [ 1072.167980][ T4647] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1072.300900][T28718] tmpfs: Bad value for 'huge' [ 1072.330522][ T4647] usb 6-1: Using ep0 maxpacket: 8 [ 1072.337606][ T4647] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1072.346357][ T4647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.356740][ T4647] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1072.367423][ T4647] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1072.376668][ T4647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.384748][ T4647] usb 6-1: Product: syz [ 1072.389175][ T4647] usb 6-1: Manufacturer: syz [ 1072.393904][ T4647] usb 6-1: SerialNumber: syz [ 1072.464083][T28730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28973'. [ 1072.623227][ T4647] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1072.639542][ T4647] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1072.651777][ T4647] usb 6-1: USB disconnect, device number 57 [ 1072.663047][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1072.926351][ T858] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1073.100837][ T858] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1073.112046][ T858] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1073.123145][ T858] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1073.134132][ T858] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1073.143292][ T858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.152743][T28752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1073.161530][ T858] usb 5-1: invalid MIDI out EP 0 [ 1073.174199][ T858] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1073.292192][T28774] loop5: detected capacity change from 0 to 7 [ 1073.382286][ T858] usb 5-1: USB disconnect, device number 59 [ 1073.661554][T28780] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28998'. [ 1073.957567][T28802] tmpfs: Bad value for 'huge' [ 1074.616679][ T36] audit: type=1326 audit(1763543124.975:9481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28852 comm="syz.2.29034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce298f6c9 code=0x0 [ 1074.641366][T28851] loop5: detected capacity change from 0 to 7 [ 1074.923079][T28881] loop5: detected capacity change from 0 to 7 [ 1075.409663][T28905] tmpfs: Bad value for 'huge' [ 1076.095253][T28945] loop5: detected capacity change from 0 to 7 [ 1077.017065][ T36] audit: type=1400 audit(1763543127.200:9482): avc: denied { link } for pid=28980 comm="syz.5.29093" name="file0" dev="tmpfs" ino=3233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1077.270959][T30828] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1077.302031][T28987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.310338][T28987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.325048][T28987] bridge_slave_0: entered allmulticast mode [ 1077.331432][T28987] bridge_slave_0: entered promiscuous mode [ 1077.358257][T28987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.365321][T28987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.372605][T28987] bridge_slave_1: entered allmulticast mode [ 1077.379057][T28987] bridge_slave_1: entered promiscuous mode [ 1077.438700][T20709] bridge_slave_1: left allmulticast mode [ 1077.444570][T20709] bridge_slave_1: left promiscuous mode [ 1077.450215][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.458117][T20709] bridge_slave_0: left allmulticast mode [ 1077.463873][T20709] bridge_slave_0: left promiscuous mode [ 1077.469764][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.488909][T30828] usb 4-1: config 0 has an invalid interface number: 14 but max is 0 [ 1077.508333][T30828] usb 4-1: config 0 has no interface number 0 [ 1077.515877][T30828] usb 4-1: config 0 interface 14 altsetting 6 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1077.527952][T30828] usb 4-1: config 0 interface 14 altsetting 6 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1077.537863][T30828] usb 4-1: config 0 interface 14 has no altsetting 0 [ 1077.547895][T30828] usb 4-1: New USB device found, idVendor=19d2, idProduct=ffc8, bcdDevice=da.90 [ 1077.557023][T30828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.576931][T30828] usb 4-1: config 0 descriptor?? [ 1077.591690][T20709] veth1_macvtap: left promiscuous mode [ 1077.597688][T20709] veth0_vlan: left promiscuous mode [ 1077.663286][T28987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.670378][T28987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.677718][T28987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.684788][T28987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.710885][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.720655][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.736665][ T405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.743764][ T405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.764794][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.771884][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.792353][T28987] veth0_vlan: entered promiscuous mode [ 1077.804795][ T9] usb 4-1: USB disconnect, device number 70 [ 1077.805809][T28987] veth1_macvtap: entered promiscuous mode [ 1078.950191][T30828] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1079.114718][T30828] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1079.125935][T30828] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1079.139072][T30828] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1079.149919][T30828] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1079.166935][T30828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.180666][T29026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1079.191673][T30828] usb 4-1: invalid MIDI out EP 0 [ 1079.212004][T30828] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1079.253572][ T330] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1079.419577][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.430547][T30828] usb 4-1: USB disconnect, device number 71 [ 1079.437245][ T330] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1079.447518][ T330] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1079.456619][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.465777][ T330] usb 5-1: config 0 descriptor?? [ 1079.689567][T30828] usb 5-1: USB disconnect, device number 60 [ 1080.036278][T29114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29159'. [ 1080.163617][T30828] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1080.348524][T30828] usb 6-1: Using ep0 maxpacket: 8 [ 1080.359636][T30828] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1080.369824][T30828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.380116][T30828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1080.403410][T30828] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1080.412483][T30828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.420607][T30828] usb 6-1: Product: syz [ 1080.424853][T30828] usb 6-1: Manufacturer: syz [ 1080.429497][T30828] usb 6-1: SerialNumber: syz [ 1080.659152][T30828] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1080.683807][T30828] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1080.705026][T30828] usb 6-1: USB disconnect, device number 58 [ 1080.719532][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1080.975079][T29171] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1080.975264][T29171] rust_binder: