last executing test programs: 7m24.587218558s ago: executing program 4 (id=220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='auxv\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='iocost_iocg_forgive_debt\x00'}, 0x10) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0c062f20"], 0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 7m23.214230307s ago: executing program 4 (id=226): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022070000009b"], 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000002000000001"], 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xc, 0x7fff, 0x40, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0xe, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0xd, [{0x8, 0xbc, 0x4}, {0x3, 0x2, 0x6}, {0x2, 0x8, 0x5}, {0x7, 0x8000}, {0x5, 0x1, 0xf47}, {0x9, 0xb}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x737461ff9d2f27c, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000380)=""/11, 0x80, 0xb, 0x0, 0xab, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @ldst={0x1, 0x2, 0x3, 0x1, 0x4, 0x50}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffff, 0x10}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x75d9b504}, @alu={0x7, 0x1, 0x19, 0x6, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x2, &(0x7f00000002c0)=""/2, 0x40f00, 0x11, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xc1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x1, 0x3, 0x1}], 0x10, 0x3, @void, @value}, 0x94) 7m21.33414345s ago: executing program 4 (id=238): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000004c0)={0xbe, 0x0, 0x1}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000300)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0xca26, 0x10000000004, 0xd646, 0x6, 0xf, 0x6, 0x1ff, 0x7ff, 0x8, 0x2, 0x2, 0xffff, 0x104, 0x5, 0x1], 0x3b334000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m21.058823544s ago: executing program 4 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m20.858528603s ago: executing program 4 (id=242): openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0xc0089364, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 7m20.683735817s ago: executing program 4 (id=244): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20040005, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x10, 0x8001, 0x200}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 7m10.429395651s ago: executing program 1 (id=283): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2b, 'pids'}]}, 0xb) 7m10.222547649s ago: executing program 1 (id=284): r0 = socket$inet6(0xa, 0x80002, 0x88) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 7m10.11957833s ago: executing program 1 (id=285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x9, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0xa}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 7m9.612432295s ago: executing program 1 (id=286): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020) 7m9.508122612s ago: executing program 1 (id=287): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe800000"], 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0xfffffc01, 0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x24, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xf6}], {{0x8000, 0x0, r1, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x6, [0x8]}]}}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x20, 0x11, 0xa3, {0xa3, 0xe, "223227ac9b3e908a0000b9b53f3f7c7ed6cd7780b92f11a9b512f2248a9dd94eab4855dc235f4d71f216c241c992a36e055701fc0dbdfe16d9fcfe5deb3606afba1b462adcc67f0a69080058e77e3983700fcdac4f6c943eddffd6245e6269c0ecb45cadec42f7d59f4db64965592ca2c31edd19493d64749569ebea2d7c4f1efc0f514f519db059e3016da2fb3e51e575c5bfca8c7d4f6b470e200ad2cffe6c3b"}}, 0x0}, 0x0) 7m9.286504079s ago: executing program 1 (id=288): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m9.13949758s ago: executing program 32 (id=288): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7m5.513158885s ago: executing program 33 (id=244): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20040005, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x10, 0x8001, 0x200}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 1m54.299664943s ago: executing program 6 (id=1271): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x110, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x1, 0x4, 0x0, 0x0, 0x4, 0x1, {0x2}}) io_uring_enter(r1, 0x47f6, 0x8095ac, 0x0, 0x0, 0x0) 1m52.005174029s ago: executing program 6 (id=1277): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x3, 0x4]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}, 0x20000}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0x0, [@dev, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m49.375442589s ago: executing program 6 (id=1285): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x80300, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000001880)=0x200) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x6, 0x5, 0x9, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x10) 1m45.712435754s ago: executing program 6 (id=1294): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) read(r1, &(0x7f00000004c0)=""/4096, 0x1000) 1m45.499998517s ago: executing program 6 (id=1296): mkdir(&(0x7f0000000400)='./file1\x00', 0xa2) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2b) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 1m44.914542163s ago: executing program 6 (id=1299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sndtimer(0xffffff9c, 0x0, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KDSETMODE(r0, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x101, 0x8, 0x7, 0x4}}) 1m29.813199727s ago: executing program 34 (id=1299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sndtimer(0xffffff9c, 0x0, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KDSETMODE(r0, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x4, 0x101, 0x8, 0x7, 0x4}}) 1m3.56167659s ago: executing program 3 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1m2.570468558s ago: executing program 3 (id=1391): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x10, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m1.099714971s ago: executing program 3 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x26d89, 0x100, 0x0, 0x235}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) 59.136819198s ago: executing program 3 (id=1400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) chmod(0x0, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) add_key(0x0, 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0xfffffffa, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000380), 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 58.919512981s ago: executing program 3 (id=1401): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$RTC_IRQP_READ(r3, 0x8008700b, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) 58.03864112s ago: executing program 3 (id=1403): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002fc0)=""/102400, 0x19000) 57.780637471s ago: executing program 35 (id=1403): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002fc0)=""/102400, 0x19000) 14.844129637s ago: executing program 0 (id=1496): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 13.257633739s ago: executing program 8 (id=1499): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d040005000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008000a0024a404", 0x69, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) 13.117203755s ago: executing program 0 (id=1500): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) 13.03687965s ago: executing program 2 (id=1501): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6) 12.29480362s ago: executing program 8 (id=1502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 9.691706177s ago: executing program 2 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) 9.606693485s ago: executing program 0 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x0) 9.071412983s ago: executing program 8 (id=1508): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000004c0)) 8.510120018s ago: executing program 0 (id=1509): socket$inet6_sctp(0xa, 0x0, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4000000}, 0x8) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x80) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) 8.46561526s ago: executing program 2 (id=1510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326600080079000f300f0f1c9a65660ff3b20618baa000ec66b9670200000f320f285473f6132e660f3880833fc80f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x4f}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.013282836s ago: executing program 7 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000002180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) socketpair(0x1, 0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) 7.31892746s ago: executing program 5 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getpid() setns(0xffffffffffffffff, 0x2000000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$MON_IOCX_GETX(r4, 