last executing test programs: 10.009631991s ago: executing program 4 (id=765): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xf, 0x2f, {0x2f, 0x23, "2a702d5f700fbeffae8675758d522d8d92de1ca98eb82434d8160219856e781b7dcacc4b9355790c43a18807e6"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0xc0, 0x40}}, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0xe}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0x100}) 6.41413854s ago: executing program 1 (id=783): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_dev$MSR(0x0, 0x800000000000e6ae, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 6.381827548s ago: executing program 4 (id=785): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 6.205252363s ago: executing program 1 (id=788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x3, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$FIBMAP(r2, 0x2275, &(0x7f0000000180)=0xa98) 5.682452472s ago: executing program 4 (id=791): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) 5.654028181s ago: executing program 1 (id=792): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x1207) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 5.360299883s ago: executing program 4 (id=796): r0 = syz_open_dev$video4linux(&(0x7f0000000380), 0xfff, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x6, 0x5, 0x1, 0x3, 0x9, 0x5, 0x1, 0x100, 0x9, 0x9, 0x7fffffff, 0x8001, 0x6, 0x1ffc000, 0x0, 0x0, {0x400}, 0x3, 0x1}}) 4.740446687s ago: executing program 4 (id=799): r0 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a70000002000001090224000100000000090400000103000000092100000001220500"], 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000eeff00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000040), &(0x7f0000000140)=""/42}, 0x20) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 4.575759308s ago: executing program 2 (id=802): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cpu_byteorder', 0x6b0240, 0x102) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000}}]}, 0x40}}, 0x20050000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0xad5, 0x0, 0x4}, {0xb64, 0x0, 0x2}, {0x38c, 0x0, 0x6}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.574569984s ago: executing program 1 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x82, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb758, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0x60000000, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 4.146949872s ago: executing program 0 (id=804): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 4.102219717s ago: executing program 1 (id=805): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x20000000, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r7, 0x0, &(0x7f0000002080)={0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) 4.071585191s ago: executing program 0 (id=806): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000100020075"], 0x8) 3.990137346s ago: executing program 2 (id=807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) renameat(r4, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1f9a, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x258, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x900}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.875013192s ago: executing program 3 (id=808): r0 = syz_open_dev$usbfs(0x0, 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) 3.867196094s ago: executing program 0 (id=809): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={0x0}, 0x1, 0x0, 0x4000000000000000}, 0x0) 3.258229616s ago: executing program 3 (id=810): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x4}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x564}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) 3.257771167s ago: executing program 0 (id=811): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) 3.080151134s ago: executing program 2 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.078486243s ago: executing program 1 (id=813): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/93, 0x5d}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2.166399942s ago: executing program 3 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2.165767857s ago: executing program 2 (id=815): r0 = socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x4, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x484d, 0x4, 0x7, 0x8, 0x40, 0xc0f, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0x1000, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x1ff, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x82, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x7, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb758, 0x2, 0xb9, 0x4, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0x60000000, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 2.129231461s ago: executing program 3 (id=816): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x3, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 2.08309216s ago: executing program 2 (id=817): bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/cpu_byteorder', 0x6b0240, 0x102) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x40, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x10}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000}}]}, 0x40}}, 0x20050000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [{0xad5, 0x0, 0x4}, {0xb64, 0x0, 0x2}, {0x38c, 0x0, 0x6}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.077998112s ago: executing program 3 (id=818): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa0100fe}, @typed={0x4, 0x10}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x4001c00) 1.96986535s ago: executing program 0 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000480)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xa1, 0x5, 0x1, 0xb4, 0x3, 0x0, "a7402fc1b44599427f2629a9d4df81f8eef743da6b1a5ae6646536d3a80a85a478b41ac83117d21a508127f435652e1847f8b0a619e321d4061f0adb2f472911ea028ee0d6ae78c625646865a2a30d0c3e9456142d1f6da0f3190b8114bed96fdd7303532b5386d3a24e8a92786dcda6fae18d59f6aab4140bdaf792ef9ccf358edfc36099dbe04f922b05bf7ba858e1ed7841b96ab9a3a038b6a60ffc976cd25e"}}, 0x1b9) setpgid(r1, r5) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000000c0)={0x2, 0x100, 0x7, {0x0, 0x2, 0x8, 0xfffffff9}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 800.018356ms ago: executing program 2 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) 574.354776ms ago: executing program 4 (id=821): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)='u', 0x1, 0x20040840, &(0x7f0000000040)={0xa, 0x0, 0x117, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 406.054238ms ago: executing program 3 (id=822): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) r5 = socket$unix(0x1, 0x2, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10000081, 0xffdfffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x4, 0x300}}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f00000000c0)={0xffffffff, 0x20323159, 0x500, 0x2d0, 0x3, @stepwise={{0x1, 0xfff7fffb}, {0x4, 0x4c7}, {0x0, 0x2}}}) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo}}}}, 0x0) 0s ago: executing program 0 (id=823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) renameat(r4, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1f9a, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x258, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x10}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x900}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): hmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10760kB pagetables:3472kB sec_pagetables:0kB all_unreclaimable? no [ 65.724012][ T5921] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 65.812484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.108212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 66.148502][ T5954] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 66.198432][ T5921] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.261606][ T5921] lowmem_reserve[]: 0 2487 2487 0 0 [ 66.266984][ T5921] Node 0 DMA32 free:1369368kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21116kB inactive_anon:0kB active_file:5336kB inactive_file:153992kB unevictable:1536kB writepending:6768kB present:3129332kB managed:2547384kB mlocked:0kB bounce:0kB free_pcp:2044kB local_pcp:484kB free_cma:0kB [ 66.374651][ T5958] mmap: syz.1.18 (5958) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 66.447769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.585227][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 66.681029][ T5921] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 66.708318][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 66.708332][ T29] audit: type=1400 audit(1740472878.231:175): avc: denied { create } for pid=5957 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.786802][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 66.792537][ T29] audit: type=1400 audit(1740472878.231:176): avc: denied { ioctl } for pid=5957 comm="syz.4.19" path="socket:[8251]" dev="sockfs" ino=8251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.819181][ T5921] Node 1 Normal free:3906044kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:160kB free_cma:0kB [ 66.923285][ T29] audit: type=1400 audit(1740472878.231:177): avc: denied { setopt } for pid=5957 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.951300][ T29] audit: type=1400 audit(1740472878.231:178): avc: denied { write } for pid=5957 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.305056][ T5961] syz.4.20 (5961): drop_caches: 2 [ 67.310892][ T29] audit: type=1400 audit(1740472878.401:179): avc: denied { create } for pid=5960 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 67.330453][ T5921] lowmem_reserve[]: 0 0 0 0 0 [ 67.335235][ T5921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 67.567560][ T5921] Node 0 DMA32: 170*4kB (UME) 129*8kB (UME) 98*16kB (UME) 317*32kB (UME) 78*64kB (UME) 12*128kB (UME) 15*256kB (ME) 7*512kB (M) 4*1024kB (M) 3*2048kB (M) 329*4096kB (M) = 1385200kB [ 67.617776][ T5921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 67.634758][ T5921] Node 1 Normal: 233*4kB (UE) 55*8kB (UME) 34*16kB (UME) 196*32kB (UME) 85*64kB (UME) 38*128kB (UME) 18*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3906108kB [ 67.662602][ T5921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.697579][ T5921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.707294][ T5921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 67.722610][ T5921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 67.754019][ T29] audit: type=1400 audit(1740472879.271:180): avc: denied { setopt } for pid=5964 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.773249][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.912346][ T5921] 41338 total pagecache pages [ 67.912518][ T5921] 0 pages in swap cache [ 67.912643][ T5921] Free swap = 124996kB [ 67.912831][ T5921] Total swap = 124996kB [ 67.913007][ T5921] 2097051 pages RAM [ 67.913133][ T5921] 0 pages HighMem/MovableOnly [ 67.913259][ T5921] 428547 pages reserved [ 67.913430][ T5921] 0 pages cma reserved [ 68.077968][ T29] audit: type=1400 audit(1740472879.281:181): avc: denied { bind } for pid=5964 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.078003][ T29] audit: type=1400 audit(1740472879.281:182): avc: denied { name_bind } for pid=5964 comm="syz.1.22" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.078031][ T29] audit: type=1400 audit(1740472879.281:183): avc: denied { node_bind } for pid=5964 comm="syz.1.22" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.078059][ T29] audit: type=1400 audit(1740472879.291:184): avc: denied { write } for pid=5964 comm="syz.1.22" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.120889][ T5972] kAFS: No cell specified [ 69.546088][ T5974] infiniband syz2: set active [ 69.546114][ T5974] infiniband syz2: added veth1_to_bridge [ 69.620235][ T5974] RDS/IB: syz2: added [ 69.620357][ T5974] smc: adding ib device syz2 with port count 1 [ 69.620393][ T5974] smc: ib device syz2 port 1 has pnetid [ 69.968446][ T5863] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 69.976757][ T5988] Zero length message leads to an empty skb [ 70.342061][ T5992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5992 comm=syz.1.29 [ 70.748720][ T5993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.28'. [ 71.250930][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.251108][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365511][ T5863] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.370939][ T5863] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 71.447928][ T5863] usb 5-1: can't read configurations, error -71 [ 71.848042][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 71.848073][ T29] audit: type=1400 audit(1740472883.331:210): avc: denied { create } for pid=5996 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.215077][ T29] audit: type=1400 audit(1740472883.451:211): avc: denied { ioctl } for pid=5996 comm="syz.1.30" path="socket:[7117]" dev="sockfs" ino=7117 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.261409][ T6008] overlay: Unknown parameter 'dont_measure' [ 72.304274][ T29] audit: type=1400 audit(1740472883.841:212): avc: denied { create } for pid=6007 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.668879][ T29] audit: type=1400 audit(1740472884.001:213): avc: denied { create } for pid=6010 comm="syz.4.35" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.836768][ T29] audit: type=1400 audit(1740472884.001:214): avc: denied { ioctl } for pid=6010 comm="syz.4.35" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8344 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.972840][ T29] audit: type=1400 audit(1740472884.181:215): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.012821][ T29] audit: type=1400 audit(1740472884.461:216): avc: denied { bind } for pid=6016 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.128916][ T29] audit: type=1400 audit(1740472884.461:217): avc: denied { setopt } for pid=6016 comm="syz.0.