Write failure EINVAL in pid:311 [ 1081.747281][T29216] loop5: detected capacity change from 0 to 7 [ 1081.808757][T29218] 9pnet_fd: Insufficient options for proto=fd [ 1081.963285][T29232] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1081.963449][T29232] rust_binder: Write failure EINVAL in pid:70 [ 1082.528946][T29268] rust_binder: Write failure EINVAL in pid:92 [ 1082.585142][T29270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.29236'. [ 1082.962820][T29282] loop5: detected capacity change from 0 to 7 [ 1083.395202][T29294] tmpfs: Bad value for 'huge' [ 1084.593181][T29315] netlink: 56 bytes leftover after parsing attributes in process `syz.5.29257'. [ 1084.663949][T29319] netlink: 'syz.5.29259': attribute type 4 has an invalid length. [ 1085.155921][T29335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29267'. [ 1085.690154][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29278'. [ 1085.769411][T29362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.29281'. [ 1086.696671][ T858] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1086.859156][ T858] usb 5-1: Using ep0 maxpacket: 16 [ 1086.865466][ T858] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1086.873950][ T858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.891663][ T858] usb 5-1: config 0 has no interface number 0 [ 1086.902643][ T858] usb 5-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1086.923667][ T858] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.958092][ T858] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1086.967411][ T858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.975457][ T858] usb 5-1: Product: syz [ 1086.989153][ T858] usb 5-1: Manufacturer: syz [ 1086.993933][ T858] usb 5-1: SerialNumber: syz [ 1087.003731][ T858] usb 5-1: config 0 descriptor?? [ 1087.011101][T29424] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1087.018948][ T858] net1080 5-1:0.147: probe with driver net1080 failed with error -22 [ 1087.126450][T29433] can: request_module (can-proto-0) failed. [ 1087.246820][ T9] usb 5-1: USB disconnect, device number 61 [ 1087.367278][T29453] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1087.367392][T29453] rust_binder: Write failure EINVAL in pid:1219 [ 1087.476844][T29462] loop5: detected capacity change from 0 to 7 [ 1087.751798][T29473] tmpfs: Bad value for 'huge' [ 1087.805225][T29477] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=29477 comm=syz.2.29336 [ 1087.941444][T29493] tmpfs: Bad value for 'huge' [ 1088.228503][T29511] loop5: detected capacity change from 0 to 7 [ 1088.647192][T29529] tmpfs: Bad value for 'huge' [ 1088.799508][T29537] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1088.799621][T29537] rust_binder: Write failure EINVAL in pid:197 [ 1088.947823][T29540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.976014][T29553] tmpfs: Bad value for 'huge' [ 1088.999240][T29540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.015175][T29540] bridge_slave_0: entered allmulticast mode [ 1089.021491][T29540] bridge_slave_0: entered promiscuous mode [ 1089.029536][T29540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.038106][T29540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.045207][T29540] bridge_slave_1: entered allmulticast mode [ 1089.051665][T29540] bridge_slave_1: entered promiscuous mode [ 1089.182370][T29540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.189486][T29540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.196903][T29540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.204061][T29540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.267245][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.275672][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.298258][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.305336][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.323904][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.330989][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.361947][ T45] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1089.409424][T29540] veth0_vlan: entered promiscuous mode [ 1089.438998][T29540] veth1_macvtap: entered promiscuous mode [ 1089.513579][ T45] usb 5-1: device descriptor read/64, error -71 [ 1089.773578][ T45] usb 5-1: device descriptor read/64, error -71 [ 1090.045213][ T45] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1090.196118][ T45] usb 5-1: device descriptor read/64, error -71 [ 1090.456143][ T45] usb 5-1: device descriptor read/64, error -71 [ 1090.586243][ T45] usb usb5-port1: attempt power cycle [ 1090.965529][ T45] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1090.998937][ T45] usb 5-1: device descriptor read/8, error -71 [ 1091.140498][ T45] usb 5-1: device descriptor read/8, error -71 [ 1091.409912][ T45] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1091.465099][ T45] usb 5-1: device descriptor read/8, error -71 [ 1091.612303][ T45] usb 5-1: device descriptor read/8, error -71 [ 1091.737500][ T45] usb usb5-port1: unable to enumerate USB device [ 1091.986502][T29661] netlink: 56 bytes leftover after parsing attributes in process `syz.2.29421'. [ 1092.023866][T29665] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1092.023981][T29665] rust_binder: Write failure EINVAL in pid:28 [ 1092.796351][ T9] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1092.969707][ T9] usb 6-1: device descriptor read/64, error -71 [ 1093.208044][ T330] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1093.241405][ T9] usb 6-1: device descriptor read/64, error -71 [ 1093.381376][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 1093.389555][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.408519][ T330] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1093.417751][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.430983][ T330] usb 5-1: config 0 descriptor?? [ 1093.437949][ T330] hub 5-1:0.0: bad descriptor, ignoring hub [ 1093.443889][ T330] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1093.455664][ T330] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1093.522227][ T9] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1093.673899][ T9] usb 6-1: device descriptor read/64, error -71 [ 1093.771494][T30828] usb 5-1: USB disconnect, device number 66 [ 1093.933943][ T9] usb 6-1: device descriptor read/64, error -71 [ 1094.064801][ T9] usb usb6-port1: attempt power cycle [ 1094.432303][ T9] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1094.496132][ T9] usb 6-1: device descriptor read/8, error -71 [ 1094.639289][ T9] usb 6-1: device descriptor read/8, error -71 [ 1094.794146][T29855] netlink: 56 bytes leftover after parsing attributes in process `syz.3.29516'. [ 1094.898298][ T9] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1094.921131][ T9] usb 6-1: device descriptor read/8, error -71 [ 1095.072596][ T9] usb 6-1: device descriptor read/8, error -71 [ 1095.190782][ T9] usb usb6-port1: unable to enumerate USB device [ 1095.863857][T29910] tmpfs: Bad value for 'nr_inodes' [ 1096.145337][T29929] tmpfs: Bad value for 'nr_inodes' [ 1096.209112][ T453] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1096.360778][ T453] usb 3-1: device descriptor read/64, error -71 [ 1096.380535][T29953] tmpfs: Bad value for 'nr_inodes' [ 1096.407361][T29955] loop5: detected capacity change from 0 to 7 [ 1096.620809][ T453] usb 3-1: device descriptor read/64, error -71 [ 1096.891782][ T453] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1097.054173][ T453] usb 3-1: device descriptor read/64, error -71 [ 1097.335862][ T453] usb 3-1: device descriptor read/64, error -71 [ 1097.369394][T30002] usb usb8: usbfs: process 30002 (syz.4.29590) did not claim interface 0 before use [ 1097.455151][ T453] usb usb3-port1: attempt power cycle [ 1097.748704][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1097.823437][ T453] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1097.886204][ T453] usb 3-1: device descriptor read/8, error -71 [ 1097.920958][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1097.927951][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1097.936880][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.947236][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.958383][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.967613][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.975787][ T9] usb 5-1: Product: syz [ 1097.980150][ T9] usb 5-1: Manufacturer: syz [ 1097.984853][ T9] usb 5-1: SerialNumber: syz [ 1098.041605][ T453] usb 3-1: device descriptor read/8, error -71 [ 1098.224656][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1098.242164][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1098.256934][ T9] usb 5-1: USB disconnect, device number 67 [ 1098.287191][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1098.303764][ T453] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1098.337373][ T453] usb 3-1: device descriptor read/8, error -71 [ 1098.496775][ T453] usb 3-1: device descriptor read/8, error -71 [ 1098.706933][ T453] usb usb3-port1: unable to enumerate USB device [ 1099.023179][T30094] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29634'. [ 1099.154474][T30121] netlink: 56 bytes leftover after parsing attributes in process `syz.4.29647'. [ 1099.860269][ T453] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1099.939174][T30157] netlink: 56 bytes leftover after parsing attributes in process `syz.3.29663'. [ 1100.001130][ T453] usb 3-1: device descriptor read/64, error -71 [ 1100.271953][ T453] usb 3-1: device descriptor read/64, error -71 [ 1100.334794][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.29666'. [ 1100.535526][ T453] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1100.694488][ T453] usb 3-1: device descriptor read/64, error -71 [ 1100.959219][ T453] usb 3-1: device descriptor read/64, error -71 [ 1101.084622][ T453] usb usb3-port1: attempt power cycle [ 1101.094242][ T36] audit: type=1400 audit(1763543149.416:9483): avc: denied { map } for pid=30218 comm="syz.5.29693" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 1101.163233][T30225] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1101.163395][T30225] rust_binder: Write failure EINVAL in pid:896 [ 1101.452920][ T453] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1101.497268][ T453] usb 3-1: device descriptor read/8, error -71 [ 1101.545695][T30294] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1101.545848][T30294] rust_binder: Write failure EINVAL in pid:209 [ 1101.613093][ T36] audit: type=1326 audit(1763543149.896:9484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.646362][ T36] audit: type=1326 audit(1763543149.896:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.649637][ T453] usb 3-1: device descriptor read/8, error -71 [ 1101.670082][ T36] audit: type=1326 audit(1763543149.896:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.702780][ T36] audit: type=1326 audit(1763543149.896:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.727366][ T36] audit: type=1326 audit(1763543149.896:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.751256][ T36] audit: type=1326 audit(1763543149.896:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.775492][ T36] audit: type=1326 audit(1763543149.896:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.799312][ T36] audit: type=1326 audit(1763543149.896:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.823201][ T36] audit: type=1326 audit(1763543149.896:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30306 comm="syz.4.29737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1101.907922][ T330] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1101.929598][ T453] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1101.963148][ T453] usb 3-1: device descriptor read/8, error -71 [ 1102.081247][ T330] usb 6-1: Using ep0 maxpacket: 8 [ 1102.098828][ T330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1102.104027][ T453] usb 3-1: device descriptor read/8, error -71 [ 1102.109586][ T330] usb 6-1: config 0 has no interfaces? [ 1102.126015][ T330] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 2.2c [ 1102.136436][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.144503][ T330] usb 6-1: Product: syz [ 1102.149293][ T330] usb 6-1: Manufacturer: syz [ 1102.154529][ T330] usb 6-1: SerialNumber: syz [ 1102.160235][ T330] usb 6-1: config 0 descriptor?? [ 1102.222783][ T453] usb usb3-port1: unable to enumerate USB device [ 1102.384229][ T330] usb 6-1: USB disconnect, device number 63 [ 1102.894274][T30366] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1102.894525][T30366] rust_binder: Write failure EINVAL in pid:345 [ 1103.053564][T30386] netlink: 188 bytes leftover after parsing attributes in process `syz.3.29775'. [ 1103.098416][T30390] netlink: 'syz.5.29777': attribute type 4 has an invalid length. [ 1103.262244][ T9] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1103.424728][ T9] usb 3-1: device descriptor read/64, error -71 [ 1103.728108][ T9] usb 3-1: device descriptor read/64, error -71 [ 1103.844700][T30428] netlink: 'syz.4.29797': attribute type 4 has an invalid length. [ 1103.988083][ T9] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1104.029855][T30441] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1104.030002][T30441] rust_binder: Write failure EINVAL in pid:985 [ 1104.150638][ T9] usb 3-1: device descriptor read/64, error -71 [ 1104.366177][T30457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29810'. [ 1104.421473][ T9] usb 3-1: device descriptor read/64, error -71 [ 1104.551577][ T9] usb usb3-port1: attempt power cycle [ 1104.602822][T30461] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1104.602995][T30461] rust_binder: Write failure EINVAL in pid:998 [ 1104.666911][T30465] netlink: 'syz.4.29814': attribute type 4 has an invalid length. [ 1104.828445][T30487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.29826'. [ 1104.837616][T30487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29826'. [ 1104.846891][T30487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29826'. [ 1104.930717][ T9] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1104.975047][ T9] usb 3-1: device descriptor read/8, error -71 [ 1105.116102][ T9] usb 3-1: device descriptor read/8, error -71 [ 1105.385721][ T9] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1105.437830][ T9] usb 3-1: device descriptor read/8, error -71 [ 1105.592329][ T9] usb 3-1: device descriptor read/8, error -71 [ 1105.710842][ T9] usb usb3-port1: unable to enumerate USB device [ 1105.874274][T30525] netlink: 'syz.4.29845': attribute type 4 has an invalid length. [ 1106.146343][T30571] 9pnet_fd: Insufficient options for proto=fd [ 1106.187488][T30828] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1106.236384][T30587] random: crng reseeded