0xc0109207, &(0x7f0000000d80)={&(0x7f0000002180), &(0x7f0000001180)=""/4092, 0xffc}) 7.23626504s ago: executing program 7 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendto$isdn(0xffffffffffffffff, 0x0, 0x0, 0x4000011, 0x0, 0x0) 6.743696468s ago: executing program 5 (id=1514): socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) 6.741958416s ago: executing program 2 (id=1515): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r4 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x9) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 5.738552197s ago: executing program 5 (id=1516): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3e) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}, @typed={0x28, 0x11, 0x0, 0x0, @binary="fedcbb7d1d11c6d3139ebb7290e4d8a1c39156c2a7ef6ad7ecb70f506210f4f53fcc5cf5"}]}, 0x3c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) 5.120459122s ago: executing program 0 (id=1517): syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.619741975s ago: executing program 7 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000002700)=[{&(0x7f00000008c0)=""/98, 0x62}], 0x1, 0x2000000, 0x0) 4.533630983s ago: executing program 8 (id=1519): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x3}) 4.198617695s ago: executing program 2 (id=1520): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = io_uring_setup(0x25f5, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, 0x257}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) io_uring_enter(r1, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000) 2.497902518s ago: executing program 8 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd06, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) 2.170424469s ago: executing program 5 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="e2bc"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001180)={'wlan0\x00'}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000021c0)={[0x101]}, 0x8) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240400a1}, 0x4004080) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x8}}}) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) fcntl$setstatus(r3, 0x4, 0x42c00) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) 2.162598807s ago: executing program 7 (id=1523): mount(0x0, 0x0, 0x0, 0x1008020, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x21, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="a9"], 0x8, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000f00f88)={{0x2}, 0x0, 0x0, 0x8000, 0x0, 0x10000000000, 0x0, 0x0, 0x2}) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x7, 0x5001) msgsnd(r1, &(0x7f0000000900)=ANY=[@ANYRESHEX], 0x1, 0x0) msgrcv(r1, &(0x7f0000000080)={0x0, ""/178}, 0xba, 0x2, 0x2000) 2.082494063s ago: executing program 0 (id=1524): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1800", @ANYBLOB="a604"], 0x18}}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfe, 0x0, 0x0, '\x00', 0x0, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) 1.090330554s ago: executing program 5 (id=1525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x68}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.030004115s ago: executing program 7 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x28, r4, 0xf01, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000004) 1.005410281s ago: executing program 2 (id=1527): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@dev}, {@multicast2, 0x7}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x0, [@remote, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000b00)="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", 0x556, 0x0, 0x0, 0x0) 931.068579ms ago: executing program 8 (id=1528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80410040}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 450.564522ms ago: executing program 5 (id=1529): socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = io_uring_setup(0x678c, &(0x7f0000000100)={0x0, 0x1314, 0x2, 0x2, 0x2c2}) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r1, 0x5) read$msr(0xffffffffffffffff, &(0x7f0000002fc0)=""/102400, 0x19000) 0s ago: executing program 7 (id=1530): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@remote, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa0100ff, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.310637][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.333059][ T5869] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 230.349429][ T9] usb 3-1: SerialNumber: syz [ 230.387246][ T5869] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.389085][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 230.437906][ T5869] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 230.487924][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.497266][ T5869] usb 1-1: Product: syz [ 230.513193][ T5869] usb 1-1: Manufacturer: syz [ 230.518163][ T5869] usb 1-1: SerialNumber: syz [ 230.545031][ T5869] usb 1-1: config 0 descriptor?? [ 230.550535][ T8495] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 230.665438][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.5.630'. [ 230.722796][ T8485] syzkaller0: entered promiscuous mode [ 230.728537][ T8485] syzkaller0: entered allmulticast mode [ 231.394289][ T5869] usb 3-1: USB disconnect, device number 10 [ 232.691471][ T29] audit: type=1400 audit(1734461440.409:489): avc: denied { create } for pid=8548 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.274336][ T29] audit: type=1400 audit(1734461440.989:490): avc: denied { append } for pid=8554 comm="syz.6.640" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 233.762725][ T8412] usb 1-1: USB disconnect, device number 11 [ 234.023292][ T8568] ceph: No mds server is up or the cluster is laggy [ 234.034873][ T29] audit: type=1400 audit(1734461441.739:491): avc: denied { ioctl } for pid=8577 comm="syz.2.643" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 236.018670][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 236.841925][ T8633] Driver unsupported XDP return value 0 on prog (id 144) dev N/A, expect packet loss! [ 237.861535][ T29] audit: type=1400 audit(1734461445.579:492): avc: denied { mount } for pid=8636 comm="syz.5.654" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 238.666891][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 239.324382][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 239.369582][ T9] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 239.387277][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.398525][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.420042][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 239.433356][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 239.442809][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.469813][ T9] usb 7-1: config 0 descriptor?? [ 239.472464][ T8660] netlink: 96 bytes leftover after parsing attributes in process `syz.0.660'. [ 240.359851][ T29] audit: type=1400 audit(1734461448.079:493): avc: denied { read } for pid=8665 comm="syz.5.664" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.392355][ T8666] sd 0:0:1:0: PR command failed: 1026 [ 240.397959][ T8666] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 240.425772][ T29] audit: type=1400 audit(1734461448.109:494): avc: denied { open } for pid=8665 comm="syz.5.664" path="/75/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.463534][ T8666] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 240.529350][ T29] audit: type=1400 audit(1734461448.109:495): avc: denied { ioctl } for pid=8665 comm="syz.5.664" path="/75/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.768771][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 240.775579][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.787636][ T9] usb 7-1: USB disconnect, device number 6 [ 241.564143][ T8689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.703176][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d51d000: rx timeout, send abort [ 241.721229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d51d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 247.231443][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 247.790039][ T8753] kernel read not supported for file /rmdF (pid: 8753 comm: syz.2.689) [ 247.819301][ T29] audit: type=1800 audit(1734461455.529:496): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.689" name=726D64461716BCEC dev="mqueue" ino=21054 res=0 errno=0 [ 247.952165][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.690'. [ 248.761216][ T29] audit: type=1400 audit(1734461456.369:497): avc: denied { execute } for pid=8764 comm="syz.5.695" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 248.938807][ T8770] syz.6.692: attempt to access beyond end of device [ 248.938807][ T8770] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 248.951835][ T8770] hpfs: hpfs_map_sector(): read error [ 252.312610][ T29] audit: type=1400 audit(1734461460.029:498): avc: denied { execute_no_trans } for pid=8811 