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.187365][ T29] audit: type=1400 audit(1740472884.461:218): avc: denied { ioctl } for pid=6016 comm="syz.0.37" path="socket:[8356]" dev="sockfs" ino=8356 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.223129][ T29] audit: type=1400 audit(1740472884.501:219): avc: denied { create } for pid=6020 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.381050][ T8] cfg80211: failed to load regulatory.db [ 76.437663][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 76.498744][ T6052] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 77.605128][ T6071] trusted_key: syz.3.55 sent an empty control message without MSG_MORE. [ 77.650826][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 77.650841][ T29] audit: type=1400 audit(1740472889.191:234): avc: denied { connect } for pid=6064 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.749111][ T29] audit: type=1400 audit(1740472889.281:235): avc: denied { shutdown } for pid=6064 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.908480][ T29] audit: type=1400 audit(1740472889.441:236): avc: denied { create } for pid=6070 comm="syz.0.56" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.248826][ T29] audit: type=1400 audit(1740472889.481:237): avc: denied { write } for pid=6070 comm="syz.0.56" name="file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.035125][ T29] audit: type=1400 audit(1740472889.481:238): avc: denied { open } for pid=6070 comm="syz.0.56" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.169964][ T29] audit: type=1400 audit(1740472889.501:239): avc: denied { ioctl } for pid=6070 comm="syz.0.56" path="/8/file0" dev="tmpfs" ino=61 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.194388][ T5816] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 79.194653][ T29] audit: type=1400 audit(1740472889.731:240): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.523260][ T29] audit: type=1400 audit(1740472890.031:241): avc: denied { read } for pid=6077 comm="syz.4.58" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.544370][ T29] audit: type=1400 audit(1740472890.711:242): avc: denied { create } for pid=6089 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 79.634128][ T29] audit: type=1400 audit(1740472891.021:243): avc: denied { map } for pid=6088 comm="syz.0.63" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.753719][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 80.667902][ T5906] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.861655][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 80.897899][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 80.952541][ T5906] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 80.981124][ T5906] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 81.006624][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 81.016035][ T5906] usb 2-1: config 1 has no interface number 0 [ 81.027278][ T5906] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 81.046382][ T5906] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 81.065386][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 81.076281][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.093851][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 81.197677][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 81.267653][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.300474][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 81.359400][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 81.394759][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 81.416537][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.430352][ T5863] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 81.430915][ T45] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 81.449587][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.462855][ T5863] usb 3-1: config 0 has no interface number 0 [ 81.466553][ T45] usb 4-1: Product: syz [ 81.482141][ T45] usb 4-1: Manufacturer: syz [ 81.486868][ T45] usb 4-1: SerialNumber: syz [ 81.517583][ T5863] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=de.0f [ 81.522977][ T45] usb 4-1: config 0 descriptor?? [ 81.546255][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.546393][ T6109] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.593019][ T45] option 4-1:0.0: GSM modem (1-port) converter detected [ 81.593775][ T5863] usb 3-1: config 0 descriptor?? [ 81.664066][ T5863] keyspan 3-1:0.65: Keyspan 1 port adapter converter detected [ 81.697053][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 87 [ 81.721243][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 7 [ 81.737680][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 81 [ 81.745879][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 1 [ 81.749467][ T45] usb 2-1: USB disconnect, device number 3 [ 81.760363][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 2 [ 81.766030][ T45] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 81.921546][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 85 [ 81.931647][ T5863] keyspan 3-1:0.65: found no endpoint descriptor for endpoint 5 [ 81.975587][ T5906] usb 4-1: USB disconnect, device number 2 [ 82.507083][ T5863] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 82.550786][ T6116] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 82.562638][ T5906] option 4-1:0.0: device disconnected [ 82.602190][ T6116] netlink: 'syz.2.71': attribute type 62 has an invalid length. [ 82.651018][ T5863] usb 3-1: USB disconnect, device number 2 [ 82.676227][ T5863] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 82.698459][ T5863] keyspan 3-1:0.65: device disconnected [ 83.291079][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 83.291094][ T29] audit: type=1400 audit(1740472894.831:252): avc: denied { write } for pid=6135 comm="syz.3.78" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.655574][ T29] audit: type=1400 audit(1740472895.191:253): avc: denied { mounton } for pid=6147 comm="syz.1.83" path="/14/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.680190][ T6146] ======================================================= [ 83.680190][ T6146] WARNING: The mand mount option has been deprecated and [ 83.680190][ T6146] and is ignored by this kernel. Remove the mand [ 83.680190][ T6146] option from the mount to silence this warning. [ 83.680190][ T6146] ======================================================= [ 83.806748][ T6146] zonefs (nullb0) ERROR: Not a zoned block device [ 83.816049][ T45] kernel write not supported for file /snd/seq (pid: 45 comm: kworker/1:1) [ 84.585423][ T29] audit: type=1400 audit(1740472896.121:254): avc: denied { read } for pid=6154 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.629514][ T6159] input: syz0 as /devices/virtual/input/input8 [ 84.899151][ T29] audit: type=1400 audit(1740472896.421:255): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2755 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.095563][ T29] audit: type=1400 audit(1740472896.631:256): avc: denied { connect } for pid=6165 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.584043][ T29] audit: type=1400 audit(1740472896.871:257): avc: denied { write } for pid=6165 comm="syz.0.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.707358][ T29] audit: type=1400 audit(1740472898.221:258): avc: denied { read write } for pid=6173 comm="syz.1.91" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.790710][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.89'. [ 86.811745][ T6175] loop6: detected capacity change from 0 to 524287999 [ 86.842285][ T29] audit: type=1400 audit(1740472898.231:259): avc: denied { open } for pid=6173 comm="syz.1.91" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.090775][ T29] audit: type=1400 audit(1740472898.301:260): avc: denied { append } for pid=6173 comm="syz.1.91" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.114982][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.122823][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.124797][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.143905][ C0] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 87.152526][ C0] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.162404][ C0] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 87.171005][ C0] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.180889][ C0] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 87.189475][ C0] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.199355][ C0] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 87.207913][ C0] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.217764][ C0] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 87.226297][ C0] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.236186][ C0] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 87.245318][ C0] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.255179][ C0] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 87.263787][ C0] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.273627][ C0] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 87.421428][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 87.433800][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 87.445264][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.552675][ T45] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 87.577719][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.994448][ T45] usb 4-1: Product: syz [ 87.999109][ T45] usb 4-1: Manufacturer: syz [ 88.004046][ T45] usb 4-1: SerialNumber: syz [ 88.078654][ T45] usb 4-1: config 0 descriptor?? [ 88.086329][ T6172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.096128][ T45] option 4-1:0.0: GSM modem (1-port) converter detected [ 88.107635][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.164851][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 88.175315][ T6192] vlan0: entered promiscuous mode [ 88.183714][ T6192] vlan0: entered allmulticast mode [ 88.190002][ T6192] veth0_vlan: entered allmulticast mode [ 88.205666][ T6192] vlan0: left promiscuous mode [ 88.212432][ T6192] vlan0: left allmulticast mode [ 88.217406][ T6192] veth0_vlan: left allmulticast mode [ 88.227600][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.287725][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 88.294504][ T8] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 88.296563][ T6195] process 'syz.1.98' launched './file0' with NULL argv: empty string added [ 88.326519][ T8] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 88.331508][ T29] audit: type=1400 audit(1740472899.831:261): avc: denied { execute } for pid=6194 comm="syz.1.98" name="file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.361534][ T45] usb 4-1: USB disconnect, device number 3 [ 88.374382][ T8] usb 3-1: config 8 has no interface number 0 [ 88.382796][ T29] audit: type=1400 audit(1740472899.911:262): avc: denied { execute_no_trans } for pid=6194 comm="syz.1.98" path="/18/file0" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.384030][ T8] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 88.417575][ T45] option 4-1:0.0: device disconnected [ 88.435183][ T8] usb 3-1: config 8 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.457446][ T8] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 88.458230][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 88.467379][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.487398][ T8] usb 3-1: Product: syz [ 88.492820][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.501175][ T8] usb 3-1: Manufacturer: syz [ 88.512864][ T8] usb 3-1: SerialNumber: syz [ 88.529711][ T5906] usb 5-1: config 0 has no interfaces? [ 88.671763][ T5906] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 88.688061][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.697742][ T5906] usb 5-1: Product: syz [ 88.705065][ T5906] usb 5-1: Manufacturer: syz [ 88.710491][ T5906] usb 5-1: SerialNumber: syz [ 89.493019][ T5906] usb 5-1: config 0 descriptor?? [ 89.763691][ T8] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 90.059161][ T8] usb 3-1: USB disconnect, device number 3 [ 90.100996][ T29] audit: type=1326 audit(1740472901.641:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.143393][ T29] audit: type=1326 audit(1740472901.641:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.172586][ T29] audit: type=1326 audit(1740472901.641:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.195817][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.293861][ T29] audit: type=1326 audit(1740472901.641:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.319306][ T29] audit: type=1326 audit(1740472901.641:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.898046][ T29] audit: type=1326 audit(1740472901.641:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.932920][ T29] audit: type=1326 audit(1740472901.641:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.956876][ T29] audit: type=1326 audit(1740472901.641:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6207 comm="syz.3.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04b298d169 code=0x7fc00000 [ 90.980118][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.092924][ T8] usb 5-1: USB disconnect, device number 4 [ 92.203858][ T6249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.110'. [ 92.517707][ T25] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 93.312324][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 93.383640][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 93.478414][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.611858][ T25] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 93.621630][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.721783][ T25] usb 3-1: Product: syz [ 93.731208][ T25] usb 3-1: Manufacturer: syz [ 93.735837][ T25] usb 3-1: SerialNumber: syz [ 93.742429][ T25] usb 3-1: config 0 descriptor?? [ 93.747935][ T6298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.774926][ T25] option 3-1:0.0: GSM modem (1-port) converter detected [ 93.787659][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 93.787672][ T29] audit: type=1400 audit(1740472905.321:335): avc: denied { mount } for pid=6321 comm="syz.4.115" name="/" dev="autofs" ino=9607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 93.922041][ T29] audit: type=1400 audit(1740472905.401:336): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 93.952688][ T29] audit: type=1400 audit(1740472905.491:337): avc: denied { read } for pid=6327 comm="syz.4.118" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.023478][ T25] usb 3-1: USB disconnect, device number 4 [ 94.151542][ T6329] sd 0:0:1:0: device reset [ 94.223667][ T25] option 3-1:0.0: device disconnected [ 94.257539][ T29] audit: type=1400 audit(1740472905.491:338): avc: denied { open } for pid=6327 comm="syz.4.118" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.281272][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.371358][ T29] audit: type=1400 audit(1740472905.651:339): avc: denied { ioctl } for pid=6327 comm="syz.4.118" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 94.396556][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.403445][ T5912] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.632204][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.672205][ T5912] usb 4-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 94.779720][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.901379][ T5912] usb 4-1: config 0 descriptor?? [ 95.157628][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 95.790019][ T5912] thrustmaster 0003:044F:B300.0001: bogus close delimiter [ 95.797194][ T5912] thrustmaster 0003:044F:B300.0001: item 0 4 2 10 parsing failed [ 95.824986][ T5912] thrustmaster 0003:044F:B300.0001: parse failed [ 95.832082][ T5912] thrustmaster 0003:044F:B300.0001: probe with driver thrustmaster failed with error -22 [ 95.867826][ T5912] usb 4-1: USB disconnect, device number 4 [ 95.892505][ T8] usb 2-1: config 0 has no interfaces? [ 95.902076][ T8] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 95.921420][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 95.940546][ T8] usb 2-1: Product: syz [ 95.947655][ T8] usb 2-1: Manufacturer: syz [ 95.975151][ T8] usb 2-1: SerialNumber: syz [ 96.022900][ T8] usb 2-1: config 0 descriptor?? [ 96.604749][ T29] audit: type=1400 audit(1740472908.131:340): avc: denied { connect } for pid=6353 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.165352][ T29] audit: type=1400 audit(1740472908.651:341): avc: denied { mount } for pid=6363 comm="syz.2.130" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.023231][ T29] audit: type=1400 audit(1740472909.421:342): avc: denied { bind } for pid=6337 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 98.042980][ T29] audit: type=1400 audit(1740472909.421:343): avc: denied { name_bind } for pid=6337 comm="syz.1.121" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 98.063923][ T29] audit: type=1400 audit(1740472909.421:344): avc: denied { node_bind } for pid=6337 comm="syz.1.121" saddr=ff01::1 src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 98.462358][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 98.920132][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 99.269109][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 99.329607][ T5863] usb 2-1: USB disconnect, device number 4 [ 99.337609][ T29] audit: type=1400 audit(1740472910.871:345): avc: denied { create } for pid=6390 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.351439][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 100.071636][ T29] audit: type=1400 audit(1740472911.121:346): avc: denied { append } for pid=6388 comm="syz.2.137" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.114995][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 100.158899][ T29] audit: type=1400 audit(1740472911.591:347): avc: denied { setopt } for pid=6390 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.187600][ T8] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 100.196662][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.207563][ T8] usb 5-1: Product: syz [ 100.211730][ T8] usb 5-1: Manufacturer: syz [ 100.453036][ T29] audit: type=1400 audit(1740472911.801:348): avc: denied { read append } for pid=6395 comm="syz.3.139" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.476503][ T8] usb 5-1: SerialNumber: syz [ 100.481886][ T29] audit: type=1400 audit(1740472911.801:349): avc: denied { open } for pid=6395 comm="syz.3.139" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 100.509982][ T8] usb 5-1: config 0 descriptor?? [ 100.517061][ T6379] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 100.531247][ T8] option 5-1:0.0: GSM modem (1-port) converter detected [ 100.562098][ T6400] Bluetooth: MGMT ver 1.23 [ 101.045717][ T45] usb 5-1: USB disconnect, device number 5 [ 101.130834][ T45] option 5-1:0.0: device disconnected [ 101.188208][ T29] audit: type=1400 audit(1740472912.101:350): avc: denied { setopt } for pid=6395 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.257664][ T29] audit: type=1400 audit(1740472912.111:351): avc: denied { read } for pid=6395 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.728308][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 102.737295][ T6421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.144'. [ 102.750836][ T29] audit: type=1400 audit(1740472914.261:352): avc: denied { bind } for pid=6413 comm="syz.3.