on system resumption [ 1106.360817][T30828] usb 6-1: Using ep0 maxpacket: 16 [ 1106.367214][T30828] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 1106.375630][T30828] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.385850][T30828] usb 6-1: config 0 has no interface number 0 [ 1106.391999][T30828] usb 6-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1106.402224][T30828] usb 6-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.419765][T30828] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1106.428831][T30828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.436859][T30828] usb 6-1: Product: syz [ 1106.441015][T30828] usb 6-1: Manufacturer: syz [ 1106.445601][T30828] usb 6-1: SerialNumber: syz [ 1106.451032][T30828] usb 6-1: config 0 descriptor?? [ 1106.456267][T30537] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1106.464188][T30828] net1080 6-1:0.147: probe with driver net1080 failed with error -22 [ 1106.503745][T30610] netlink: 204 bytes leftover after parsing attributes in process `syz.4.29885'. [ 1106.620801][ T9] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1106.682198][T30828] usb 6-1: USB disconnect, device number 64 [ 1106.755969][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 1106.755988][ T36] audit: type=1326 audit(1763543154.650:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30634 comm="syz.4.29897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1106.785856][ T36] audit: type=1326 audit(1763543154.650:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30634 comm="syz.4.29897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1106.806105][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1106.809711][ T36] audit: type=1326 audit(1763543154.650:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30634 comm="syz.4.29897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1106.820196][ T9] usb 3-1: config 0 has no interface number 0 [ 1106.843288][ T36] audit: type=1326 audit(1763543154.650:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30634 comm="syz.4.29897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3238f6c9 code=0x7ffc0000 [ 1106.847497][ T9] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1106.887306][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1106.896528][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.905032][ T9] usb 3-1: Product: syz [ 1106.911753][ T9] usb 3-1: Manufacturer: syz [ 1106.916671][ T9] usb 3-1: SerialNumber: syz [ 1106.922131][ T9] usb 3-1: config 0 descriptor?? [ 1107.162649][ T9] usb 3-1: USB disconnect, device number 78 [ 1107.585056][ T330] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1107.678066][T30682] netlink: 'syz.3.29920': attribute type 4 has an invalid length. [ 1107.764570][ T330] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.777945][ T330] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1107.787502][ T330] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1107.797007][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.037796][ T330] usb 6-1: USB disconnect, device number 65 [ 1108.754112][T30725] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1108.754294][T30725] rust_binder: Write failure EINVAL in pid:259 [ 1109.156042][T30739] netlink: 204 bytes leftover after parsing attributes in process `syz.3.29949'. [ 1109.211860][T30741] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1109.212021][T30741] rust_binder: Write failure EINVAL in pid:1112 [ 1109.524378][ T330] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1109.710449][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 1109.737961][ T330] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 1109.751888][ T330] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.783838][ T330] usb 5-1: config 0 has no interface number 0 [ 1109.790097][ T330] usb 5-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1109.816925][ T330] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.842204][ T330] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1109.851909][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.870843][ T330] usb 5-1: Product: syz [ 1109.881734][ T330] usb 5-1: Manufacturer: syz [ 1109.886432][ T330] usb 5-1: SerialNumber: syz [ 1109.897791][ T330] usb 5-1: config 0 descriptor?? [ 1109.903112][T30749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1109.925756][ T330] net1080 5-1:0.147: probe with driver net1080 failed with error -22 [ 1109.947623][ T36] audit: type=1400 audit(1763543157.585:9498): avc: denied { setattr } for pid=30791 comm="syz.3.29974" name="secretmem" dev="secretmem" ino=470165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1110.139199][ T330] usb 5-1: USB disconnect, device number 68 [ 1110.348141][T30818] netlink: 'syz.2.29986': attribute type 4 has an invalid length. [ 1110.956332][T30861] netlink: 'syz.5.30006': attribute type 4 has an invalid length. [ 1111.672704][ T36] audit: type=1400 audit(1763543159.182:9499): avc: denied { read } for pid=30903 comm="syz.3.30026" name="file0" dev="tmpfs" ino=2583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1111.824837][T30921] netlink: 'syz.2.30035': attribute type 4 has an invalid length. [ 1112.877671][T31020] random: crng reseeded on system resumption [ 1112.913710][T31020] Unrecognized hibernate image header format! [ 1112.919893][T31020] PM: hibernation: Image mismatch: architecture specific data [ 1112.970767][T31025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.30085'. [ 1113.034750][ T36] audit: type=1400 audit(1763543160.446:9500): avc: denied { validate_trans } for pid=31032 comm="syz.2.30088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1113.416867][ T62] bridge_slave_1: left allmulticast mode [ 1113.424709][ T453] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1113.433501][ T62] bridge_slave_1: left promiscuous mode [ 1113.440284][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.458300][ T62] bridge_slave_0: left allmulticast mode [ 1113.468028][ T62] bridge_slave_0: left promiscuous mode [ 1113.473667][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.605972][ T453] usb 3-1: Using ep0 maxpacket: 16 [ 1113.620329][ T453] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1113.630535][ T453] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.640641][ T453] usb 3-1: config 0 has no interface number 0 [ 1113.651118][ T62] veth1_macvtap: left promiscuous mode [ 1113.656665][ T453] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1113.663099][ T62] veth0_vlan: left promiscuous mode [ 1113.666831][ T453] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.686462][ T453] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1113.695785][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.703803][ T453] usb 3-1: Product: syz [ 1113.719345][ T453] usb 3-1: Manufacturer: syz [ 1113.723978][ T453] usb 3-1: SerialNumber: syz [ 1113.732539][ T453] usb 3-1: config 0 descriptor?? [ 1113.737835][T31039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1113.753253][ T453] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1113.834159][T31066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.841401][T31066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.851429][T31066] bridge_slave_0: entered allmulticast mode [ 1113.861395][T31066] bridge_slave_0: entered promiscuous mode [ 