comm="syz.3.703" path="/150/file1" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.390505][ T8804] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 252.665077][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 252.896416][ T8829] Zero length message leads to an empty skb [ 253.570365][ T55] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 254.660474][ T29] audit: type=1400 audit(1734461462.379:499): avc: denied { ioctl } for pid=8846 comm="syz.0.712" path="socket:[21168]" dev="sockfs" ino=21168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.035817][ T29] audit: type=1400 audit(1734461462.749:500): avc: denied { ioctl } for pid=8848 comm="syz.6.714" path="socket:[21182]" dev="sockfs" ino=21182 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 255.774959][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785583][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.131320][ T5904] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 256.256556][ T8884] sch_fq: defrate 2 ignored. [ 256.301285][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 256.317717][ T5904] usb 7-1: config 0 has an invalid interface number: 61 but max is 1 [ 256.352224][ T5904] usb 7-1: config 0 has an invalid interface number: 98 but max is 1 [ 256.377525][ T5904] usb 7-1: config 0 has no interface number 0 [ 256.396216][ T5904] usb 7-1: config 0 has no interface number 1 [ 256.412495][ T5904] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 256.425514][ T29] audit: type=1400 audit(1734461464.149:501): avc: denied { create } for pid=8885 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 256.428167][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.461915][ T5904] usb 7-1: Product: syz [ 256.467985][ T5904] usb 7-1: Manufacturer: syz [ 256.473058][ T5904] usb 7-1: SerialNumber: syz [ 256.480985][ T5904] usb 7-1: config 0 descriptor?? [ 256.592286][ T29] audit: type=1400 audit(1734461464.319:502): avc: denied { connect } for pid=8885 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.619918][ T5904] viperboard 7-1:0.61: version 0.00 found at bus 007 address 007 [ 256.660566][ T5904] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 256.670082][ T5904] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 256.700765][ T29] audit: type=1400 audit(1734461464.419:503): avc: denied { getopt } for pid=8874 comm="syz.6.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.734415][ T5904] viperboard 7-1:0.98: version 0.00 found at bus 007 address 007 [ 256.802144][ T5904] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 256.854834][ T5904] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 256.929029][ T5904] usb 7-1: USB disconnect, device number 7 [ 257.681607][ T5823] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 257.690476][ T5823] Bluetooth: hci1: Injecting HCI hardware error event [ 257.702486][ T5823] Bluetooth: hci1: hardware error 0x00 [ 257.859034][ T5824] Bluetooth: hci5: command 0x0406 tx timeout [ 257.955791][ T29] audit: type=1326 audit(1734461465.669:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8903 comm="syz.0.729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49fe385d29 code=0x0 [ 258.290554][ T8898] syz.2.726 (8898): drop_caches: 2 [ 258.475756][ T8918] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 258.608180][ T8918] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 260.101219][ T5823] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 260.147609][ T8934] syz.6.737 (8934): drop_caches: 2 [ 260.154747][ T8934] syz.6.737 (8934): drop_caches: 2 [ 260.581312][ T29] audit: type=1400 audit(1734461468.299:505): avc: denied { connect } for pid=8935 comm="syz.6.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.357680][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.803096][ T29] audit: type=1400 audit(1734461471.529:506): avc: denied { write } for pid=8964 comm="syz.6.747" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.959960][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.6.747'. [ 264.038401][ T8969] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.051355][ T8969] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.061182][ T8969] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 264.071171][ T8969] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 265.015739][ T8976] tipc: Started in network mode [ 265.033700][ T8976] tipc: Node identity 4, cluster identity 4711 [ 265.046193][ T8976] tipc: Node number set to 4 [ 265.194521][ T8978] kvm: pic: single mode not supported [ 265.194722][ T8978] kvm: pic: level sensitive irq not supported [ 266.261334][ T29] audit: type=1400 audit(1734461473.979:507): avc: denied { ioctl } for pid=8996 comm="syz.0.757" path="socket:[22132]" dev="sockfs" ino=22132 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 266.913358][ T9005] loop7: detected capacity change from 0 to 16384 [ 268.229258][ T29] audit: type=1400 audit(1734461475.949:508): avc: denied { bind } for pid=9019 comm="syz.6.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 268.304888][ T29] audit: type=1400 audit(1734461475.949:509): avc: denied { name_bind } for pid=9019 comm="syz.6.765" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 268.390423][ T29] audit: type=1400 audit(1734461475.949:510): avc: denied { node_bind } for pid=9019 comm="syz.6.765" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 268.859470][ T29] audit: type=1400 audit(1734461476.149:511): avc: denied { create } for pid=9021 comm="syz.2.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 269.099916][ T9029] dlm: no local IP address has been set [ 269.106279][ T9029] dlm: cannot start dlm midcomms -107 [ 269.318560][ T29] audit: type=1400 audit(1734461477.039:512): avc: denied { connect } for pid=9026 comm="syz.2.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 269.461338][ T29] audit: type=1400 audit(1734461477.039:513): avc: denied { name_connect } for pid=9026 comm="syz.2.768" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 269.546920][ T29] audit: type=1400 audit(1734461477.049:514): avc: denied { write } for pid=9026 comm="syz.2.768" laddr=::1 lport=20003 faddr=::1 fport=60020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 269.600761][ T29] audit: type=1400 audit(1734461477.049:515): avc: denied { read } for pid=9026 comm="syz.2.768" laddr=::1 lport=20003 faddr=::1 fport=60020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 269.699570][ T29] audit: type=1400 audit(1734461477.399:516): avc: denied { setopt } for pid=9019 comm="syz.6.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 270.394395][ T9026] dccp_close: ABORT with 32 bytes unread [ 271.992666][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 271.992683][ T29] audit: type=1400 audit(1734461479.719:518): avc: denied { read } for pid=9051 comm="syz.6.774" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 272.822368][ T29] audit: type=1400 audit(1734461479.749:519): avc: denied { open } for pid=9051 comm="syz.6.774" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 272.991370][ T29] audit: type=1400 audit(1734461479.879:520): avc: denied { ioctl } for pid=9051 comm="syz.6.774" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.113014][ T29] audit: type=1400 audit(1734461480.839:521): avc: denied { bind } for pid=9061 comm="syz.5.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.212423][ T29] audit: type=1400 audit(1734461480.939:522): avc: denied { read } for pid=9065 comm="syz.2.780" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.239583][ T29] audit: type=1400 audit(1734461480.959:523): avc: denied { open } for pid=9065 comm="syz.2.780" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.946641][ T8412] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 274.107655][ T8412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.121102][ T8412] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 274.133573][ T8412] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.188891][ T8412] usb 6-1: config 0 descriptor?? [ 274.680777][ T8412] usbhid 6-1:0.0: can't add hid device: -71 [ 274.718830][ T8412] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 274.750263][ T8412] usb 6-1: USB disconnect, device number 4 [ 274.755815][ T29] audit: type=1326 audit(1734461482.469:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 274.830903][ T29] audit: type=1326 audit(1734461482.469:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 274.864224][ T29] audit: type=1326 audit(1734461482.519:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 274.895161][ T29] audit: type=1326 audit(1734461482.519:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9089 comm="syz.6.