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.117813][ T29] audit: type=1400 audit(1740472916.561:353): avc: denied { read } for pid=6445 comm="syz.0.155" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.145356][ T29] audit: type=1400 audit(1740472916.561:354): avc: denied { open } for pid=6445 comm="syz.0.155" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 105.469349][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 105.486531][ T6449] overlayfs: failed to get inode (-116) [ 105.492620][ T6449] overlayfs: failed to get inode (-116) [ 105.687572][ T29] audit: type=1400 audit(1740472917.211:355): avc: denied { create } for pid=6462 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.817712][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 105.973882][ T29] audit: type=1400 audit(1740472917.301:356): avc: denied { setopt } for pid=6462 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.134466][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 106.339465][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 106.637557][ T29] audit: type=1400 audit(1740472917.961:357): avc: denied { listen } for pid=6470 comm="syz.4.163" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.701590][ T29] audit: type=1400 audit(1740472917.971:358): avc: denied { setopt } for pid=6470 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.726613][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.764410][ T45] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 106.786716][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.787288][ T29] audit: type=1400 audit(1740472917.971:359): avc: denied { connect } for pid=6470 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 106.798359][ T45] usb 3-1: Product: syz [ 106.829374][ T45] usb 3-1: Manufacturer: syz [ 106.834000][ T45] usb 3-1: SerialNumber: syz [ 106.855923][ T45] usb 3-1: config 0 descriptor?? [ 106.865735][ T29] audit: type=1400 audit(1740472917.971:360): avc: denied { name_connect } for pid=6470 comm="syz.4.163" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 106.878050][ T6459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.898331][ T45] option 3-1:0.0: GSM modem (1-port) converter detected [ 106.940839][ T29] audit: type=1400 audit(1740472918.071:361): avc: denied { accept } for pid=6470 comm="syz.4.163" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 107.366134][ T5906] usb 3-1: USB disconnect, device number 5 [ 107.397419][ T5906] option 3-1:0.0: device disconnected [ 108.202370][ T29] audit: type=1400 audit(1740472919.741:362): avc: denied { name_connect } for pid=6493 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 108.492540][ T6506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.504214][ T6506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 108.642465][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.825432][ T8] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 108.839831][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.854521][ T8] usb 2-1: Product: syz [ 108.859651][ T8] usb 2-1: Manufacturer: syz [ 109.016105][ T8] usb 2-1: SerialNumber: syz [ 109.103740][ T8] usb 2-1: config 0 descriptor?? [ 109.120155][ T8] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 109.359227][ T8] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 109.369298][ T8] sq905c 2-1:0.0: Get version command failed [ 109.376670][ T8] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 109.387246][ T8] usb 2-1: USB disconnect, device number 5 [ 109.753467][ T6522] netlink: zone id is out of range [ 109.759834][ T6522] netlink: zone id is out of range [ 109.764953][ T6522] netlink: zone id is out of range [ 109.770173][ T6522] netlink: zone id is out of range [ 109.775322][ T6522] netlink: zone id is out of range [ 109.780449][ T6522] netlink: zone id is out of range [ 109.785549][ T6522] netlink: zone id is out of range [ 109.792492][ T6522] netlink: set zone limit has 8 unknown bytes [ 110.539956][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 110.539969][ T29] audit: type=1400 audit(1740472921.291:368): avc: denied { create } for pid=6515 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.002502][ T29] audit: type=1400 audit(1740472921.291:369): avc: denied { ioctl } for pid=6515 comm="syz.4.179" path="socket:[10782]" dev="sockfs" ino=10782 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.097064][ T29] audit: type=1400 audit(1740472922.631:370): avc: denied { write } for pid=6517 comm="syz.0.180" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.439835][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.872862][ T29] audit: type=1400 audit(1740472923.401:371): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 111.944308][ T6537] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 112.542638][ T29] audit: type=1400 audit(1740472924.071:372): avc: denied { nlmsg_write } for pid=6545 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 113.427567][ T29] audit: type=1400 audit(1740472924.951:373): avc: denied { listen } for pid=6553 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 113.487823][ T29] audit: type=1400 audit(1740472924.951:374): avc: denied { accept } for pid=6553 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 113.517338][ T29] audit: type=1400 audit(1740472924.951:375): avc: denied { create } for pid=6551 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.566574][ T29] audit: type=1400 audit(1740472924.951:376): avc: denied { setopt } for pid=6551 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.571891][ T29] audit: type=1400 audit(1740472925.601:377): avc: denied { create } for pid=6565 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.709250][ T6583] veth0_to_bond: entered promiscuous mode [ 115.746072][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 115.886902][ T6583] veth0_to_bond (unregistering): left promiscuous mode [ 115.906001][ T6583] bond0: (slave bond_slave_0): Releasing backup interface [ 116.007680][ T6597] tipc: Started in network mode [ 116.018981][ T6597] tipc: Node identity 7f000001, cluster identity 4711 [ 116.047271][ T6597] tipc: Enabled bearer , priority 10 [ 116.421010][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 116.421040][ T29] audit: type=1400 audit(1740472927.961:384): avc: denied { read } for pid=6600 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.682242][ T6601] (unnamed net_device) (uninitialized): peer notification delay (3) is not a multiple of miimon (9), value rounded to 0 ms [ 116.811764][ T29] audit: type=1400 audit(1740472928.351:385): avc: denied { listen } for pid=6600 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.158591][ T25] tipc: Node number set to 2130706433 [ 117.554341][ T29] audit: type=1400 audit(1740472929.071:386): avc: denied { write } for pid=6615 comm="syz.0.209" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=36996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 117.793394][ T29] audit: type=1400 audit(1740472929.101:387): avc: denied { ioctl } for pid=6615 comm="syz.0.209" path="socket:[10981]" dev="sockfs" ino=10981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.315513][ T6628] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.480414][ T6625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 118.996983][ T29] audit: type=1400 audit(1740472930.021:388): avc: denied { ioctl } for pid=6622 comm="syz.3.211" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.478508][ T29] audit: type=1400 audit(1740472931.011:389): avc: denied { ioctl } for pid=6636 comm="syz.0.215" path="/newroot/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 119.570264][ T6639] tracefs: Bad value for 'gid' [ 119.575326][ T6639] tracefs: Bad value for 'gid' [ 119.897416][ T29] audit: type=1400 audit(1740472931.101:390): avc: denied { mount } for pid=6636 comm="syz.0.215" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.926733][ T29] audit: type=1400 audit(1740472931.111:391): avc: denied { remount } for pid=6636 comm="syz.0.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 119.949528][ T29] audit: type=1400 audit(1740472931.221:392): avc: denied { mount } for pid=6636 comm="syz.0.215" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.971230][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.091578][ T29] audit: type=1400 audit(1740472931.621:393): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 120.869657][ T6272] Bluetooth: (null): Too short H5 packet [ 120.910522][ T6272] Bluetooth: (null): Invalid header checksum [ 120.936890][ T6272] Bluetooth: (null): Invalid header checksum [ 121.011616][ T6272] Bluetooth: (null): Invalid header checksum [ 121.030695][ T6272] Bluetooth: (null): Invalid header checksum [ 121.037074][ T6272] Bluetooth: (null): Invalid header checksum [ 121.069792][ T12] Bluetooth: (null): Invalid header checksum [ 121.167777][ T12] Bluetooth: (null): Invalid header checksum [ 121.280381][ T6284] Bluetooth: (null): Invalid header checksum [ 121.397839][ T6272] Bluetooth: (null): Invalid header checksum [ 121.633128][ T6676] siw: device registration error -23 [ 121.707838][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.517638][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 122.535544][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.567251][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 122.587127][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.666992][ T9] usb 1-1: config 0 descriptor?? [ 122.687875][ T6689] tipc: Started in network mode [ 122.717597][ T6689] tipc: Node identity 7f000001, cluster identity 4711 [ 122.734600][ T6689] tipc: Enabled bearer , priority 10 [ 122.998106][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 122.998136][ T29] audit: type=1400 audit(1740472934.521:397): avc: denied { read write } for pid=6691 comm="syz.3.237" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.035456][ T45] hid (null): unknown global tag 0xd [ 123.196713][ T45] hid (null): unknown global tag 0xe [ 123.434185][ T45] hid-generic 0005:0001:00B4.0002: unknown main item tag 0x4 [ 123.458429][ T45] hid-generic 0005:0001:00B4.0002: unknown global tag 0xd [ 123.467022][ T9] aquacomputer_d5next 0003:0C70:F014.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 123.467143][ T45] hid-generic 0005:0001:00B4.0002: item 0 0 1 13 parsing failed [ 123.492939][ T29] audit: type=1400 audit(1740472934.521:398): avc: denied { open } for pid=6691 comm="syz.3.237" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.637603][ T45] hid-generic 0005:0001:00B4.0002: probe with driver hid-generic failed with error -22 [ 124.250636][ T5863] tipc: Node number set to 2130706433 [ 124.310404][ T9] usb 1-1: USB disconnect, device number 2 [ 124.465942][ T6712] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.831192][ T29] audit: type=1400 audit(1740472936.371:399): avc: denied { shutdown } for pid=6729 comm="syz.2.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.285283][ T29] audit: type=1400 audit(1740472936.521:400): avc: denied { block_suspend } for pid=6731 comm="syz.3.252" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.652957][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.251'. [ 126.482119][ T29] audit: type=1400 audit(1740472937.971:401): avc: denied { write } for pid=6744 comm="syz.0.254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 126.940974][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 126.979827][ T29] audit: type=1400 audit(1740472938.481:402): avc: denied { read } for pid=6749 comm="syz.2.257" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.083709][ T29] audit: type=1400 audit(1740472938.481:403): avc: denied { open } for pid=6749 comm="syz.2.257" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.423408][ T29] audit: type=1400 audit(1740472938.491:404): avc: denied { ioctl } for pid=6749 comm="syz.2.257" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 127.453813][ T5862] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.490793][ T29] audit: type=1400 audit(1740472939.031:405): avc: denied { search } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.536303][ T29] audit: type=1400 audit(1740472939.071:406): avc: denied { write } for pid=6760 comm="syz.1.