1113.868673][T31066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.880623][T31066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.892340][T31066] bridge_slave_1: entered allmulticast mode [ 1113.898717][T31066] bridge_slave_1: entered promiscuous mode [ 1113.973983][ T453] usb 3-1: USB disconnect, device number 79 [ 1114.018372][T31066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.025462][T31066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.032785][T31066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.039835][T31066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.098291][T20709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.105676][T20709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.115531][T20709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.122632][T20709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.145831][ T405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.152927][ T405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.198197][T31066] veth0_vlan: entered promiscuous mode [ 1114.222347][T31066] veth1_macvtap: entered promiscuous mode [ 1114.346823][T31095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31095 comm=syz.6.30112 [ 1114.380702][T31095] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31095 comm=syz.6.30112 [ 1114.496224][T31107] netlink: 'syz.5.30118': attribute type 4 has an invalid length. [ 1114.665751][T31130] netlink: 'syz.5.30130': attribute type 4 has an invalid length. [ 1114.757554][T31138] loop5: detected capacity change from 0 to 7 [ 1115.012461][T31150] netlink: 'syz.5.30140': attribute type 4 has an invalid length. [ 1115.512485][ T36] audit: type=1400 audit(1763543162.726:9501): avc: denied { watch } for pid=31177 comm="syz.5.30154" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1115.548273][T31178] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 1115.573186][ T36] audit: type=1400 audit(1763543162.763:9502): avc: denied { relabelto } for pid=31177 comm="syz.5.30154" name="cgroup.procs" dev="cgroup" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1115.601205][ T36] audit: type=1400 audit(1763543162.763:9503): avc: denied { associate } for pid=31177 comm="syz.5.30154" name="cgroup.procs" dev="cgroup" ino=525 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 1115.946754][T31219] loop5: detected capacity change from 0 to 7 [ 1116.157566][ T36] audit: type=1326 audit(1763543163.326:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.6.30180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49498f6c9 code=0x7ffc0000 [ 1116.231597][ T36] audit: type=1326 audit(1763543163.326:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.6.30180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49498f6c9 code=0x7ffc0000 [ 1116.271437][ T36] audit: type=1326 audit(1763543163.354:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.6.30180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc49498f6c9 code=0x7ffc0000 [ 1116.315652][ T36] audit: type=1326 audit(1763543163.354:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.6.30180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49498f6c9 code=0x7ffc0000 [ 1116.347568][ T36] audit: type=1326 audit(1763543163.354:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31234 comm="syz.6.30180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49498f6c9 code=0x7ffc0000 [ 1116.954108][ T405] Bluetooth: hci0: Frame reassembly failed (-84) [ 1116.963483][T18012] Bluetooth: hci1: sending frame failed (-49) [ 1116.969817][T31291] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 1117.195881][T31311] netlink: 'syz.3.30216': attribute type 4 has an invalid length. [ 1117.216678][T31311] netlink: 17 bytes leftover after parsing attributes in process `syz.3.30216'. [ 1117.388274][T31324] netlink: 1328 bytes leftover after parsing attributes in process `syz.6.30221'. [ 1117.465019][ T36] audit: type=1400 audit(1763543164.526:9509): avc: denied { bind } for pid=31328 comm="syz.3.30224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1117.639237][ T330] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1117.652610][T31350] netlink: 'syz.3.30234': attribute type 1 has an invalid length. [ 1117.812563][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 1117.824493][ T330] usb 3-1: config 0 has an invalid interface number: 147 but max is 0 [ 1117.839350][ T330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.860594][ T330] usb 3-1: config 0 has no interface number 0 [ 1117.872585][ T330] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 40 [ 1117.901909][ T330] usb 3-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.930688][ T330] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44 [ 1117.943218][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.960358][ T330] usb 3-1: Product: syz [ 1117.968504][ T330] usb 3-1: Manufacturer: syz [ 1117.973230][T31380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30249'. [ 1117.982537][ T330] usb 3-1: SerialNumber: syz [ 1117.989878][ T330] usb 3-1: config 0 descriptor?? [ 1118.001203][T31323] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1118.009280][ T330] net1080 3-1:0.147: probe with driver net1080 failed with error -22 [ 1118.227414][ T858] usb 3-1: USB disconnect, device number 80 [ 1119.134326][T18013] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1119.134343][T31291] Bluetooth: hci0: command 0x1003 tx timeout [ 1120.855226][T31538] netlink: 'syz.3.30325': attribute type 4 has an invalid length. [ 1120.863166][T30828] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1121.030319][T30828] usb 7-1: Using ep0 maxpacket: 16 [ 1121.043166][T30828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.071401][T30828] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1121.087649][T30828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.106819][T30828] usb 7-1: config 0 descriptor?? [ 1121.115839][T31561] netlink: 'syz.5.30335': attribute type 4 has an invalid length. [ 1121.331942][T30828] usbhid 7-1:0.0: can't add hid device: -71 [ 1121.339642][T30828] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1121.351374][T30828] usb 7-1: USB disconnect, device number 2 [ 1121.572055][ T330] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1121.735109][ T330] usb 3-1: Using ep0 maxpacket: 8 [ 1121.746177][ T330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1121.768960][ T330] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.787334][ T330] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.797926][ T330] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.807145][ T330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.815321][ T330] usb 3-1: Product: syz [ 1121.819502][ T330] usb 3-1: Manufacturer: syz [ 1121.824293][ T330] usb 3-1: SerialNumber: syz [ 1122.053575][ T330] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1122.067092][ T330] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1122.089016][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1122.106831][ T330] usb 3-1: USB disconnect, device number 81 [ 1122.123148][T31597] netlink: 'syz.5.30352': attribute type 4 has an invalid length. [ 1122.798666][T31617] netlink: 'syz.2.30361': attribute type 4 has an invalid length. [ 1123.728085][ T330] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1123.890699][ T330] usb 7-1: Using ep0 maxpacket: 16 [ 1123.896929][ T330] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.908342][ T330] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1123.917418][ T330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.929220][ T330] usb 7-1: config 0 descriptor?? [ 1124.158242][ T330] usbhid 7-1:0.0: can't add hid device: -71 [ 1124.164748][ T330] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1124.175907][ T330] usb 7-1: USB disconnect, device number 3 [ 1124.703145][ T330] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1124.789799][ T4647] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1124.865637][ T330] usb 6-1: Using ep0 maxpacket: 16 [ 1124.871861][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.882925][ T330] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1124.891996][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.900602][ T330] usb 6-1: config 0 descriptor?? [ 1124.930810][ T4647] usb 3-1: device descriptor read/64, error -71 [ 1124.995645][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1125.124553][ T330] usbhid 6-1:0.0: can't add hid device: -71 [ 1125.130709][ T330] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1125.139529][ T330] usb 6-1: USB disconnect, device number 66 [ 1125.158172][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1125.164627][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1125.172987][ T31] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.183123][ T31] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.193449][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.202746][ T4647] usb 3-1: device descriptor read/64, error -71 [ 1125.209009][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.217287][ T31] usb 7-1: Product: syz [ 1125.221462][ T31] usb 7-1: Manufacturer: syz [ 1125.226086][ T31] usb 7-1: SerialNumber: syz [ 1125.452638][ T31] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1125.461613][ T4647] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1125.470417][ T31] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1125.480418][ T31] usb 7-1: USB disconnect, device number 4 [ 1125.487762][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1125.613241][ T4647] usb 3-1: device descriptor read/64, error -71 [ 1125.873224][ T4647] usb 3-1: device descriptor read/64, error -71 [ 1125.994169][ T4647] usb usb3-port1: attempt power cycle [ 1126.371609][ T4647] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1126.394339][ T4647] usb 3-1: device descriptor read/8, error -71 [ 1126.535192][ T4647] usb 3-1: device descriptor read/8, error -71 [ 1126.794150][ T4647] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1126.818183][ T4647] usb 3-1: device descriptor read/8, error -71 [ 1126.968477][ T4647] usb 3-1: device descriptor read/8, error -71 [ 1127.086762][ T4647] usb usb3-port1: unable to enumerate USB device [ 1127.346681][ T453] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1127.509193][ T453] usb 7-1: Using ep0 maxpacket: 16 [ 1127.515393][ T453] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.526344][ T453] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1127.535415][ T453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.544147][ T453] usb 7-1: config 0 descriptor?? [ 1127.752307][T31745] netlink: 'syz.3.30421': attribute type 4 has an invalid length. [ 1127.770919][ T453] usbhid 7-1:0.0: can't add hid device: -71 [ 1127.779802][ T453] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1127.795162][ T453] usb 7-1: USB disconnect, device number 5 [ 1128.173268][T31766] netlink: 'syz.5.30431': attribute type 4 has an invalid length. [ 1128.364319][T31773] tmpfs: Bad value for 'nr_inodes' [ 1128.508339][T31781] netlink: 'syz.6.30440': attribute type 4 has an invalid length. [ 1128.644607][T31798] tmpfs: Bad value for 'nr_inodes' [ 1128.668600][ T4647] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1128.831808][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1128.831827][ T36] audit: type=1400 audit(1763543175.030:9520): avc: denied { read } for pid=31814 comm="syz.6.30454" name="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1128.860482][ T4647] usb 6-1: Using ep0 maxpacket: 8 [ 1128.865638][ T36] audit: type=1400 audit(1763543175.030:9521): avc: denied { open } for pid=31814 comm="syz.6.30454" path="/" dev="configfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1128.893613][ T4647] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1128.902873][ T4647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.913284][ T4647] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1128.932329][ T4647] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1128.941720][ T4647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.949930][ T4647] usb 6-1: Product: syz [ 1128.954691][ T4647] usb 6-1: Manufacturer: syz [ 1128.959364][ T4647] usb 6-1: SerialNumber: syz [ 1129.190152][ T4647] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1129.216774][ T4647] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1129.227467][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1129.243456][ T4647] usb 6-1: USB disconnect, device number 67 [ 1131.183580][T31994] netlink: 'syz.5.30539': attribute type 4 has an invalid length. [ 1131.951260][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1132.113749][ T31] usb 7-1: device descriptor read/64, error -71 [ 1132.373800][ T31] usb 7-1: device descriptor read/64, error -71 [ 1132.518577][T32073] netlink: 'syz.5.30577': attribute type 4 has an invalid length. [ 1132.644629][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1132.785458][ T31] usb 7-1: device descriptor read/64, error -71 [ 1133.045503][ T31] usb 7-1: device descriptor read/64, error -71 [ 1133.114946][ T62] bridge_slave_1: left allmulticast mode [ 1133.120706][ T62] bridge_slave_1: left promiscuous mode [ 1133.126569][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.134500][ T62] bridge_slave_0: left allmulticast mode [ 1133.140172][ T62] bridge_slave_0: left promiscuous mode [ 1133.145853][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.164819][ T31] usb usb7-port1: attempt power cycle [ 1133.253381][T32098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.260565][T32098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.270138][T32098] bridge_slave_0: entered allmulticast mode [ 1133.276833][T32098] bridge_slave_0: entered promiscuous mode [ 1133.284699][ T62] veth1_macvtap: left promiscuous mode [ 1133.290337][ T62] veth0_vlan: left promiscuous mode [ 1133.356733][T32098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.365935][T32098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.373337][T32098] bridge_slave_1: entered allmulticast mode [ 1133.379763][T32098] bridge_slave_1: entered promiscuous mode [ 1133.466109][T32098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.473238][T32098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.480566][T32098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.487610][T32098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.513276][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.521441][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.534009][T20709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.541058][T20709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.554696][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1133.568166][T20709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.575247][T20709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.583896][ T31] usb 7-1: device descriptor