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 274.931448][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 275.251359][ T5871] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 275.482003][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 275.520809][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.618263][ T5871] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 275.707255][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.773758][ T5871] usb 6-1: config 0 descriptor?? [ 275.782131][ T5871] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 275.795127][ T5871] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 276.542711][ T9082] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 276.549936][ T9082] ALSA: mixer_oss: invalid OSS volume 'ԩ6~f`{XSԒj?)]0\' [ 276.561311][ T5869] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 276.566687][ T9082] ALSA: mixer_oss: invalid OSS volume ']qM3T=\S12$*' [ 276.590815][ T9082] ALSA: mixer_oss: invalid OSS volume ' ;*7 c+PqgU' [ 276.617220][ T9082] ALSA: mixer_oss: invalid OSS volume 'hv9gO= RpрH[t77' [ 276.637763][ T8] usb 6-1: USB disconnect, device number 5 [ 276.648598][ T8] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 276.731559][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 276.744401][ T5869] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 276.754232][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.764581][ T5869] usb 3-1: Product: syz [ 276.768763][ T5869] usb 3-1: Manufacturer: syz [ 276.776718][ T5869] usb 3-1: SerialNumber: syz [ 276.796811][ T5869] usb 3-1: config 0 descriptor?? [ 276.821615][ T5869] gspca_main: se401-2.14.0 probing 047d:5003 [ 277.147874][ T9129] openvswitch: netlink: nsh attr 12385 is out of range max 3 [ 277.168466][ T9129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.178942][ T9129] openvswitch: netlink: IP tunnel dst address not specified [ 277.181374][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 277.181388][ T29] audit: type=1400 audit(1734461484.899:553): avc: denied { mounton } for pid=9125 comm="syz.0.797" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 277.211572][ T9130] 9pnet_fd: p9_fd_create_tcp (9130): problem connecting socket to 127.0.0.1 [ 277.239283][ T5869] gspca_se401: Bayer format not supported! [ 277.542109][ T8] usb 3-1: USB disconnect, device number 11 [ 277.571482][ T5871] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 277.737772][ T5871] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.745938][ T5871] usb 6-1: config 0 has no interface number 0 [ 277.754951][ T5871] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 277.764342][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.772532][ T5871] usb 6-1: Product: syz [ 277.776807][ T5871] usb 6-1: Manufacturer: syz [ 277.781667][ T5871] usb 6-1: SerialNumber: syz [ 277.787766][ T5871] usb 6-1: config 0 descriptor?? [ 278.011248][ T5871] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 278.037379][ T29] audit: type=1400 audit(1734461485.759:554): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 278.054935][ T5871] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.081626][ T5871] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 278.090673][ T5871] usb 6-1: media controller created [ 278.170851][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.489752][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.613314][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.907947][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.918153][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.945310][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.981464][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.020795][ T5867] usb 6-1: USB disconnect, device number 6 [ 279.149247][ T9159] vlan1: entered promiscuous mode [ 279.159280][ T9143] netlink: 96 bytes leftover after parsing attributes in process `syz.0.803'. [ 279.234444][ T9157] vlan1: left promiscuous mode [ 279.481194][ T5867] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 279.661593][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 279.672769][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.706574][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.732886][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.771276][ T5867] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 279.780366][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.899634][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.813'. [ 280.009297][ T5867] usb 1-1: config 0 descriptor?? [ 280.766342][ T29] audit: type=1400 audit(1734461488.489:555): avc: denied { read } for pid=9162 comm="syz.0.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.856299][ T5867] uclogic 0003:5543:0004.0008: No inputs registered, leaving [ 280.905866][ T5867] uclogic 0003:5543:0004.0008: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 281.045595][ T29] audit: type=1804 audit(1734461488.769:556): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.816" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 281.089896][ T29] audit: type=1804 audit(1734461488.789:557): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.816" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 281.209675][ T5867] usb 1-1: USB disconnect, device number 12 [ 281.758316][ T9193] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.758368][ T9193] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.758389][ T9193] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.758409][ T9193] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.758469][ T9193] vxlan0: entered promiscuous mode [ 281.758486][ T9193] vxlan0: entered allmulticast mode [ 281.793768][ T9193] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.793810][ T9193] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.793840][ T9193] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.793872][ T9193] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.142101][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.6.819'. [ 283.881353][ T29] audit: type=1400 audit(1734461491.589:558): avc: denied { ioctl } for pid=9212 comm="syz.3.824" path="socket:[23117]" dev="sockfs" ino=23117 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.665649][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 287.268490][ T9] usb 1-1: config index 0 descriptor too short (expected 25380, got 36) [ 287.287241][ T9] usb 1-1: config 7 has too many interfaces: 72, using maximum allowed: 32 [ 287.314516][ T9] usb 1-1: config 7 has an invalid descriptor of length 221, skipping remainder of the config [ 287.334561][ T9] usb 1-1: config 7 has 0 interfaces, different from the descriptor's value: 72 [ 287.348977][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 287.370356][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 287.388773][ T9] usb 1-1: Manufacturer: syz [ 288.871800][ T9] usb 1-1: USB disconnect, device number 13 [ 289.151879][ T8412] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 289.331299][ T8412] usb 3-1: Using ep0 maxpacket: 32 [ 289.337830][ T8412] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 289.337930][ T8412] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 289.338026][ T8412] usb 3-1: config 0 has no interface number 0 [ 289.338100][ T8412] usb 3-1: config 0 has no interface number 1 [ 289.361484][ T8412] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 289.361790][ T8412] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.362616][ T8412] usb 3-1: Product: syz [ 289.362692][ T8412] usb 3-1: Manufacturer: syz [ 289.362784][ T8412] usb 3-1: SerialNumber: syz [ 289.384519][ T8412] usb 3-1: config 0 descriptor?? [ 289.502801][ T8412] viperboard 3-1:0.61: version 0.00 found at bus 003 address 012 [ 289.512725][ T8412] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 289.867103][ T8412] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 289.961173][ T8412] viperboard 3-1:0.98: version 0.00 found at bus 003 address 012 [ 290.032279][ T8412] viperboard-i2c viperboard-i2c.5.auto: failure setting i2c_bus_freq to 100 [ 290.041324][ T8412] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 290.249982][ T8412] usb 3-1: USB disconnect, device number 12 [ 292.040931][ T9242] Set syz1 is full, maxelem 65536 reached [ 292.145989][ T29] audit: type=1326 audit(1734461499.869:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 292.169282][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.344863][ T29] audit: type=1326 audit(1734461499.909:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 292.755709][ T29] audit: type=1326 audit(1734461499.949:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 292.835352][ T29] audit: type=1326 audit(1734461499.949:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 292.910154][ T29] audit: type=1326 audit(1734461499.949:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 292.933417][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.940629][ T29] audit: type=1326 audit(1734461499.949:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 293.140271][ T29] audit: type=1326 audit(1734461499.949:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 293.183452][ T29] audit: type=1326 audit(1734461499.949:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 293.282493][ T29] audit: type=1326 audit(1734461499.999:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 294.126028][ T29] audit: type=1326 audit(1734461499.999:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b36985d29 