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.653468][ T5862] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.663866][ T5862] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 127.679151][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 127.695375][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 127.712154][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 127.726773][ T5862] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 127.736365][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 127.744754][ T5862] usb 5-1: Product: syz [ 128.387155][ T5862] usb 5-1: Manufacturer: syz [ 128.403820][ T29] audit: type=1400 audit(1740472939.371:407): avc: denied { getopt } for pid=6762 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.408272][ T6766] tracefs: Bad value for 'gid' [ 128.428310][ T6766] tracefs: Bad value for 'gid' [ 128.436793][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 128.442708][ T5862] cdc_wdm 5-1:1.0: skipping garbage [ 128.452008][ T5862] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 128.458434][ T5862] cdc_wdm 5-1:1.0: Unknown control protocol [ 128.824763][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.831457][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.837851][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.844458][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.850683][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.857255][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.863507][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.870087][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.876332][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.882920][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.889183][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.895788][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.904444][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.911047][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.917673][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.924274][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.930596][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.937179][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.943391][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 128.949987][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 128.958314][ T25] usb 5-1: USB disconnect, device number 6 [ 128.958363][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 128.976658][ T29] audit: type=1400 audit(1740472940.501:408): avc: denied { connect } for pid=6753 comm="syz.4.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.015710][ T29] audit: type=1400 audit(1740472940.551:409): avc: denied { sys_module } for pid=6775 comm="syz.3.266" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 129.063539][ T29] audit: type=1400 audit(1740472940.551:410): avc: denied { getopt } for pid=6774 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.335395][ T29] audit: type=1400 audit(1740472940.871:411): avc: denied { write } for pid=6795 comm="syz.3.272" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.469353][ T6802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 129.992917][ T6807] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.000308][ T6807] overlayfs: failed to set xattr on upper [ 130.006054][ T6807] overlayfs: ...falling back to redirect_dir=nofollow. [ 130.012964][ T6807] overlayfs: ...falling back to index=off. [ 130.019162][ T6807] overlayfs: ...falling back to uuid=null. [ 130.357540][ T29] audit: type=1400 audit(1740472941.511:412): avc: denied { mount } for pid=6799 comm="syz.1.273" name="/" dev="ramfs" ino=12371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 130.437379][ T6810] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 130.446904][ T29] audit: type=1400 audit(1740472941.521:413): avc: denied { mounton } for pid=6799 comm="syz.1.273" path="/47/file0/bus" dev="ramfs" ino=12374 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 130.626094][ T29] audit: type=1400 audit(1740472941.581:414): avc: denied { create } for pid=6799 comm="syz.1.273" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 130.638233][ T6810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.646879][ T29] audit: type=1400 audit(1740472941.581:415): avc: denied { link } for pid=6799 comm="syz.1.273" name="file1" dev="overlay" ino=12378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 131.223890][ T29] audit: type=1400 audit(1740472941.591:416): avc: denied { setattr } for pid=6799 comm="syz.1.273" name="#d" dev="ramfs" ino=12379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 132.558424][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.564983][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286926][ T6866] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 133.360463][ T6866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.677551][ T6854] netlink: 'syz.0.289': attribute type 4 has an invalid length. [ 133.808003][ T6854] netlink: 17 bytes leftover after parsing attributes in process `syz.0.289'. [ 136.233969][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 136.469176][ T6917] input: syz0 as /devices/virtual/input/input9 [ 138.187567][ T6937] No control pipe specified [ 139.676696][ T6958] netlink: 'syz.3.328': attribute type 1 has an invalid length. [ 139.877467][ T6958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.168155][ T6978] netlink: 'syz.3.333': attribute type 2 has an invalid length. [ 141.207996][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 141.208010][ T29] audit: type=1804 audit(1740472952.741:421): pid=6982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.335" name="bus" dev="ramfs" ino=12652 res=1 errno=0 [ 142.262643][ T7000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.627671][ T29] audit: type=1400 audit(1740472953.801:422): avc: denied { listen } for pid=6989 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.030685][ T7003] capability: warning: `syz.0.341' uses 32-bit capabilities (legacy support in use) [ 143.095920][ T29] audit: type=1400 audit(1740472953.801:423): avc: denied { shutdown } for pid=6989 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.955466][ T7014] Can't find a SQUASHFS superblock on nullb0 [ 143.980164][ T7014] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 143.987989][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.345'. [ 143.998882][ T7014] bridge0: port 3(macvlan1) entered blocking state [ 144.005520][ T7014] bridge0: port 3(macvlan1) entered disabled state [ 144.012683][ T7014] macvlan1: entered allmulticast mode [ 144.018142][ T7014] veth1_vlan: entered allmulticast mode [ 144.028915][ T7014] macvlan1: entered promiscuous mode [ 144.031982][ T7015] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 144.034983][ T7014] bridge0: port 3(macvlan1) entered blocking state [ 144.049470][ T7014] bridge0: port 3(macvlan1) entered forwarding state [ 144.058568][ T29] audit: type=1400 audit(1740472955.481:424): avc: denied { create } for pid=7012 comm="syz.0.345" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.105211][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 144.139167][ C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.153749][ C0] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 144.283056][ C0] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.292883][ C0] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 144.301446][ C0] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.311236][ C0] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 144.319749][ C0] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.329537][ C0] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 144.338038][ C0] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.347842][ C0] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 144.356333][ C0] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.366154][ C0] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 144.374650][ C0] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.384445][ C0] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 144.392940][ C0] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 144.402732][ C0] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 144.417628][ T29] audit: type=1400 audit(1740472955.491:425): avc: denied { mounton } for pid=7012 comm="syz.0.345" path="/62/file1" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.474696][ T7015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.725291][ T7024] IPv6: Can't replace route, no match found [ 145.687299][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 145.956732][ T7040] Illegal XDP return value 67 on prog (id 39) dev N/A, expect packet loss! [ 146.715395][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.361'. [ 146.988881][ T7051] bridge0: port 3(syz_tun) entered blocking state [ 146.995512][ T7051] bridge0: port 3(syz_tun) entered disabled state [ 147.002256][ T7051] syz_tun: entered allmulticast mode [ 147.008926][ T7051] syz_tun: entered promiscuous mode [ 147.014728][ T7051] bridge0: port 3(syz_tun) entered blocking state [ 147.021402][ T7051] bridge0: port 3(syz_tun) entered forwarding state [ 147.034964][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.357'. [ 147.043920][ T7051] syz_tun: left allmulticast mode [ 147.049017][ T7051] syz_tun: left promiscuous mode [ 147.054579][ T7051] bridge0: port 3(syz_tun) entered disabled state [ 147.063183][ T7051] bridge_slave_1: left allmulticast mode [ 147.068925][ T7051] bridge_slave_1: left promiscuous mode [ 147.075229][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.088310][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 147.115695][ T7051] bridge_slave_0: left allmulticast mode [ 147.138520][ T7051] bridge_slave_0: left promiscuous mode [ 147.145676][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.383473][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 147.494519][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 147.516437][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 147.534715][ T45] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 147.557548][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.577584][ T45] usb 3-1: Product: syz [ 147.590822][ T45] usb 3-1: Manufacturer: syz [ 147.615783][ T45] usb 3-1: SerialNumber: syz [ 147.674076][ T45] usb 3-1: config 0 descriptor?? [ 147.696803][ T7058] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.739497][ T45] option 3-1:0.0: GSM modem (1-port) converter detected [ 148.080928][ T9] usb 3-1: USB disconnect, device number 6 [ 148.114504][ T9] option 3-1:0.0: device disconnected [ 148.200672][ T7086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.368'. [ 148.709879][ T29] audit: type=1400 audit(1740472960.251:426): avc: denied { connect } for pid=7088 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.787048][ T29] audit: type=1400 audit(1740472960.291:427): avc: denied { write } for pid=7088 comm="syz.0.371" path="socket:[12888]" dev="sockfs" ino=12888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.810197][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.401626][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 149.512481][ T29] audit: type=1400 audit(1740472961.018:428): avc: denied { bind } for pid=7097 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.014410][ T7117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.380'. [ 151.182871][ T7125] @: renamed from vlan0 (while UP) [ 151.188153][ T29] audit: type=1400 audit(1740472962.580:429): avc: denied { ioctl } for pid=7124 comm="syz.1.383" path="socket:[12959]" dev="sockfs" ino=12959 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.147870][ T7172] netlink: 76 bytes leftover after parsing attributes in process `syz.2.398'. [ 156.805634][ T7190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.400'. [ 156.824261][ T29] audit: type=1400 audit(1740472967.847:430): avc: denied { write } for pid=7178 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 157.018397][ T7197] fuse: Bad value for 'fd' [ 157.256448][ T7205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.657532][ T7219] netlink: 'syz.2.409': attribute type 21 has an invalid length. [ 159.048311][ T7226] vivid-002: disconnect [ 159.054945][ T7226] vivid-002: reconnect [ 160.149962][ T7234] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.177291][ T29] audit: type=1400 audit(1740472970.989:431): avc: denied { setopt } for pid=7231 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.199331][ T7238] fuse: Bad value for 'fd' [ 160.345787][ T29] audit: type=1400 audit(1740472971.158:432): avc: denied { bind } for pid=7233 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.374005][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 160.905001][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 161.616876][ T6278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.713047][ T6278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.774869][ T6278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.670220][ T7268] dccp_invalid_packet: P.Data Offset(127) too large [ 162.682401][ T29] audit: type=1400 audit(1740472972.832:433): avc: denied { accept } for pid=7261 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 162.772790][ T6278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.832143][ T29] audit: type=1400 audit(1740472973.384:434): avc: denied { append } for pid=7263 comm="syz.3.430" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.183660][ T29] audit: type=1400 audit(1740472974.488:435): avc: denied { read } for pid=5485 comm="dhcpcd" name="n101" dev="tmpfs" ino=3181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.306560][ T6278] macvlan1: left allmulticast mode [ 164.874499][ T29] audit: type=1400 audit(1740472974.488:436): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.900299][ T29] audit: type=1400 audit(1740472974.488:437): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=3181 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.901891][ T6278] veth1_vlan: left allmulticast mode [ 164.964946][ T6278] macvlan1: left promiscuous mode [ 164.971840][ T6278] bridge0: port 3(macvlan1) entered disabled state [ 164.983870][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.993688][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.004855][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.013816][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.021465][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.028677][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.043694][ T29] audit: type=1400 audit(1740472975.545:438): avc: denied { mounton } for pid=7286 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 165.106143][ T29] audit: type=1400 audit(1740472975.601:439): avc: denied { read } for pid=7293 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.162222][ T29] audit: type=1400 audit(1740472975.620:440): avc: denied { open } for pid=7293 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.204030][ T29] audit: type=1400 audit(1740472975.620:441): avc: denied { getattr } for pid=7293 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.244768][ T6278] bridge_slave_1: left allmulticast mode [ 165.264681][ T6278] bridge_slave_1: left promiscuous mode [ 165.301918][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.381757][ T6278] bridge_slave_0: left allmulticast mode [ 165.404127][ T6278] bridge_slave_0: left promiscuous mode [ 165.414997][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.483922][ T29] audit: type=1400 audit(1740472975.956:442): avc: denied { write } for pid=7289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.207564][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.257757][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.268032][ T6278] bond0 (unregistering): Released all slaves [ 166.287873][ T7308] netlink: 'syz.3.442': attribute type 21 has an invalid length. [ 166.403389][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 166.411048][ T6278] IPVS: stopping master sync thread 6052 ... [ 166.530404][ T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 166.555810][ T8] usb 5-1: config 0 has no interface number 0 [ 166.574035][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 166.597649][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.605663][ T8] usb 5-1: Product: syz [ 166.648202][ T8] usb 5-1: Manufacturer: syz [ 166.658199][ T8] usb 5-1: SerialNumber: syz [ 166.675088][ T8] usb 5-1: config 0 descriptor?? [ 166.681757][ T7286] chnl_net:caif_netlink_parms(): no params data found [ 166.687400][ T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 167.124326][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 167.221044][ T7343] 9pnet_fd: Insufficient options for proto=fd [ 167.249875][ T5816] Bluetooth: hci0: command tx timeout [ 