read/8, error -71 [ 1133.592974][T32098] veth0_vlan: entered promiscuous mode [ 1133.606529][T32098] veth1_macvtap: entered promiscuous mode [ 1133.739848][ T31] usb 7-1: device descriptor read/8, error -71 [ 1134.020575][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1134.053775][ T31] usb 7-1: device descriptor read/8, error -71 [ 1134.195300][ T31] usb 7-1: device descriptor read/8, error -71 [ 1134.280595][ T45] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1134.313304][ T31] usb usb7-port1: unable to enumerate USB device [ 1134.443725][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 1134.450144][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.461072][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1134.470140][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.478872][ T45] usb 3-1: config 0 descriptor?? [ 1134.705070][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 1134.711575][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1134.720351][ T45] usb 3-1: USB disconnect, device number 86 [ 1134.963190][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1135.136508][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1135.142884][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.154177][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1135.163416][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.174545][ T9] usb 6-1: config 0 descriptor?? [ 1135.402531][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1135.411592][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1135.421108][ T9] usb 6-1: USB disconnect, device number 68 [ 1135.743224][ T453] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1135.884081][ T453] usb 7-1: device descriptor read/64, error -71 [ 1136.144099][ T453] usb 7-1: device descriptor read/64, error -71 [ 1136.404506][ T453] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1136.555968][ T453] usb 7-1: device descriptor read/64, error -71 [ 1136.653290][ T45] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1136.674960][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1136.815805][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 1136.815889][ T453] usb 7-1: device descriptor read/64, error -71 [ 1136.822186][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.838242][ T45] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1136.847272][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.856019][ T45] usb 6-1: config 0 descriptor?? [ 1136.859143][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1136.867776][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1136.876176][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.886467][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1136.896773][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1136.906032][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.914060][ T9] usb 3-1: Product: syz [ 1136.918244][ T9] usb 3-1: Manufacturer: syz [ 1136.922853][ T9] usb 3-1: SerialNumber: syz [ 1136.945917][ T453] usb usb7-port1: attempt power cycle [ 1137.079567][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 1137.085632][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1137.094576][ T45] usb 6-1: USB disconnect, device number 69 [ 1137.149763][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1137.159530][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1137.169447][ T9] usb 3-1: USB disconnect, device number 87 [ 1137.176623][T14336] udevd[14336]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1137.314177][ T453] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1137.336922][ T453] usb 7-1: device descriptor read/8, error -71 [ 1137.477725][ T453] usb 7-1: device descriptor read/8, error -71 [ 1137.736709][ T453] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1137.759420][ T453] usb 7-1: device descriptor read/8, error -71 [ 1137.900356][ T453] usb 7-1: device descriptor read/8, error -71 [ 1138.018576][ T453] usb usb7-port1: unable to enumerate USB device [ 1138.657117][T32237] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 1138.691025][T28987] ------------[ cut here ]------------ [ 1138.704570][T28987] WARNING: CPU: 0 PID: 28987 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 1138.712722][T28987] Modules linked in: [ 1138.716648][T28987] CPU: 0 UID: 0 PID: 28987 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1138.728498][T28987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1138.738600][T28987] RIP: 0010:drop_nlink+0xce/0x110 [ 1138.743656][T28987] Code: 04 00 00 be 08 00 00 00 e8 cf 54 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 e4 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 1138.763306][T28987] RSP: 0018:ffffc9000077fc60 EFLAGS: 00010293 [ 1138.769421][T28987] RAX: ffffffff81ee1a7e RBX: ffff88812df7b0c8 RCX: ffff88813cab4c00 [ 1138.777476][T28987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1138.783467][ T36] audit: type=1400 audit(1763543184.167:9522): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[1487]" dev="pipefs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1138.785773][T28987] RBP: ffffc9000077fc88 R08: 0000000000000003 R09: 0000000000000004 [ 1138.816681][T28987] R10: dffffc0000000000 R11: fffff520000eff7c R12: dffffc0000000000 [ 1138.824738][T28987] R13: 1ffff11025bef622 R14: ffff88812df7b110 R15: 0000000000000000 [ 1138.832753][T28987] FS: 00005555894b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1138.841895][T28987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1138.848504][T28987] CR2: 00005555894d94e8 CR3: 000000010c7ba000 CR4: 00000000003526b0 [ 1138.856531][T28987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300002a [ 1138.864550][T28987] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1138.872550][T28987] Call Trace: [ 1138.875890][T28987] [ 1138.878842][T28987] shmem_rmdir+0x5f/0x90 [ 1138.883118][T28987] vfs_rmdir+0x3dd/0x560 [ 1138.887416][T28987] incfs_kill_sb+0x109/0x230 [ 1138.892047][T28987] deactivate_locked_super+0xd5/0x2a0 [ 1138.897603][T28987] deactivate_super+0xb8/0xe0 [ 1138.902318][T28987] cleanup_mnt+0x3f1/0x480 [ 1138.906805][T28987] __cleanup_mnt+0x1d/0x40 [ 1138.911243][T28987] task_work_run+0x1e0/0x250 [ 1138.915835][T28987] ? __cfi_task_work_run+0x10/0x10 [ 1138.920970][T28987] ? __x64_sys_umount+0x126/0x170 [ 1138.926023][T28987] ? __cfi___x64_sys_umount+0x10/0x10 [ 1138.931424][T28987] ? __kasan_check_read+0x15/0x20 [ 1138.936477][T28987] resume_user_mode_work+0x36/0x50 [ 1138.941611][T28987] syscall_exit_to_user_mode+0x64/0xb0 [ 1138.947087][T28987] do_syscall_64+0x64/0xf0 [ 1138.951528][T28987] ? clear_bhb_loop+0x50/0xa0 [ 1138.956234][T28987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1138.962149][T28987] RIP: 0033:0x7fadd9d909f7 [ 1138.966584][T28987] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1138.986431][T28987] RSP: 002b:00007ffee3f419c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1138.994976][T28987] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadd9d909f7 [ 1139.002971][T28987] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee3f41a80 [ 1139.010970][T28987] RBP: 00007ffee3f41a80 R08: 0000000000000000 R09: 0000000000000000 [ 1139.018978][T28987] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee3f42b10 [ 1139.026982][T28987] R13: 00007fadd9e11d7d R14: 0000000000114118 R15: 00007ffee3f42b50 [ 1139.034969][T28987] [ 1139.038036][T28987] ---[ end trace 