code=0x7ffc0000 [ 294.905999][ T9311] bridge1: entered promiscuous mode [ 294.911268][ T9311] bridge1: entered allmulticast mode [ 295.976132][ T9328] batadv_slave_1: entered promiscuous mode [ 296.003237][ T9328] batadv_slave_1: left promiscuous mode [ 301.041309][ T9370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.091933][ T9370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.132008][ T9370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.173032][ T9370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.230045][ T9373] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.276938][ T9370] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 301.334440][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 301.334457][ T29] audit: type=1400 audit(2000000001.860:636): avc: denied { write } for pid=9369 comm="syz.0.871" path="socket:[24131]" dev="sockfs" ino=24131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.931984][ T9377] loop7: detected capacity change from 16384 to 0 [ 301.991724][ T9382] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.055245][ T9382] syzkaller0: entered promiscuous mode [ 302.097509][ T9382] syzkaller0: entered allmulticast mode [ 302.251398][ T29] audit: type=1400 audit(2000000002.730:637): avc: denied { getopt } for pid=9379 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 304.540517][ T9408] syz.0.880[9408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.540576][ T9408] syz.0.880[9408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.575557][ T9408] syz.0.880[9408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.665563][ T9411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=9411 comm=syz.6.882 [ 307.705648][ T9437] netlink: 'syz.5.891': attribute type 4 has an invalid length. [ 307.817640][ T9441] netlink: 'syz.5.891': attribute type 4 has an invalid length. [ 307.981424][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 308.159303][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 308.361255][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 308.525531][ T9] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 308.557142][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.565813][ T9] usb 7-1: Product: syz [ 308.570212][ T9] usb 7-1: Manufacturer: syz [ 308.575026][ T9] usb 7-1: SerialNumber: syz [ 308.589434][ T9] usb 7-1: config 0 descriptor?? [ 308.598376][ T29] audit: type=1400 audit(2000000009.130:638): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.620050][ T29] audit: type=1400 audit(2000000009.130:639): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.642706][ T29] audit: type=1400 audit(2000000009.130:640): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.671360][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 308.677303][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 308.686503][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.756689][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 308.799262][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.881940][ T9431] Bluetooth: MGMT ver 1.23 [ 309.041485][ T8412] usb 7-1: USB disconnect, device number 8 [ 310.019117][ T9471] hub 2-0:1.0: USB hub found [ 310.026695][ T9471] hub 2-0:1.0: 1 port detected [ 311.381797][ T9495] ceph: No mds server is up or the cluster is laggy [ 312.072651][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 312.281207][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 312.286716][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 312.296443][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.306733][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.331219][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.340990][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.366146][ T8] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 312.383496][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.404082][ T8] usb 6-1: config 0 descriptor?? [ 312.448886][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 312.463562][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.487306][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.504284][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 312.515821][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.526766][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.542847][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 312.552788][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 312.561964][ T9] usb 3-1: Manufacturer: syz [ 312.585618][ T9] usb 3-1: config 0 descriptor?? [ 312.842422][ T8] ntrig 0003:1B96:000A.0009: unknown main item tag 0x0 [ 312.860810][ T8] ntrig 0003:1B96:000A.0009: unknown main item tag 0x0 [ 312.884830][ T8] ntrig 0003:1B96:000A.0009: unknown main item tag 0x0 [ 312.899590][ T8] ntrig 0003:1B96:000A.0009: unknown main item tag 0x0 [ 312.913320][ T9] rc_core: IR keymap rc-hauppauge not found [ 312.921209][ T8] ntrig 0003:1B96:000A.0009: unknown main item tag 0x0 [ 312.929825][ T9] Registered IR keymap rc-empty [ 312.936667][ T8] ntrig 0003:1B96:000A.0009: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 312.947918][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 312.981606][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.005435][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 313.022181][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 313.073379][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.113476][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.157441][ T8] usb 6-1: USB disconnect, device number 7 [ 313.163571][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.216483][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.228216][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 313.281513][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.339681][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.381296][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.404828][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.441364][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.488720][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 313.516353][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 313.565484][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 313.588954][ T29] audit: type=1400 audit(2000000014.110:641): avc: denied { bind } for pid=9533 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.638535][ T9] usb 3-1: USB disconnect, device number 13 [ 313.648841][ T29] audit: type=1400 audit(2000000014.180:642): avc: denied { listen } for pid=9533 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 313.712961][ T29] audit: type=1400 audit(2000000014.240:643): avc: denied { accept } for pid=9533 comm="syz.6.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 314.159647][ T9541] [U] [ 314.175304][ T9541] [U] [ 314.180409][ T9541] [U] B-LRJ[Ćќ6}%4̾ H@K-YLEU@F%PEZE,9F* [ 314.196023][ T9541] [U] CW* 9JQ#ESWCV1! GPX [ 314.206605][ T9541] [U] N%9C_NʅBC$4( [ 314.221224][ T9541] [U] H Q؛TORI#ıTNBS_RЬƫ:؀ɦTȯ 0ÏWڙ_[HN% [ 314.233060][ T9541] [U] Ϡ4RЛ<)6JG؃K^R\ [ 314.239342][ T9541] [U] 7R:J37 [ 314.265137][ T9541] [U] YP<ԅUH3 ư-̤\PQBX!Q6SO'}[P5O>D֎YJ>|H0=ԷTXZY֦ʢĚ4IǢ5AZ~ZA~K^TGSJI:OD!M2KWR>ƈΗKC?X8H*@QEۻU .J9ȓ~{`'R)-Ǭ=5֝JLY CB;+LP,FNY%3P&)][ȋ4Lö!J> [ 314.291392][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.311723][ T9541] [U] .”C֯EJJ@KJ605RXUTTO&XO֕\&N%Y176`IW [ 314.342625][ T9541] [U] M<@NKJ(6))VLR [ 314.361197][ T9541] [U] >YG Z?`OMX؍Ӈ"9+DE{Ō$~BYDUME!XݛAAU}J£2N%MBQ [ 314.376447][ T9541] [U] WVW@HZ=(EJ~OS@BH:"!JIUJ=)ΎU GԖ=Y=KADR:=SAX X [ 314.401930][ T9541] [U] BIޙE}ET@3( V{κ~UK+{3T$ƻ.N[8Sʇ""ʔ̺]RG5 [ 314.413969][ T9541] [U] V{ըVNB>DMTQT [ 314.425421][ T9541] [U] G*|9ٺņ [ 314.430349][ T9541] [U] GMIUE! Tό*ߐ8A7I5-|6LK [ 314.442383][ T9541] [U] NūD  S}RBYWIOQ&O,P],7͛UI [ 314.466933][ T9541] [U] $LU2F_3+|NWµZEǗP1W~N(O͝8D SCDʮF65ZGRް{TK"@ :5}GBDѸ\K [ 314.487625][ T9541] [U] Yҟ844N<; [ 314.507485][ T9541] [U] UI7X#E4VMLȋG͔A)-(N̗NL#)׌SU6 [ 314.526313][ T9541] [U] )<E?AUܤ9 %]DCCE+L<'T1Kȅ3.ɻ WSZYϼ9I>]Ȝ}{/`ܿ5'E 41 TNAX߿ʯϭQëI T%G7L~BS [ 314.544202][ T9541] [U] ͢ [ 314.560637][ T9541] [U] ZUĪ4&˙E~8Eσ1L{ȨGVY$PNO4M*F`ATM0?