167.361668][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.532489][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.565069][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 167.595303][ T7348] capability: warning: `syz.2.449' uses deprecated v2 capabilities in a way that may be insecure [ 167.607001][ T8] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 167.741434][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.764231][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.788305][ T7286] bridge_slave_0: entered allmulticast mode [ 167.795263][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 167.796068][ T5866] usb 5-1: USB disconnect, device number 7 [ 167.821351][ T7286] bridge_slave_0: entered promiscuous mode [ 167.826076][ T5866] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 167.843035][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.852340][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.863363][ T5866] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 167.864125][ T7286] bridge_slave_1: entered allmulticast mode [ 167.881739][ T5866] quatech2 5-1:0.51: device disconnected [ 167.886286][ T7286] bridge_slave_1: entered promiscuous mode [ 167.909851][ T6278] hsr_slave_0: left promiscuous mode [ 167.916665][ T6278] hsr_slave_1: left promiscuous mode [ 167.922478][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.929890][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.938693][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.946183][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.961902][ T6278] veth1_macvtap: left promiscuous mode [ 167.967884][ T6278] veth0_macvtap: left promiscuous mode [ 167.973379][ T6278] veth1_vlan: left promiscuous mode [ 167.979100][ T6278] veth0_vlan: left promiscuous mode [ 168.216571][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 168.246442][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 168.609690][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 168.609703][ T29] audit: type=1400 audit(1740472978.884:452): avc: denied { map } for pid=7363 comm="syz.2.454" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.008184][ T29] audit: type=1400 audit(1740472978.912:453): avc: denied { execute } for pid=7363 comm="syz.2.454" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.398274][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.421824][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.454264][ T5816] Bluetooth: hci0: command tx timeout [ 169.669173][ T7286] team0: Port device team_slave_0 added [ 169.696036][ T7286] team0: Port device team_slave_1 added [ 169.740354][ T7381] futex_wake_op: syz.3.455 tries to shift op by 36; fix this program [ 170.318110][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.386250][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.510843][ T7286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.557872][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 170.593116][ T7397] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.623150][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.636148][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.666420][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.776088][ T7286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.807300][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 170.988656][ T9] IPVS: starting estimator thread 0... [ 171.093032][ T7413] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 171.110360][ T29] audit: type=1400 audit(1740472981.204:454): avc: denied { bind } for pid=7406 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.588939][ T7412] IPVS: using max 37 ests per chain, 88800 per kthread [ 171.596328][ T5866] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 171.631813][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.639994][ T5866] usb 5-1: Product: syz [ 171.645126][ T5866] usb 5-1: Manufacturer: syz [ 171.649791][ T5866] usb 5-1: SerialNumber: syz [ 171.654595][ T5816] Bluetooth: hci0: command tx timeout [ 172.360734][ T5866] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 172.399089][ T5866] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 172.508566][ T7286] hsr_slave_0: entered promiscuous mode [ 172.515173][ T5866] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 172.551539][ T7286] hsr_slave_1: entered promiscuous mode [ 172.779235][ T5866] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 172.939739][ T7426] dccp_close: ABORT with 180 bytes unread [ 173.136289][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 173.728160][ T8] usb 5-1: USB disconnect, device number 8 [ 173.786679][ T8] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 173.862332][ T8] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 173.875803][ T5816] Bluetooth: hci0: command tx timeout [ 173.897265][ T8] visor 5-1:1.0: device disconnected [ 174.328472][ T29] audit: type=1400 audit(1740472984.225:455): avc: denied { setopt } for pid=7436 comm="syz.4.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.296413][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 175.815292][ T7461] team0 (unregistering): Port device team_slave_0 removed [ 175.828418][ T7461] team0 (unregistering): Port device team_slave_1 removed [ 175.898836][ T7477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.583460][ T7286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.600592][ T7286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.608271][ T7484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 176.629658][ T7286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.651637][ T7286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.187785][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.241986][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.275801][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.282886][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.321623][ T6094] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.328736][ T6094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.392021][ T7506] 9pnet_fd: Insufficient options for proto=fd [ 177.609288][ T7511] 9pnet_fd: Insufficient options for proto=fd [ 177.900827][ T29] audit: type=1400 audit(1740472987.574:456): avc: denied { bind } for pid=7517 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 178.105490][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.209490][ T7286] veth0_vlan: entered promiscuous mode [ 178.242584][ T7286] veth1_vlan: entered promiscuous mode [ 178.276439][ T7286] veth0_macvtap: entered promiscuous mode [ 178.285412][ T7286] veth1_macvtap: entered promiscuous mode [ 178.305476][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.878206][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.886622][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.897074][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.921317][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.931140][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.956503][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.966595][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.990196][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.017406][ T7549] overlayfs: failed to resolve './file0': -2 [ 179.036039][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.067914][ T29] audit: type=1400 audit(1740472988.650:457): avc: denied { setopt } for pid=7527 comm="syz.4.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.111167][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.128373][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.141694][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.248339][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.277604][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.292964][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.305870][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.306212][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 179.320711][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.327181][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.341618][ T8] usb 4-1: config 0 has no interfaces? [ 179.346594][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.348804][ T8] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 179.364446][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.372606][ T8] usb 4-1: Product: syz [ 179.376890][ T8] usb 4-1: Manufacturer: syz [ 179.383695][ T7286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.404585][ T8] usb 4-1: SerialNumber: syz [ 179.410787][ T7286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.425462][ T8] usb 4-1: config 0 descriptor?? [ 179.459671][ T7286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.488083][ T7286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.520221][ T5906] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 179.611050][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.629482][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.669283][ T8] usb 4-1: USB disconnect, device number 5 [ 179.705484][ T5906] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 179.723419][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.732143][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 64 [ 179.736109][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.753089][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.772933][ T5906] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 179.943106][ T29] audit: type=1400 audit(1740472989.361:458): avc: denied { mounton } for pid=7286 comm="syz-executor" path="/root/syzkaller.KrYOS5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 179.970451][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.978457][ T5906] usb 2-1: Product: syz [ 179.991987][ T5906] usb 2-1: Manufacturer: syz [ 179.999180][ T5906] usb 2-1: SerialNumber: syz [ 180.028654][ T5906] usb 2-1: config 0 descriptor?? [ 180.034013][ T29] audit: type=1400 audit(1740472989.557:459): avc: denied { mount } for pid=7286 comm="syz-executor" name="/" dev="gadgetfs" ino=7755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 180.068017][ T7553] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.084811][ T7553] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 180.120554][ T5906] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 180.127700][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 180.127755][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 180.299661][ T7590] kvm: pic: level sensitive irq not supported [ 180.395085][ T5866] usb 2-1: USB disconnect, device number 6 [ 180.428328][ T5866] mcba_usb 2-1:0.0 can0: device disconnected [ 180.813647][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 180.814629][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.102395][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 181.131039][ T5862] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 181.319058][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 181.338220][ T5906] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.347706][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.364749][ T5906] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 181.369537][ T5862] usb 4-1: Product: syz [ 181.388008][ T5862] usb 4-1: Manufacturer: syz [ 181.395440][ T5906] usb 1-1: config 179 has no interface number 0 [ 181.409846][ T5906] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 181.412409][ T5862] usb 4-1: SerialNumber: syz [ 181.424237][ T5906] usb 1-1: config 179 interface 65 has no altsetting 0 [ 181.441008][ T5906] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 181.459077][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.856995][ T5862] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 181.908351][ T5862] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 181.924281][ T9] usb 1-1: USB disconnect, device number 3 [ 181.981677][ T5862] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 182.093600][ T5862] usb 4-1: USB disconnect, device number 6 [ 182.125874][ T5862] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 182.142069][ T5862] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 182.165698][ T5862] visor 4-1:1.0: device disconnected [ 182.239401][ T7656] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 182.562924][ T7666] smc: removing ib device syz0 [ 183.429763][ T7618] Bluetooth: hci3: command 0x0406 tx timeout [ 183.435867][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 183.472044][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 183.478547][ T7618] Bluetooth: hci2: command 0x0406 tx timeout [ 183.871108][ T29] audit: type=1400 audit(1740472992.878:460): avc: denied { read } for pid=7661 comm="syz.1.514" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.808221][ T7681] dccp_close: ABORT with 24 bytes unread [ 184.930338][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 185.376814][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 185.794662][ T7718] syzkaller1: entered allmulticast mode [ 187.265343][ T7737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.170949][ T29] audit: type=1400 audit(1740472997.171:461): avc: denied { connect } for pid=7745 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.244651][ T7755] dccp_invalid_packet: P.Data Offset(127) too large [ 188.246943][ T29] audit: type=1400 audit(1740472997.171:462): avc: denied { accept } for pid=7745 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.270634][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.327427][ T29] audit: type=1400 audit(1740472997.171:463): avc: denied { read } for pid=7745 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 188.436104][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 188.686450][ T25] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 188.694022][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 64 [ 188.714425][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 188.737764][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 188.747076][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.755086][ T25] usb 4-1: Product: syz [ 188.759539][ T25] usb 4-1: Manufacturer: syz [ 188.764140][ T25] usb 4-1: SerialNumber: syz [ 188.789327][ T25] usb 4-1: config 0 descriptor?? [ 188.796274][ T7754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.810377][ T7754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.826367][ T25] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 188.833578][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 188.833631][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 188.863685][ T5866] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.876804][ T7766] tipc: Started in network mode [ 188.890669][ T7766] tipc: Node identity 7f000001, cluster identity 4711 [ 188.898800][ T7766] tipc: Enabled bearer , priority 10 [ 188.927477][ T7768] syz.1.551 (7768) used greatest stack depth: 19760 bytes left [ 189.025198][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 189.036037][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.063491][ T25] usb 4-1: USB disconnect, device number 7 [ 189.072153][ T5866] usb 5-1: config 0 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.110649][ T25] mcba_usb 4-1:0.0 can0: device disconnected [ 189.125439][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.140380][ T5866] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.00 [ 189.155737][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.175297][ T5866] usb 5-1: config 0 descriptor?? [ 189.188379][ T5866] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 189.264537][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.903542][ T5862] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 190.083801][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 190.099002][ T5862] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.103746][ T5866] tipc: Node number set to 2130706433 [ 190.239313][ T5862] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 190.483965][ T5862] usb 1-1: config 179 has no interface number 0 [ 190.508113][ T5862] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.611132][ T5862] usb 1-1: config 179 interface 65 has no altsetting 0 [ 190.630025][ T5862] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 191.128345][ T29] audit: type=1400 audit(1740472999.772:464): avc: denied { create } for pid=7810 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.207684][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.227947][ T29] audit: type=1400 audit(1740473000.043:465): avc: denied { attach_queue } for pid=7810 comm="syz.3.