0000000000000000 ]--- [ 1139.043732][T28987] ================================================================== [ 1139.051827][T28987] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 1139.058096][T28987] Write of size 4 at addr 0000000000000168 by task syz-executor/28987 [ 1139.066269][T28987] [ 1139.068617][T28987] CPU: 0 UID: 0 PID: 28987 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1139.068656][T28987] Tainted: [W]=WARN [ 1139.068666][T28987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1139.068680][T28987] Call Trace: [ 1139.068689][T28987] [ 1139.068699][T28987] __dump_stack+0x21/0x30 [ 1139.068732][T28987] dump_stack_lvl+0x10c/0x190 [ 1139.068762][T28987] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1139.068795][T28987] print_report+0x3d/0x70 [ 1139.068819][T28987] kasan_report+0x163/0x1a0 [ 1139.068845][T28987] ? ihold+0x24/0x70 [ 1139.068870][T28987] ? _raw_spin_unlock+0x45/0x60 [ 1139.068899][T28987] ? ihold+0x24/0x70 [ 1139.068923][T28987] kasan_check_range+0x299/0x2a0 [ 1139.068951][T28987] __kasan_check_write+0x18/0x20 [ 1139.068984][T28987] ihold+0x24/0x70 [ 1139.069007][T28987] vfs_rmdir+0x26a/0x560 [ 1139.069038][T28987] incfs_kill_sb+0x109/0x230 [ 1139.069073][T28987] deactivate_locked_super+0xd5/0x2a0 [ 1139.069103][T28987] deactivate_super+0xb8/0xe0 [ 1139.069132][T28987] cleanup_mnt+0x3f1/0x480 [ 1139.069157][T28987] __cleanup_mnt+0x1d/0x40 [ 1139.069182][T28987] task_work_run+0x1e0/0x250 [ 1139.069209][T28987] ? __cfi_task_work_run+0x10/0x10 [ 1139.069237][T28987] ? __x64_sys_umount+0x126/0x170 [ 1139.069268][T28987] ? __cfi___x64_sys_umount+0x10/0x10 [ 1139.069301][T28987] ? __kasan_check_read+0x15/0x20 [ 1139.069336][T28987] resume_user_mode_work+0x36/0x50 [ 1139.069364][T28987] syscall_exit_to_user_mode+0x64/0xb0 [ 1139.069389][T28987] do_syscall_64+0x64/0xf0 [ 1139.069418][T28987] ? clear_bhb_loop+0x50/0xa0 [ 1139.069443][T28987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1139.069467][T28987] RIP: 0033:0x7fadd9d909f7 [ 1139.069493][T28987] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1139.069514][T28987] RSP: 002b:00007ffee3f419c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1139.069539][T28987] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadd9d909f7 [ 1139.069556][T28987] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee3f41a80 [ 1139.069571][T28987] RBP: 00007ffee3f41a80 R08: 0000000000000000 R09: 0000000000000000 [ 1139.069586][T28987] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee3f42b10 [ 1139.069603][T28987] R13: 00007fadd9e11d7d R14: 0000000000114118 R15: 00007ffee3f42b50 [ 1139.069623][T28987] [ 1139.069632][T28987] ================================================================== [ 1139.313818][T28987] Disabling lock debugging due to kernel taint [ 1139.320091][T28987] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 1139.327914][T28987] #PF: supervisor write access in kernel mode [ 1139.333991][T28987] #PF: error_code(0x0002) - not-present page [ 1139.339972][T28987] PGD 800000011c1ec067 P4D 800000011c1ec067 PUD 0 [ 1139.346495][T28987] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 1139.352569][T28987] CPU: 0 UID: 0 PID: 28987 Comm: syz-executor Tainted: G B W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 1139.365861][T28987] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1139.370880][T28987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1139.380935][T28987] RIP: 0010:ihold+0x2a/0x70 [ 1139.385449][T28987] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 1139.405060][T28987] RSP: 0018:ffffc9000077fca0 EFLAGS: 00010246 [ 1139.411145][T28987] RAX: ffff88813cab4c00 RBX: 0000000000000000 RCX: ffff88813cab4c00 [ 1139.419123][T28987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.427095][T28987] RBP: ffffc9000077fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 1139.435083][T28987] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88812df7b0d4 [ 1139.443056][T28987] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1139.451031][T28987] FS: 00005555894b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1139.459961][T28987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1139.466555][T28987] CR2: 0000000000000168 CR3: 000000010c7ba000 CR4: 00000000003526b0 [ 1139.474531][T28987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300002a [ 1139.482504][T28987] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1139.490482][T28987] Call Trace: [ 1139.493763][T28987] [ 1139.496702][T28987] vfs_rmdir+0x26a/0x560 [ 1139.500960][T28987] incfs_kill_sb+0x109/0x230 [ 1139.505568][T28987] deactivate_locked_super+0xd5/0x2a0 [ 1139.510951][T28987] deactivate_super+0xb8/0xe0 [ 1139.515636][T28987] cleanup_mnt+0x3f1/0x480 [ 1139.520060][T28987] __cleanup_mnt+0x1d/0x40 [ 1139.524484][T28987] task_work_run+0x1e0/0x250 [ 1139.529088][T28987] ? __cfi_task_work_run+0x10/0x10 [ 1139.534207][T28987] ? __x64_sys_umount+0x126/0x170 [ 1139.539245][T28987] ? __cfi___x64_sys_umount+0x10/0x10 [ 1139.544634][T28987] ? __kasan_check_read+0x15/0x20 [ 1139.549673][T28987] resume_user_mode_work+0x36/0x50 [ 1139.554794][T28987] syscall_exit_to_user_mode+0x64/0xb0 [ 1139.560263][T28987] do_syscall_64+0x64/0xf0 [ 1139.564693][T28987] ? clear_bhb_loop+0x50/0xa0 [ 1139.569380][T28987] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1139.575282][T28987] RIP: 0033:0x7fadd9d909f7 [ 1139.579698][T28987] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1139.599312][T28987] RSP: 002b:00007ffee3f419c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1139.607739][T28987] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadd9d909f7 [ 1139.615722][T28987] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee3f41a80 [ 1139.623713][T28987] RBP: 00007ffee3f41a80 R08: 0000000000000000 R09: 0000000000000000 [ 1139.631699][T28987] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee3f42b10 [ 1139.639675][T28987] R13: 00007fadd9e11d7d R14: 0000000000114118 R15: 00007ffee3f42b50 [ 1139.647657][T28987] [ 1139.650681][T28987] Modules linked in: [ 1139.654580][T28987] CR2: 0000000000000168 [ 1139.658817][T28987] ---[ end trace 0000000000000000 ]--- [ 1139.664268][T28987] RIP: 0010:ihold+0x2a/0x70 [ 1139.668783][T28987] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 1d db 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 8c 4b ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 2d [ 1139.688394][T28987] RSP: 0018:ffffc9000077fca0 EFLAGS: 00010246 [ 1139.694555][T28987] RAX: ffff88813cab4c00 RBX: 0000000000000000 RCX: ffff88813cab4c00 [ 1139.702533][T28987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.710507][T28987] RBP: ffffc9000077fcb0 R08: ffffffff88972947 R09: 1ffffffff112e528 [ 1139.718483][T28987] R10: dffffc0000000000 R11: fffffbfff112e529 R12: ffff88812df7b0d4 [ 1139.726464][T28987] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1139.734439][T28987] FS: 00005555894b6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1139.743375][T28987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1139.749964][T28987] CR2: 0000000000000168 CR3: 000000010c7ba000 CR4: 00000000003526b0 [ 1139.757944][T28987] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000300002a [ 1139.765922][T28987] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1139.773906][T28987] Kernel panic - not syncing: Fatal exception [ 1139.780241][T28987] Kernel Offset: disabled [ 1139.784563][T28987] Rebooting in 86400 seconds..