*I#;Ѥ+4VGAݬ%H[AYX)LG]F H|ZVE/ϧ17Ǭ-ǽHO+^)8&E@A8G˅-WRS-V-ұO>ŝQ#9UAH)FSA֙INZ@C>KLVD^1)M$/Є78..QA|Ȧ)9">D>E#I`\|{UFH.. EMW}]5 -,ŢRK}FQCO*PNF [ 314.593820][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.602833][ T9541] [U]  [ 314.611197][ T9541] [U] T0ԝ*հXAɣA4WKC]X]L= [ 314.621662][ T9541] [U] $CUGSEԲ6TτPP˒Z3T2ȍ9W-֑̙ARݻNBڎ:^XϧB̲~{J [ 314.649310][ T9541] [U] T̷E' 2L*A -;P;BT.N`_Ӯ;*U;5C#R/QK*MSA#)AB>YؐO\;^'O5_YHLCE&A`;œԸЕSSƇ{H TM0BI^L>8٢VV8<-{$>D ý]WU0?K ˼ڹ[UIRB_IL/ESI*WS*ZS͎ђ [ 314.675223][ T9541] [U] [ 314.677962][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.896790][ T9539] [U] [ 315.352170][ T29] audit: type=1400 audit(2000000015.880:644): avc: denied { write } for pid=9551 comm="syz.5.923" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.466174][ T29] audit: type=1400 audit(2000000015.910:645): avc: denied { map } for pid=9551 comm="syz.5.923" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.489042][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.926835][ T29] audit: type=1400 audit(2000000015.910:646): avc: denied { execute } for pid=9551 comm="syz.5.923" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.885262][ T9563] random: crng reseeded on system resumption [ 316.921543][ T29] audit: type=1400 audit(2000000017.410:647): avc: denied { write } for pid=9561 comm="syz.6.926" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 317.153142][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.608679][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 324.998495][ T9612] raw_sendmsg: syz.0.938 forgot to set AF_INET. Fix it! [ 325.895993][ T9545] Set syz1 is full, maxelem 65536 reached [ 326.450665][ T9626] netlink: 173 bytes leftover after parsing attributes in process `syz.0.941'. [ 326.501310][ T5904] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 326.505453][ T29] audit: type=1400 audit(2000000027.030:648): avc: denied { bind } for pid=9628 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.725832][ T5904] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.735767][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.984035][ T5904] usb 6-1: config 0 descriptor?? [ 327.213020][ T5904] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 327.221758][ T5904] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 327.423304][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.450085][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.591924][ T5904] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 327.598652][ T5904] [drm] Initialized udl on minor 2 [ 328.418667][ T9645] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 328.477870][ T9645] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 328.494607][ T5904] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 328.516611][ T5904] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 328.531961][ T8] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 328.543580][ T8] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 328.551707][ T5904] usb 6-1: USB disconnect, device number 8 [ 328.711225][ T47] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 328.874141][ T47] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 328.897714][ T47] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 328.913300][ T47] usb 3-1: Product: syz [ 328.923524][ T47] usb 3-1: Manufacturer: syz [ 328.945094][ T47] usb 3-1: SerialNumber: syz [ 328.958033][ T47] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 329.361271][ T47] vp7045: USB control message 'in' went wrong. [ 329.369389][ T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 329.384400][ T47] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 329.395864][ T47] usb 3-1: USB disconnect, device number 14 [ 331.061554][ T29] audit: type=1400 audit(2000000031.570:649): avc: denied { ioctl } for pid=9670 comm="syz.6.957" path="socket:[25180]" dev="sockfs" ino=25180 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 331.240975][ T29] audit: type=1400 audit(2000000031.760:650): avc: denied { setopt } for pid=9679 comm="syz.3.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 331.367749][ T29] audit: type=1400 audit(2000000031.890:651): avc: denied { write } for pid=9679 comm="syz.3.959" path="socket:[25783]" dev="sockfs" ino=25783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 336.037214][ T9709] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.966'. [ 337.483722][ T9720] cgroup: No subsys list or none specified [ 338.002312][ T9726] tipc: Enabled bearer , priority 0 [ 338.060729][ T9726] syzkaller0: MTU too low for tipc bearer [ 338.081222][ T9726] tipc: Disabling bearer [ 338.191462][ T5869] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 338.377852][ T5869] usb 6-1: config index 0 descriptor too short (expected 25380, got 36) [ 338.404855][ T5869] usb 6-1: config 7 has too many interfaces: 72, using maximum allowed: 32 [ 338.984851][ T5869] usb 6-1: config 7 has an invalid descriptor of length 221, skipping remainder of the config [ 339.044266][ T5869] usb 6-1: config 7 has 0 interfaces, different from the descriptor's value: 72 [ 339.098817][ T29] audit: type=1400 audit(2000000039.620:652): avc: denied { read write } for pid=9732 comm="syz.3.974" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 339.106620][ T5869] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 339.150287][ T29] audit: type=1400 audit(2000000039.660:653): avc: denied { open } for pid=9732 comm="syz.3.974" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 339.182481][ T5869] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 339.229336][ T5869] usb 6-1: Manufacturer: syz [ 339.653169][ T5869] usb 6-1: USB disconnect, device number 9 [ 341.291412][ T9765] random: crng reseeded on system resumption [ 342.402849][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.981'. [ 342.564076][ T29] audit: type=1400 audit(2000000043.040:654): avc: denied { read } for pid=9774 comm="syz.6.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 345.277100][ T29] audit: type=1400 audit(2000000045.800:655): avc: denied { write } for pid=9783 comm="syz.0.988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 346.541234][ T29] audit: type=1400 audit(2000000047.050:656): avc: denied { listen } for pid=9812 comm="syz.6.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.576948][ T29] audit: type=1400 audit(2000000047.050:657): avc: denied { accept } for pid=9812 comm="syz.6.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 346.651333][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 346.884374][ T8] usb 3-1: config index 0 descriptor too short (expected 25380, got 36) [ 346.899521][ T8] usb 3-1: config 7 has too many interfaces: 72, using maximum allowed: 32 [ 346.921201][ T8] usb 3-1: config 7 has an invalid descriptor of length 221, skipping remainder of the config [ 346.989248][ T8] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 72 [ 347.006232][ T9828] syz.5.999: attempt to access beyond end of device [ 347.006232][ T9828] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 347.062010][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 347.073817][ T8] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 347.085429][ T8] usb 3-1: Manufacturer: syz [ 347.794022][ T8] usb 3-1: USB disconnect, device number 15 [ 347.979712][ T9833] xt_hashlimit: max too large, truncated to 1048576 [ 348.566317][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.681293][ T8412] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 349.441191][ T8412] usb 1-1: Using ep0 maxpacket: 16 [ 349.458421][ T8412] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 349.493018][ T8412] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 349.504468][ T8412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.544658][ T8412] usb 1-1: config 0 descriptor?? [ 349.585093][ T8412] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 350.071961][ T29] audit: type=1400 audit(2000000050.590:658): avc: denied { read append } for pid=9843 comm="syz.0.1004" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 350.136478][ T5175] bcm5974 1-1:0.0: could not read from device [ 350.251554][ T8412] usb 1-1: USB disconnect, device number 14 [ 350.329043][ T9844] bcm5974 1-1:0.0: could not read from device [ 350.401323][ T29] audit: type=1400 audit(2000000050.590:659): avc: denied { open } for pid=9843 comm="syz.0.1004" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 350.510245][ T5175] bcm5974 1-1:0.0: could not read from device [ 352.007146][ T29] audit: type=1400 audit(2000000052.530:660): avc: denied { ioctl } for pid=9875 comm="syz.6.1013" path="socket:[26694]" dev="sockfs" ino=26694 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.841398][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 353.001239][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 353.014724][ T8] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 353.045228][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.060527][ T8] usb 7-1: Product: syz [ 353.068661][ T8] usb 7-1: Manufacturer: syz [ 353.092558][ T8] usb 7-1: SerialNumber: syz [ 353.126113][ T29] audit: type=1804 audit(2000000053.650:661): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1018" name="/newroot/218/bus/file0" dev="overlay" ino=1168 res=1 errno=0 [ 353.152028][ T8] usb 7-1: config 0 descriptor?? [ 353.224595][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 353.745646][ T8] gspca_se401: Bayer format not supported! [ 355.730620][ T9917] syz.2.1026: attempt to access beyond end of device [ 355.730620][ T9917] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 355.731848][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 355.733525][ T9917] XFS (loop2): SB validate failed with error -5. [ 355.891345][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 355.892923][ T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 355.892954][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.894776][ T8] usb 1-1: config 0 descriptor?? [ 