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 191.443799][ T5862] usb 1-1: USB disconnect, device number 4 [ 191.842618][ T5862] usb 5-1: USB disconnect, device number 9 [ 191.974630][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.092197][ T5866] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 192.843168][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.482039][ T5866] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 193.489292][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 64 [ 193.504298][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.514171][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 193.525736][ T25] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 193.534836][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.551934][ T5866] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 193.562028][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.570965][ T25] usb 4-1: config 0 descriptor?? [ 193.582026][ T5866] usb 2-1: Product: syz [ 193.586286][ T5866] usb 2-1: Manufacturer: syz [ 193.591068][ T5866] usb 2-1: SerialNumber: syz [ 193.602887][ T5866] usb 2-1: config 0 descriptor?? [ 193.633159][ T7840] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.640596][ T7840] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 193.693041][ T5866] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 193.700174][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 193.700215][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 193.880440][ T9] usb 2-1: USB disconnect, device number 7 [ 193.909004][ T9] mcba_usb 2-1:0.0 can0: device disconnected [ 194.013161][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 194.051468][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.127330][ T25] usb 4-1: USB disconnect, device number 8 [ 194.216735][ T29] audit: type=1400 audit(1740473002.830:466): avc: denied { ioctl } for pid=7870 comm="syz.4.577" path="socket:[16396]" dev="sockfs" ino=16396 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 195.628124][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 195.989315][ T7910] dccp_invalid_packet: P.Data Offset(127) too large [ 197.065283][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.071991][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.298579][ T5866] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.309432][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 197.375452][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.596'. [ 197.458904][ T25] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 197.467090][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 197.489696][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.506890][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.517529][ T5866] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 197.532641][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.664324][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 197.676929][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 198.156298][ T5866] usb 3-1: config 0 descriptor?? [ 198.165682][ T25] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 198.167310][ T7951] netlink: 56 bytes leftover after parsing attributes in process `syz.3.598'. [ 198.172974][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 64 [ 198.454544][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.477846][ T9] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 198.489863][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 198.502815][ T25] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 198.506265][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.516585][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.538707][ T25] usb 1-1: Product: syz [ 198.542932][ T25] usb 1-1: Manufacturer: syz [ 198.547552][ T25] usb 1-1: SerialNumber: syz [ 198.564771][ T25] usb 1-1: config 0 descriptor?? [ 198.585101][ T9] usb 2-1: Product: syz [ 198.592575][ T7935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 198.619705][ T7935] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 198.629596][ T7955] dccp_invalid_packet: P.Data Offset(127) too large [ 198.638926][ T9] usb 2-1: Manufacturer: syz [ 198.651708][ T9] usb 2-1: SerialNumber: syz [ 198.691704][ T9] usb 2-1: config 0 descriptor?? [ 198.741956][ T5866] appleir 0003:05AC:8241.0004: No inputs registered, leaving [ 198.812925][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 198.820927][ T25] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 198.828021][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 198.836235][ T7925] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 198.907893][ T5866] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 199.063680][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 199.079395][ T5866] usb 1-1: USB disconnect, device number 5 [ 199.098889][ T5866] mcba_usb 1-1:0.0 can0: device disconnected [ 199.116584][ T9] usb 2-1: USB disconnect, device number 8 [ 199.145678][ T9] option 2-1:0.0: device disconnected [ 199.151434][ T5863] usb 3-1: USB disconnect, device number 7 [ 199.266190][ T29] audit: type=1400 audit(1740473007.554:467): avc: denied { name_bind } for pid=7959 comm="syz.3.601" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 199.439238][ T29] audit: type=1400 audit(1740473007.723:468): avc: denied { read } for pid=7963 comm="syz.4.603" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.462169][ T29] audit: type=1400 audit(1740473007.723:469): avc: denied { open } for pid=7963 comm="syz.4.603" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 199.495101][ T29] audit: type=1400 audit(1740473007.769:470): avc: denied { getopt } for pid=7963 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.518131][ T29] audit: type=1400 audit(1740473007.797:471): avc: denied { create } for pid=7963 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 200.706556][ T7976] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 200.714821][ T7976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.652096][ T7966] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 201.658985][ T7966] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.683050][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 201.752115][ T7966] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.758239][ T7966] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 201.788550][ T29] audit: type=1400 audit(1740473009.902:472): avc: denied { append } for pid=7979 comm="syz.2.607" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.882443][ T29] audit: type=1400 audit(1740473009.940:473): avc: denied { create } for pid=7979 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.913989][ T29] audit: type=1400 audit(1740473009.940:474): avc: denied { connect } for pid=7979 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 201.965225][ T7966] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.971633][ T7966] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 202.005530][ T7966] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.011604][ T7966] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 202.088591][ T7994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.601289][ T7980] usb usb1: usbfs: process 7980 (syz.2.607) did not claim interface 0 before use [ 202.617523][ T29] audit: type=1400 audit(1740473010.669:475): avc: denied { mount } for pid=7979 comm="syz.2.607" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 202.703641][ T29] audit: type=1400 audit(1740473010.669:476): avc: denied { remount } for pid=7979 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 202.864759][ T7999] dccp_invalid_packet: P.Data Offset(127) too large [ 203.028833][ T5866] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 203.147309][ T29] audit: type=1400 audit(1740473011.184:477): avc: denied { connect } for pid=8002 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 203.306710][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 203.392373][ T5866] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 203.425076][ T8004] syz.0.616 (8004): drop_caches: 2 [ 203.442342][ T5866] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 203.455115][ T5866] usb 4-1: config 179 has no interface number 0 [ 203.477143][ T5866] usb 4-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.495217][ T5866] usb 4-1: config 179 interface 65 has no altsetting 0 [ 203.503464][ T5866] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 203.525040][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.552902][ T29] audit: type=1400 audit(1740473011.576:478): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 203.563248][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 203.809130][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 203.815516][ T8] usb 2-1: config 185 has too many interfaces: 184, using maximum allowed: 32 [ 203.825228][ T5906] usb 4-1: USB disconnect, device number 9 [ 203.837824][ T8] usb 2-1: config 185 has 0 interfaces, different from the descriptor's value: 184 [ 203.890428][ T8] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 203.894786][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 203.905469][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.905494][ T8] usb 2-1: Product: syz [ 203.905514][ T8] usb 2-1: Manufacturer: syz [ 203.905529][ T8] usb 2-1: SerialNumber: syz [ 203.927689][ T5866] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.956118][ T8016] kvm: kvm [8015]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 203.970697][ T29] audit: type=1400 audit(1740473011.951:479): avc: denied { getopt } for pid=8020 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.980249][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 204.184519][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 204.247561][ T25] usb 2-1: USB disconnect, device number 9 [ 204.247702][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 204.268570][ T5866] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 204.300467][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.545605][ T5866] usb 5-1: config 0 descriptor?? [ 205.933766][ T5866] gembird 0003:11FF:3331.0005: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0 [ 206.203826][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 206.385609][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 206.471298][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 206.604438][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.719119][ T5866] usb 5-1: USB disconnect, device number 10 [ 206.888240][ T9] usb 2-1: device descriptor read/64, error -71 [ 207.187347][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 207.455277][ T9] usb 2-1: device descriptor read/64, error -71 [ 207.572554][ T9] usb usb2-port1: attempt power cycle [ 207.602918][ T29] audit: type=1400 audit(1740473015.355:480): avc: denied { read } for pid=8076 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 207.607929][ T5906] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 207.672864][ T29] audit: type=1400 audit(1740473015.421:481): avc: denied { map } for pid=8078 comm="syz.3.645" path="socket:[16731]" dev="sockfs" ino=16731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 207.696018][ T29] audit: type=1400 audit(1740473015.421:482): avc: denied { accept } for pid=8078 comm="syz.3.645" path="socket:[16731]" dev="sockfs" ino=16731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 208.096046][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 208.096180][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 208.468596][ T5906] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.510092][ T5906] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 208.673708][ T9] usb 2-1: device descriptor read/8, error -71 [ 208.735082][ T5906] usb 1-1: config 179 has no interface number 0 [ 208.751663][ T5906] usb 1-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.802298][ T5906] usb 1-1: config 179 interface 65 has no altsetting 0 [ 208.879268][ T5906] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 208.908527][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.019948][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.069357][ T9] usb 2-1: device descriptor read/8, error -71 [ 209.344275][ T5906] usb 1-1: USB disconnect, device number 6 [ 210.139125][ T29] audit: type=1400 audit(1740473017.713:483): avc: denied { remount } for pid=8087 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 210.162622][ T9] usb usb2-port1: unable to enumerate USB device [ 210.670505][ T29] audit: type=1400 audit(1740473018.227:484): avc: denied { setattr } for pid=8105 comm="syz.3.653" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.727745][ T29] audit: type=1400 audit(1740473018.255:485): avc: denied { write } for pid=8105 comm="syz.3.653" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 210.857639][ T29] audit: type=1400 audit(1740473018.255:486): avc: denied { open } for pid=8105 comm="syz.3.653" path="/149/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.107366][ T29] audit: type=1400 audit(1740473019.481:487): avc: denied { execute } for pid=8107 comm="syz.1.654" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 212.564939][ T5906] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 212.775888][ T5906] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 212.830279][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 64 [ 212.886103][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.902572][ T5906] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 212.912648][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.926068][ T5906] usb 5-1: Product: syz [ 212.931256][ T5906] usb 5-1: Manufacturer: syz [ 212.938192][ T5906] usb 5-1: SerialNumber: syz [ 212.947869][ T5906] usb 5-1: config 0 descriptor?? [ 212.954549][ T8123] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 213.156914][ T5906] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 213.163646][ T5906] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 213.721311][ T5906] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90 [ 213.756683][ T5906] usb 5-1: USB disconnect, device number 11 [ 214.835832][ T29] audit: type=1400 audit(1740473022.128:488): avc: denied { setopt } for pid=8169 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.006553][ T8] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 215.089153][ T8178] netlink: 48 bytes leftover after parsing attributes in process `syz.2.680'. [ 215.844174][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 215.944231][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 215.969509][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.981883][ T8] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 215.991473][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.999804][ T8] usb 4-1: Product: syz [ 216.004270][ T8] usb 4-1: Manufacturer: syz [ 216.009246][ T8] usb 4-1: SerialNumber: syz [ 216.021555][ T8] usb 4-1: config 0 descriptor?? [ 216.030516][ T8168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 216.039990][ T8] option 4-1:0.0: GSM modem (1-port) converter detected [ 216.303470][ T5906] usb 4-1: USB disconnect, device number 10 [ 216.340669][ T5906] option 4-1:0.0: device disconnected [ 216.937489][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.043630][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 217.220049][ T8225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8225 comm=syz.2.696 [ 217.473133][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.477616][ T8227] fuse: Bad value for 'fd' [ 217.482184][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.525886][ T5906] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 217.564437][ T8] usb 5-1: config 0 descriptor?? [ 217.683662][ T8] cp210x 5-1:0.0: cp210x converter detected [ 217.820454][ T1331] Bluetooth: (null): Too short H5 packet [ 217.949530][ T1331] Bluetooth: (null): Invalid header checksum [ 217.972484][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 218.757165][ T1331] Bluetooth: (null): Invalid header checksum [ 218.764860][ T5906] usb 1-1: not running at top speed; connect to a high speed hub [ 218.771226][ T1331] Bluetooth: (null): Invalid header checksum [ 218.787247][ T1331] Bluetooth: (null): Invalid header checksum [ 218.793501][ T1331] Bluetooth: (null): Invalid header checksum [ 218.850447][ T5906] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 218.859761][ T1331] Bluetooth: (null): Invalid header checksum [ 218.866016][ T5906] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 218.874833][ T1331] Bluetooth: (null): Invalid header checksum [ 218.880841][ T1331] Bluetooth: (null): Invalid header checksum [ 218.886907][ T5906] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 218.894428][ T5906] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 218.903553][ T5906] usb 1-1: config 129 has no interface number 0 [ 218.909996][ T1331] Bluetooth: (null): Invalid header checksum [ 218.918006][ T1331] Bluetooth: (null): Invalid header checksum [ 218.924003][ T1331] Bluetooth: (null): Invalid header checksum [ 218.930070][ T5906] usb 1-1: config 129 has no interface number 1 [ 218.996134][ T5906] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 219.025403][ T6288] Bluetooth: (null): Invalid header checksum [ 219.037708][ T5906] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 219.049167][ T5906] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 219.068009][ T5906] usb 1-1: config 129 interface 135 has no altsetting 0 [ 219.075562][ T5906] usb 1-1: config 129 interface 5 has no altsetting 0 [ 219.085623][ T5906] usb 1-1: string descriptor 0 read error: -22 [ 219.126586][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 219.138552][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.368259][ T5906] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.379306][ T5906] usb 1-1: MIDIStreaming interface descriptor not found [ 219.455908][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 219.609027][ T8] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 219.612263][ T5906] usb 1-1: USB disconnect, device number 7 [ 219.660791][ T8] cp210x 5-1:0.0: querying part number failed [ 219.764798][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 219.798503][ T8] usb 5-1: USB disconnect, device number 12 [ 219.820318][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.847637][ T8] cp210x 5-1:0.0: device disconnected [ 220.552942][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 220.856860][ T8262] fuse: Bad value for 'fd' [ 221.082833][ T8268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.431509][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.715'. [ 222.397952][ T8291] TCP: TCP_TX_DELAY enabled [ 222.559424][ T8296] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.697434][ T29] audit: type=1400 audit(1740473029.452:489): avc: denied { bind } for pid=8297 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.100833][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'. [ 223.457914][ T8316] input: syz0 as /devices/virtual/input/input12 [ 224.248757][ T29] audit: type=1400 audit(1740473030.921:490): avc: denied { write } for pid=8329 comm="syz.2.736" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 224.345803][ T5862] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 224.485054][ T8] IPVS: starting estimator thread 0... [ 224.517236][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 224.639429][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.812187][ T8340] IPVS: using max 31 ests per chain, 74400 per kthread [ 224.930268][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.980311][ T5862] usb 2-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 224.998868][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.012054][ T5862] usb 2-1: config 0 descriptor?? [ 225.286977][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 225.331168][ T8351] overlayfs: missing 'lowerdir' [ 225.459978][ T5865] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.462227][ T5862] hid_mf 0003:0079:1801.0006: item fetching failed at offset 0/2 [ 225.484515][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 225.490026][ T5862] hid_mf 0003:0079:1801.0006: HID parse failed. [ 225.496450][ T5862] hid_mf 0003:0079:1801.0006: probe with driver hid_mf failed with error -22 [ 225.507380][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 225.532781][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.108057][ T8356] syz.2.746 (8356): drop_caches: 2 [ 226.137710][ T8356] syz.2.746 (8356): drop_caches: 2 [ 226.200308][ T5865] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 226.235179][ T9] usb 5-1: config 0 descriptor?? [ 226.288666][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.298978][ T5865] usb 4-1: config 0 descriptor?? [ 226.321073][ T9] as10x_usb: device has been detected [ 226.335196][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 226.359571][ T8] usb 2-1: USB disconnect, device number 14 [ 226.443375][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 226.486579][ T9] as10x_usb: error during firmware upload part1 [ 226.493152][ T9] Registered device nBox DVB-T Dongle [ 226.634927][ T5906] usb 5-1: USB disconnect, device number 13 [ 226.706807][ T5906] Unregistered device nBox DVB-T Dongle [ 226.707874][ T5906] as10x_usb: device has been disconnected [ 227.349404][ T5865] gembird 0003:11FF:3331.0007: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.3-1/input0 [ 227.401588][ T5865] usb 4-1: USB disconnect, device number 11 [ 227.491185][ T29] audit: type=1400 audit(1740473033.951:491): avc: denied { remount } for pid=8378 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 227.868736][ T29] audit: type=1400 audit(1740473034.307:492): avc: denied { bind } for pid=8385 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 228.476229][ T29] audit: type=1400 audit(1740473034.307:493): avc: denied { write } for pid=8385 comm="syz.2.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 229.406547][ T5865] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 229.871583][ T8419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.882740][ T8419] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 229.941399][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 230.043114][ T8423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.441386][ T5865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.455169][ T5865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.475827][ T5865] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 230.587661][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 230.596070][ T5865] usb 3-1: SerialNumber: syz [ 230.627286][ T5865] usb 3-1: 0:2 : does not exist [ 230.792259][ T5862] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.299325][ T5862] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 231.319285][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.342985][ T29] audit: type=1400 audit(1740473037.562:494): avc: denied { create } for pid=8440 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.372448][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.513319][ T8443] nfs: Unknown parameter '/dev/cpu/#/msr' [ 231.552193][ T29] audit: type=1400 audit(1740473037.590:495): avc: denied { bind } for pid=8440 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.571712][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 231.611074][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.629636][ T5862] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.674127][ T8442] gfs2: not a GFS2 filesystem [ 231.893308][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.929837][ T29] audit: type=1400 audit(1740473037.712:496): avc: denied { connect } for pid=8440 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 231.958427][ T5862] usb 5-1: config 0 descriptor?? [ 231.959154][ T5865] usb 3-1: USB disconnect, device number 8 [ 231.969720][ T8429] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.994341][ T29] audit: type=1400 audit(1740473037.796:497): avc: denied { create } for pid=8440 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.428318][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.564241][ T5862] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 232.580392][ T5862] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 233.022538][ T45] usb 5-1: USB disconnect, device number 14 [ 233.175463][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.777'. [ 234.220731][ T8491] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.245368][ T8491] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.339714][ T8498] dccp_invalid_packet: P.Data Offset(127) too large [ 234.854426][ T5862] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 234.866021][ T5862] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.956310][ T45] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 236.185932][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.229136][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.259510][ T45] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 236.287669][ T45] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 236.295668][ T45] usb 5-1: Manufacturer: syz [ 236.334600][ T45] usb 5-1: config 0 descriptor?? [ 236.353542][ T45] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 236.462859][ T8541] Bluetooth: MGMT ver 1.23 [ 236.672311][ T29] audit: type=1400 audit(1740473042.473:498): avc: denied { read } for pid=8538 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.322021][ T8572] overlayfs: failed to resolve './file1': -2 [ 238.417221][ T29] audit: type=1400 audit(1740473044.175:499): avc: denied { create } for pid=8561 comm="syz.1.813" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 238.696638][ T8582] openvswitch: netlink: IPv4 tun info is not correct [ 239.696272][ T45] hid (null): unknown global tag 0xd [ 239.701778][ T45] hid (null): unknown global tag 0xe [ 239.717689][ T45] hid-generic 0005:0001:00B4.000A: unknown main item tag 0x4 [ 239.743203][ T5906] usb 5-1: USB disconnect, device number 15 [ 239.777733][ T45] hid-generic 0005:0001:00B4.000A: unknown global tag 0xd [ 239.958541][ T45] hid-generic 0005:0001:00B4.000A: item 0 0 1 13 parsing failed [ 239.967543][ T45] hid-generic 0005:0001:00B4.000A: probe with driver hid-generic failed with error -22 [ 352.408513][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 352.415505][ C1] rcu: 0-...!: (1 GPs behind) idle=d324/1/0x4000000000000000 softirq=26729/26741 fqs=0 [ 352.426184][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7286/1:b..l P8589/3:b..l [ 352.435232][ C1] rcu: (detected by 1, t=10502 jiffies, g=18853, q=315 ncpus=2) [ 352.442939][ C1] Sending NMI from CPU 1 to CPUs 0: [ 352.442962][ C0] NMI backtrace for cpu 0 [ 352.442973][ C0] CPU: 0 UID: 0 PID: 8588 Comm: syz.2.820 Not tainted 6.14.0-rc4-syzkaller #0 [ 352.442987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.442995][ C0] RIP: 0010:timerqueue_add+0x1c2/0x330 [ 352.443019][ C0] Code: 44 89 f6 49 89 2f e8 1d 5d 66 f6 45 84 f6 0f 85 a9 00 00 00 e8 6f 62 66 f6 48 8b 34 24 48 89 ef e8 13 8f ff ff e8 5e 62 66 f6 <44> 89 f0 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc [ 352.443031][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000046 [ 352.443041][ C0] RAX: 0000000080010001 RBX: 0000000000000000 RCX: ffffffff8b537c18 [ 352.443050][ C0] RDX: ffff88807ca74880 RSI: ffffffff8b537d92 RDI: ffff888025107340 [ 352.443058][ C0] RBP: ffff888025107340 R08: 0000000000000006 R09: ffff888025107340 [ 352.443067][ C0] R10: ffff888025107340 R11: 0000000000000001 R12: ffff888025107340 [ 352.443075][ C0] R13: ffff8880b862c880 R14: ffff8880b862c601 R15: ffffffff896a7a20 [ 352.443084][ C0] FS: 00007fd631ff66c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 352.443097][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.443106][ C0] CR2: 00007f115c9a7bac CR3: 000000005c078000 CR4: 00000000003526f0 [ 352.443115][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.443122][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.443130][ C0] Call Trace: [ 352.443136][ C0] [ 352.443141][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 352.443161][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 352.443177][ C0] ? nmi_handle+0x1ac/0x5d0 [ 352.443195][ C0] ? timerqueue_add+0x1c2/0x330 [ 352.443212][ C0] ? default_do_nmi+0x6a/0x160 [ 352.443230][ C0] ? exc_nmi+0x170/0x1e0 [ 352.443247][ C0] ? end_repeat_nmi+0xf/0x53 [ 352.443264][ C0] ? __pfx_advance_sched+0x10/0x10 [ 352.443285][ C0] ? timerqueue_add+0x48/0x330 [ 352.443301][ C0] ? timerqueue_add+0x1c2/0x330 [ 352.443318][ C0] ? timerqueue_add+0x1c2/0x330 [ 352.443334][ C0] ? timerqueue_add+0x1c2/0x330 [ 352.443351][ C0] ? timerqueue_add+0x1c2/0x330 [ 352.443368][ C0] [ 352.443372][ C0] [ 352.443377][ C0] ? __pfx_advance_sched+0x10/0x10 [ 352.443394][ C0] __hrtimer_run_queues+0x903/0xae0 [ 352.443410][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 352.443421][ C0] ? read_tsc+0x9/0x20 [ 352.443437][ C0] hrtimer_interrupt+0x392/0x8e0 [ 352.443454][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 352.443474][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 352.443488][ C0] [ 352.443492][ C0] [ 352.443496][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.443514][ C0] RIP: 0010:__might_fault+0xd8/0x190 [ 352.443529][ C0] Code: 83 bb 58 05 00 00 00 74 b0 e8 04 16 b7 ff 48 b8 00 00 00 00 00 fc ff df 65 48 8b 1d 42 0f 01 7e 48 8d bb 58 05 00 00 48 89 fa <48> c1 ea 03 48 8d 2d 00 00 00 00 80 3c 02 00 0f 85 88 00 00 00 48 [ 352.443541][ C0] RSP: 0018:ffffc9000bd6fa38 EFLAGS: 00000246 [ 352.443551][ C0] RAX: dffffc0000000000 RBX: ffff88807ca74880 RCX: ffffc9000e286000 [ 352.443560][ C0] RDX: ffff88807ca74dd8 RSI: ffffffff8202c9ec RDI: ffff88807ca74dd8 [ 352.443568][ C0] RBP: 00000000000000a2 R08: 0000000000000005 R09: 0000000000000000 [ 352.443576][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 352.443583][ C0] R13: ffffc9000bd6faa8 R14: ffffc9000bd6fb90 R15: ffffc9000bd6faa8 [ 352.443595][ C0] ? __might_fault+0xbc/0x190 [ 352.443610][ C0] ? __might_fault+0xbc/0x190 [ 352.443625][ C0] _copy_from_user+0x29/0xd0 [ 352.443638][ C0] copy_msghdr_from_user+0x99/0x160 [ 352.443655][ C0] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 352.443679][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 352.443698][ C0] ___sys_recvmsg+0xdc/0x1a0 [ 352.443714][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 352.443730][ C0] ? find_held_lock+0x2d/0x110 [ 352.443747][ C0] ? __pfx___might_resched+0x10/0x10 [ 352.443766][ C0] ? __might_fault+0xe3/0x190 [ 352.443781][ C0] do_recvmmsg+0x2f8/0x740 [ 352.443798][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 352.443815][ C0] ? __pfx_lock_release+0x10/0x10 [ 352.443832][ C0] ? do_futex+0x123/0x350 [ 352.443851][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 352.443866][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 352.443884][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 352.443904][ C0] do_syscall_64+0xcd/0x250 [ 352.443919][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.443935][ C0] RIP: 0033:0x7fd63418d169 [ 352.443947][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.443958][ C0] RSP: 002b:00007fd631ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 352.443970][ C0] RAX: ffffffffffffffda RBX: 00007fd6343a6080 RCX: 00007fd63418d169 [ 352.443978][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 352.443986][ C0] RBP: 00007fd63420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 352.443994][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 352.444002][ C0] R13: 0000000000000000 R14: 00007fd6343a6080 R15: 00007fffd8fce8b8 [ 352.444014][ C0] [ 352.444957][ C1] task:syz.4.821 state:R running task stack:25024 pid:8589 tgid:8587 ppid:5827 task_flags:0x400040 flags:0x00004002 [ 352.963789][ C1] Call Trace: [ 352.967057][ C1] [ 352.969982][ C1] __schedule+0xf43/0x5890 [ 352.974401][ C1] ? __pfx_mark_lock+0x10/0x10 [ 352.979172][ C1] ? mark_held_locks+0x9f/0xe0 [ 352.983939][ C1] ? __pfx___schedule+0x10/0x10 [ 352.988788][ C1] ? mark_held_locks+0x9f/0xe0 [ 352.993554][ C1] preempt_schedule_irq+0x51/0x90 [ 352.998570][ C1] irqentry_exit+0x36/0x90 [ 353.002982][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.008959][ C1] RIP: 0010:lock_is_held_type+0x107/0x150 [ 353.014669][ C1] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 3c 55 ab 74 83 f8 01 75 2d 9c 58 f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 45 31 ed eb [ 353.034268][ C1] RSP: 0018:ffffc9000be5ea60 EFLAGS: 00000296 [ 353.040330][ C1] RAX: 0000000000000046 RBX: ffff888031f60b18 RCX: 0000000000000001 [ 353.048292][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cef80 RDI: ffffffff8bd35640 [ 353.056252][ C1] RBP: ffffffff8e1bcc80 R08: 0000000000000005 R09: 0000000000000000 [ 353.064213][ C1] R10: 0000000000000001 R11: 0000000000000003 R12: ffff888031f60000 [ 353.072173][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000001 [ 353.080153][ C1] __find_rr_leaf+0x36d/0xe00 [ 353.084829][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 353.090024][ C1] ? fib6_node_lookup+0x125/0x180 [ 353.095053][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 353.100459][ C1] fib6_table_lookup+0x57e/0xa30 [ 353.105418][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 353.110886][ C1] ? trace_lock_acquire+0xf0/0x1f0 [ 353.115997][ C1] ? lock_acquire+0x2f/0xb0 [ 353.120501][ C1] ? ip6_pol_route+0x186/0x1120 [ 353.125352][ C1] ip6_pol_route+0x1cd/0x1120 [ 353.130034][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 353.135152][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 353.140353][ C1] ? find_held_lock+0x2d/0x110 [ 353.145121][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 353.150837][ C1] fib6_rule_lookup+0x386/0x720 [ 353.155689][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 353.161055][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 353.166687][ C1] ? rcu_is_watching+0x12/0xc0 [ 353.171455][ C1] ? dev_get_by_index_rcu+0x102/0x140 [ 353.176828][ C1] ip6_route_output_flags+0x1d0/0x640 [ 353.182196][ C1] ip6_dst_lookup_tail.constprop.0+0x1159/0x2150 [ 353.188518][ C1] ? __pfx_mark_lock+0x10/0x10 [ 353.193283][ C1] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 353.199956][ C1] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 353.206626][ C1] ? __pfx_mark_lock+0x10/0x10 [ 353.211390][ C1] ? mark_held_locks+0x9f/0xe0 [ 353.216160][ C1] ip6_dst_lookup_flow+0x99/0x1d0 [ 353.221183][ C1] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 353.226809][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.232708][ C1] sctp_v6_get_dst+0x14d7/0x2050 [ 353.237642][ C1] ? sctp_v6_get_dst+0x7dc/0x2050 [ 353.242673][ C1] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 353.247977][ C1] ? sctp_transport_route+0x12e/0x350 [ 353.253346][ C1] sctp_transport_route+0x12e/0x350 [ 353.258547][ C1] sctp_packet_config+0x808/0xf40 [ 353.263570][ C1] ? __pfx_mark_lock+0x10/0x10 [ 353.268332][ C1] sctp_packet_singleton+0x16f/0x370 [ 353.273615][ C1] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 353.279438][ C1] ? sctp_outq_select_transport+0x208/0x740 [ 353.285334][ C1] sctp_outq_flush+0x54d/0x3380 [ 353.290180][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 353.295376][ C1] ? __pfx_sctp_outq_flush+0x10/0x10 [ 353.300664][ C1] ? sctp_outq_tail+0x670/0xa30 [ 353.305510][ C1] ? sctp_endpoint_add_asoc+0x228/0x2f0 [ 353.311051][ C1] sctp_do_sm+0x179c/0x5c90 [ 353.315557][ C1] ? kasan_save_stack+0x42/0x60 [ 353.320399][ C1] ? kasan_save_stack+0x33/0x60 [ 353.325242][ C1] ? kasan_save_track+0x14/0x30 [ 353.330084][ C1] ? __pfx_sctp_do_sm+0x10/0x10 [ 353.334930][ C1] ? sctp_sendmsg+0xf0a/0x1eb0 [ 353.339689][ C1] ? __sys_sendto+0x42a/0x4f0 [ 353.344362][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.350456][ C1] ? sk_leave_memory_pressure+0xdd/0x130 [ 353.356079][ C1] ? __sk_mem_raise_allocated+0x8a1/0x1710 [ 353.361890][ C1] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 353.367265][ C1] sctp_sendmsg_to_asoc+0xa4d/0x1ad0 [ 353.372549][ C1] ? sctp_assoc_add_peer+0x254/0x1530 [ 353.377924][ C1] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 353.383639][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 353.389459][ C1] sctp_sendmsg+0xf0a/0x1eb0 [ 353.394043][ C1] ? avc_has_perm+0x11b/0x1c0 [ 353.398723][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 353.403752][ C1] ? __pfx_sock_has_perm+0x10/0x10 [ 353.408868][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 353.413890][ C1] inet_sendmsg+0x119/0x140 [ 353.418393][ C1] __sys_sendto+0x42a/0x4f0 [ 353.422896][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 353.427934][ C1] ? xfd_validate_state+0x5d/0x180 [ 353.433042][ C1] ? rcu_is_watching+0x12/0xc0 [ 353.437803][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 353.442563][ C1] ? do_syscall_64+0x91/0x250 [ 353.447233][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 353.452427][ C1] do_syscall_64+0xcd/0x250 [ 353.456929][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.462818][ C1] RIP: 0033:0x7f115c78d169 [ 353.467224][ C1] RSP: 002b:00007f115d58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 353.475633][ C1] RAX: ffffffffffffffda RBX: 00007f115c9a5fa0 RCX: 00007f115c78d169 [ 353.483593][ C1] RDX: 0000000000000001 RSI: 0000400000000200 RDI: 0000000000000003 [ 353.491553][ C1] RBP: 00007f115c80e2a0 R08: 0000400000000040 R09: 000000000000001c [ 353.499516][ C1] R10: 0000000020040840 R11: 0000000000000246 R12: 0000000000000000 [ 353.507479][ C1] R13: 0000000000000000 R14: 00007f115c9a5fa0 R15: 00007ffc01a692f8 [ 353.515459][ C1] [ 353.518469][ C1] task:syz-executor state:R running task stack:23600 pid:7286 tgid:7286 ppid:7258 task_flags:0x400140 flags:0x00004000 [ 353.531947][ C1] Call Trace: [ 353.535214][ C1] [ 353.538142][ C1] __schedule+0xf43/0x5890 [ 353.542552][ C1] ? hlock_class+0x4e/0x130 [ 353.547050][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 353.552248][ C1] ? __pfx_mark_lock+0x10/0x10 [ 353.557013][ C1] ? __pfx___schedule+0x10/0x10 [ 353.561857][ C1] ? find_held_lock+0x2d/0x110 [ 353.566621][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 353.571993][ C1] preempt_schedule_common+0x44/0xc0 [ 353.577270][ C1] preempt_schedule_thunk+0x1a/0x30 [ 353.582472][ C1] _raw_spin_unlock+0x3e/0x50 [ 353.587139][ C1] copy_page_range+0x1e7f/0x5690 [ 353.592100][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 353.597386][ C1] ? find_held_lock+0x2d/0x110 [ 353.602149][ C1] ? __pfx_lock_release+0x10/0x10 [ 353.607173][ C1] ? lock_acquire+0x2f/0xb0 [ 353.611689][ C1] ? copy_process+0x7c12/0x8c50 [ 353.616534][ C1] ? down_write+0x14e/0x200 [ 353.621035][ C1] ? up_write+0x1b2/0x520 [ 353.625367][ C1] copy_process+0x7ccb/0x8c50 [ 353.630053][ C1] ? __pfx_copy_process+0x10/0x10 [ 353.635067][ C1] ? __pfx_mark_lock+0x10/0x10 [ 353.639850][ C1] kernel_clone+0xfd/0x960 [ 353.644256][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 353.649457][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 353.654479][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 353.659846][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 353.665133][ C1] __do_sys_clone+0xcf/0x120 [ 353.669715][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 353.674922][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 353.680210][ C1] do_syscall_64+0xcd/0x250 [ 353.684713][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.690604][ C1] RIP: 0033:0x7f67e47839d3 [ 353.695008][ C1] RSP: 002b:00007ffc3d88f978 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 353.703415][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67e47839d3 [ 353.711379][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 353.719341][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 353.727300][ C1] R10: 000055558c6247d0 R11: 0000000000000246 R12: 0000000000000000 [ 353.735259][ C1] R13: 00000000000927c0 R14: 0000000000039233 R15: 00007ffc3d88fb10 [ 353.743234][ C1] [ 353.746244][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g18853 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 353.757434][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 353.767388][ C1] rcu: RCU grace-period kthread stack dump: [ 353.773263][ C1] task:rcu_preempt state:R running task stack:28344 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 353.786743][ C1] Call Trace: [ 353.790015][ C1] [ 353.792940][ C1] __schedule+0xf43/0x5890 [ 353.797350][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 353.802558][ C1] ? __pfx___schedule+0x10/0x10 [ 353.807400][ C1] ? schedule+0x298/0x350 [ 353.811722][ C1] ? __pfx_lock_release+0x10/0x10 [ 353.816748][ C1] ? lock_acquire+0x2f/0xb0 [ 353.821249][ C1] ? schedule+0x1fd/0x350 [ 353.825573][ C1] schedule+0xe7/0x350 [ 353.829636][ C1] schedule_timeout+0x124/0x280 [ 353.834487][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 353.839858][ C1] ? __pfx_process_timeout+0x10/0x10 [ 353.845139][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 353.850939][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 353.856400][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 353.861169][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 353.866453][ C1] ? rcu_gp_init+0xc82/0x1630 [ 353.871130][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 353.876323][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 353.882123][ C1] rcu_gp_kthread+0x271/0x380 [ 353.886800][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 353.891996][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 353.897204][ C1] ? __kthread_parkme+0x148/0x220 [ 353.902232][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 353.907436][ C1] kthread+0x3af/0x750 [ 353.911505][ C1] ? __pfx_kthread+0x10/0x10 [ 353.916099][ C1] ? __pfx_kthread+0x10/0x10 [ 353.920691][ C1] ret_from_fork+0x45/0x80 [ 353.925107][ C1] ? __pfx_kthread+0x10/0x10 [ 353.929693][ C1] ret_from_fork_asm+0x1a/0x30 [ 353.934466][ C1] [ 353.937482][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 353.943794][ C1] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller #0 [ 353.952896][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.962942][ C1] RIP: 0010:write_comp_data+0x0/0x90 [ 353.968227][ C1] Code: 48 8b 05 33 00 4a 7e 48 8b 80 20 16 00 00 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <49> 89 d2 49 89 f8 49 89 f1 65 48 8b 15 ff ff 49 7e 65 8b 05 00 00 [ 353.987826][ C1] RSP: 0018:ffffc900032e78f0 EFLAGS: 00000202 [ 353.993889][ C1] RAX: 0000000000000001 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 354.001852][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 354.009815][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 354.017786][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170c8d41 [ 354.025756][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 354.033726][ C1] FS: 00005555808b4500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 354.042668][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.049249][ C1] CR2: 00007f67e54d56c0 CR3: 0000000034d22000 CR4: 00000000003526f0 [ 354.057225][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 354.065189][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 354.073156][ C1] Call Trace: [ 354.076432][ C1] [ 354.079278][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 354.085610][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 354.090807][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 354.096272][ C1] ? timekeeping_advance+0x72e/0xa90 [ 354.101554][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 354.107181][ C1] ? __asan_memcpy+0x3c/0x60 [ 354.111772][ C1] ? cgroup_rstat_updated+0x2a/0xb20 [ 354.117073][ C1] ? rcu_is_watching+0x12/0xc0 [ 354.121845][ C1] ? update_process_times+0x178/0x2d0 [ 354.127233][ C1] ? __pfx_update_process_times+0x10/0x10 [ 354.132963][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 354.138418][ C1] ? update_wall_time+0x1c/0x40 [ 354.143285][ C1] ? tick_nohz_handler+0x376/0x530 [ 354.148406][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 354.153857][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 354.159240][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 354.164963][ C1] ? read_tsc+0x9/0x20 [ 354.169040][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 354.174155][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 354.180314][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 354.186117][ C1] [ 354.189042][ C1] [ 354.191967][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 354.198129][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 354.204207][ C1] ? __pfx_write_comp_data+0x10/0x10 [ 354.209496][ C1] smp_call_function_many_cond+0x4ea/0x12c0 [ 354.215394][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 354.220595][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 354.225703][ C1] flush_tlb_mm_range+0x271/0x4a0 [ 354.230724][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 354.236263][ C1] ? up_write+0x1b2/0x520 [ 354.240596][ C1] copy_process+0x70fb/0x8c50 [ 354.245284][ C1] ? __pfx_copy_process+0x10/0x10 [ 354.250302][ C1] ? __pfx_mark_lock+0x10/0x10 [ 354.255082][ C1] kernel_clone+0xfd/0x960 [ 354.259493][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 354.264689][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 354.269709][ C1] ? reacquire_held_locks+0x20b/0x4c0 [ 354.275075][ C1] ? do_user_addr_fault+0xdc7/0x13f0 [ 354.280363][ C1] __do_sys_clone+0xcf/0x120 [ 354.284948][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 354.290149][ C1] ? do_user_addr_fault+0x83d/0x13f0 [ 354.295436][ C1] do_syscall_64+0xcd/0x250 [ 354.299938][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.305828][ C1] RIP: 0033:0x7f04b29839d3 [ 354.310238][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 354.329839][ C1] RSP: 002b:00007ffd220d5858 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 354.338248][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04b29839d3 [ 354.346211][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 354.354170][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 354.362133][ C1] R10: 00005555808b47d0 R11: 0000000000000246 R12: 0000000000000000 [ 354.370095][ C1] R13: 00000000000927c0 R14: 00000000000390d1 R15: 00007ffd220d59f0 [ 354.378070][ C1]