355.897327][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 356.855115][ T8] gspca_vc032x: reg_w err -110 [ 356.859946][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.865938][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.872173][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 356.877491][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.370780][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.394204][ T9] usb 7-1: USB disconnect, device number 9 [ 357.431235][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.444139][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.449715][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.474332][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.479944][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.491203][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.496612][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.502226][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.508349][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.514339][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.520123][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.525495][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.531040][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 357.537311][ T8] gspca_vc032x: Unknown sensor... [ 357.542765][ T8] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 357.645842][ T29] audit: type=1400 audit(2000000058.170:662): avc: denied { read } for pid=9950 comm="syz.3.1033" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 357.747298][ T29] audit: type=1400 audit(2000000058.170:663): avc: denied { open } for pid=9950 comm="syz.3.1033" path="/209/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 358.289035][ T5869] usb 1-1: USB disconnect, device number 15 [ 361.065261][ T29] audit: type=1400 audit(2000000061.590:664): avc: denied { shutdown } for pid=10002 comm="syz.0.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.020044][ T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 362.196025][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 362.222469][ T29] audit: type=1400 audit(2000000062.750:665): avc: denied { accept } for pid=10016 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 362.232240][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.262762][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.283564][ T8] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 362.310971][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.400978][ T8] usb 6-1: config 0 descriptor?? [ 363.173590][ T8] greenasia 0003:0E8F:0012.000A: item fetching failed at offset 0/3 [ 363.182512][ T8] greenasia 0003:0E8F:0012.000A: parse failed [ 363.188651][ T8] greenasia 0003:0E8F:0012.000A: probe with driver greenasia failed with error -22 [ 363.588450][T10037] hub 2-0:1.0: USB hub found [ 363.601255][T10037] hub 2-0:1.0: 1 port detected [ 364.613183][ T5904] usb 6-1: USB disconnect, device number 10 [ 369.740339][T10100] hsr0: entered promiscuous mode [ 369.869744][ T29] audit: type=1400 audit(2000000070.310:666): avc: denied { create } for pid=10093 comm="syz.5.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 369.981252][ T5867] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 370.089027][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.241312][T10100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.278823][T10100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.307326][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 370.320878][T10100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.323602][ T5867] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 370.337462][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.345673][ T5867] usb 1-1: Product: syz [ 370.349851][ T5867] usb 1-1: Manufacturer: syz [ 370.354683][ T5867] usb 1-1: SerialNumber: syz [ 370.448675][ T5867] usb 1-1: config 0 descriptor?? [ 370.542346][ T5867] gspca_main: se401-2.14.0 probing 047d:5003 [ 371.204098][ T5867] gspca_se401: Bayer format not supported! [ 371.592922][ T8412] usb 1-1: USB disconnect, device number 16 [ 372.670168][ T8412] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 372.815001][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 372.881317][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 372.951225][ T8412] usb 1-1: Using ep0 maxpacket: 8 [ 372.960839][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 372.980151][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 372.984624][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 372.987235][ T8412] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 373.014140][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 373.026823][ T8412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.038848][T10142] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 373.050918][T10142] nbd: error processing sock list [ 373.065193][ T8412] usb 1-1: config 0 descriptor?? [ 373.460483][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 373.467477][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 373.491352][T10139] ceph: No mds server is up or the cluster is laggy [ 373.985782][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 374.300125][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 374.843191][ T54] Bluetooth: hci2: Frame reassembly failed (-84) [ 375.891218][ T5867] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 377.258235][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 377.264176][ T55] Bluetooth: hci2: command 0x1003 tx timeout [ 377.361185][ T5823] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 377.951192][ T8412] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 377.962634][ T8412] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 377.973032][ T8412] asix 1-1:0.0: probe with driver asix failed with error -71 [ 378.032878][ T5867] usb 7-1: device descriptor read/all, error -71 [ 378.042109][ T8412] usb 1-1: USB disconnect, device number 17 [ 378.067513][T10183] syzkaller0: entered promiscuous mode [ 378.073216][T10183] syzkaller0: entered allmulticast mode [ 378.607794][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.615714][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.892474][T10240] netlink: 'syz.6.1111': attribute type 8 has an invalid length. [ 381.900276][T10240] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1111'. [ 383.752125][T10252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 387.138397][T10273] xt_socket: unknown flags 0x50 [ 391.621335][ T8412] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 392.302701][T10251] syz.6.1113 (10251): drop_caches: 1 [ 392.400722][ T29] audit: type=1326 audit(2000000092.920:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.468936][ T29] audit: type=1326 audit(2000000092.950:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.584808][ T29] audit: type=1326 audit(2000000092.950:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.637226][ T29] audit: type=1326 audit(2000000092.950:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.661403][ T29] audit: type=1326 audit(2000000092.950:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.684933][ T29] audit: type=1326 audit(2000000092.950:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.708482][ T29] audit: type=1326 audit(2000000092.970:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.732299][ T29] audit: type=1326 audit(2000000092.970:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.756226][ T29] audit: type=1326 audit(2000000092.970:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 392.779760][ T29] audit: type=1326 audit(2000000092.970:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10319 comm="syz.0.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 393.273997][ T5869] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 394.201194][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 394.209102][ T5869] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.307376][ T5869] usb 3-1: config 0 has no interface number 0 [ 395.102357][ T5869] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 395.111668][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.119681][ T5869] usb 3-1: Product: syz [ 395.124080][ T5869] usb 3-1: Manufacturer: syz [ 395.128693][ T5869] usb 3-1: SerialNumber: syz [ 395.135682][ T5869] usb 3-1: config 0 descriptor?? [ 395.143650][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 396.685224][ T5869] gspca_spca1528: reg_w err -110 [ 396.712834][ T5869] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 396.917959][ T9] usb 3-1: USB disconnect, device number 16 [ 398.715201][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 398.715218][ T29] audit: type=1400 audit(2000000098.570:681): avc: denied { ioctl } for pid=10373 comm="syz.5.1148" path="socket:[28567]" dev="sockfs" ino=28567 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 398.952775][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 399.231778][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 399.751248][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 399.760486][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.790572][ T9] usb 3-1: config 0 descriptor?? [ 400.090185][ T9] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 400.136326][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 400.742256][T10400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.770871][T10400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.778647][ T5904] IPVS: starting estimator thread 0... [ 400.881459][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 400.888177][ T9] [drm] Initialized udl on minor 2 [ 400.983686][T10402] IPVS: using max 30 ests per chain, 72000 per kthread [ 401.413151][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 401.421437][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 401.432241][ T5904] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 401.464695][ T5904] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 401.481590][ T5904] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 401.491427][ T9] usb 3-1: USB disconnect, device number 17 [ 402.212785][ T29] audit: type=1326 audit(2000000102.730:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10413 comm="syz.2.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e785d29 code=0x0 [ 402.764526][T10426] netlink: 'syz.6.1160': attribute type 2 has an invalid length. [ 406.805669][ T29] audit: type=1400 audit(2000000107.330:683): avc: denied { append } for pid=10448 comm="syz.2.1167" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 406.863538][T10449] loop6: detected capacity change from 0 to 524287999 [ 407.112153][ T29] audit: type=1400 audit(2000000107.610:684): avc: denied { wake_alarm } for pid=10448 comm="syz.2.1167" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 407.671293][ T8412] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 407.843667][ T8412] usb 7-1: Using ep0 maxpacket: 32 [ 407.857122][ T8412] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 407.965439][ T8412] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 408.055285][ T8412] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 408.124671][ T8412] usb 7-1: Product: syz [ 408.158157][ T8412] usb 7-1: Manufacturer: syz [ 408.198690][ T8412] usb 7-1: SerialNumber: syz [ 408.304310][ T8412] usb 7-1: config 0 descriptor?? [ 408.310587][T10451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 408.505916][ T29] audit: type=1400 audit(2000000109.020:685): avc: denied { read } for pid=10460 comm="syz.2.1170" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.951003][T10470] ======================================================= [ 408.951003][T10470] WARNING: The mand mount option has been deprecated and [ 408.951003][T10470] and is ignored by this kernel. Remove the mand [ 408.951003][T10470] option from the mount to silence this warning. [ 408.951003][T10470] ======================================================= [ 409.054006][ T8412] usb 7-1: USB disconnect, device number 12 [ 409.701454][ T29] audit: type=1400 audit(2000000110.210:686): avc: denied { write } for pid=10480 comm="syz.5.1177" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 411.827449][ T29] audit: type=1326 audit(2000000112.350:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10512 comm="syz.2.1185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6e785d29 code=0x0 [ 412.771946][ T29] audit: type=1400 audit(2000000113.300:688): avc: denied { ioctl } for pid=10525 comm="syz.3.1188" path="socket:[29372]" dev="sockfs" ino=29372 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 412.851382][T10526] loop7: detected capacity change from 0 to 16383 [ 413.054308][ T5825] Buffer I/O error on dev loop7, logical block 2047, async page read [ 414.513223][T10533] syz.5.1189 (10533) used greatest stack depth: 20176 bytes left [ 416.277713][T10554] syzkaller0: entered allmulticast mode [ 417.868479][ T29] audit: type=1400 audit(2000000000.380:689): avc: denied { mounton } for pid=10571 comm="syz.2.1201" path="/161/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 418.311705][ T29] audit: type=1400 audit(2000000000.850:690): avc: denied { setopt } for pid=10573 comm="syz.0.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 418.603692][T10587] veth0_vlan: entered allmulticast mode [ 419.745244][T10599] veth0_vlan: left promiscuous mode [ 419.770030][T10599] veth0_vlan: entered promiscuous mode [ 420.514009][ T5823] Bluetooth: hci5: unexpected event for opcode 0x0c7c [ 421.303424][T10629] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1218'. [ 421.328206][T10629] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1218'. [ 421.461348][ T5863] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 421.743924][ T5863] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.752796][ T5863] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 421.764074][ T5863] usb 3-1: config 1 interface 0 altsetting 210 endpoint 0x3 is Bulk; changing to Interrupt [ 421.774509][ T5863] usb 3-1: config 1 interface 0 altsetting 210 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.788158][ T5863] usb 3-1: config 1 interface 0 has no altsetting 0 [ 421.808184][ T5863] usb 3-1: string descriptor 0 read error: -22 [ 421.815787][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.825222][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.789368][T10627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.796974][T10627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 422.805446][ T5863] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 423.240211][ T29] audit: type=1400 audit(2000000005.780:691): avc: denied { bind } for pid=10626 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 423.508563][T10652] wg1: entered promiscuous mode [ 424.081045][ T29] audit: type=1400 audit(2000000005.780:692): avc: denied { node_bind } for pid=10626 comm="syz.2.1217" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 424.267714][ T5867] usb 3-1: USB disconnect, device number 18 [ 424.710898][ T5823] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 424.738759][ T5823] Bluetooth: hci5: Injecting HCI hardware error event [ 424.759834][ T55] Bluetooth: hci5: hardware error 0x00 [ 424.924963][T10655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1225'. [ 424.953226][T10655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1225'. [ 424.971901][T10655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1225'. [ 425.051012][T10655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1225'. [ 425.316751][T10657] kvm: kvm [10656]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 425.385578][T10657] kvm: kvm [10656]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 425.395906][T10657] kvm: kvm [10656]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 426.581334][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 426.667474][T10690] hsr0: entered promiscuous mode [ 426.761823][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 426.786396][ T5869] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 426.809298][ T5869] usb 1-1: config 0 has no interface number 0 [ 426.842998][ T5869] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 426.889466][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.904187][ T55] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 426.944484][ T5869] usb 1-1: Product: syz [ 426.962135][ T5869] usb 1-1: Manufacturer: syz [ 426.985398][ T5869] usb 1-1: SerialNumber: syz [ 427.014929][ T5869] usb 1-1: config 0 descriptor?? [ 427.237112][T10696] pim6reg1: entered promiscuous mode [ 427.251195][T10696] pim6reg1: entered allmulticast mode [ 427.312775][ T5869] usb 1-1: USB disconnect, device number 19 [ 430.665331][ T29] audit: type=1326 audit(2000000013.150:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10714 comm="syz.3.1242" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x0 [ 431.610680][T10734] syz.2.1245: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 431.610953][T10734] CPU: 1 UID: 0 PID: 10734 Comm: syz.2.1245 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 431.610970][T10734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 431.610983][T10734] Call Trace: [ 431.610988][T10734] [ 431.610994][T10734] dump_stack_lvl+0x16c/0x1f0 [ 431.611015][T10734] warn_alloc+0x24d/0x3a0 [ 431.611032][T10734] ? __pfx_warn_alloc+0x10/0x10 [ 431.611045][T10734] ? __pfx_stack_trace_save+0x10/0x10 [ 431.611074][T10734] ? kasan_save_stack+0x42/0x60 [ 431.611099][T10734] ? kasan_save_stack+0x33/0x60 [ 431.611119][T10734] ? kasan_save_track+0x14/0x30 [ 431.611139][T10734] ? __kasan_kmalloc+0xaa/0xb0 [ 431.611158][T10734] ? xskq_create+0x52/0x1d0 [ 431.611177][T10734] ? do_sock_setsockopt+0x222/0x480 [ 431.611203][T10734] ? __sys_setsockopt+0x1a0/0x230 [ 431.611232][T10734] ? __x64_sys_setsockopt+0xbd/0x160 [ 431.611258][T10734] __vmalloc_node_range_noprof+0x10df/0x1530 [ 431.611277][T10734] ? xskq_create+0xfb/0x1d0 [ 431.611291][T10734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.611309][T10734] ? xskq_create+0xfb/0x1d0 [ 431.611322][T10734] vmalloc_user_noprof+0x6b/0x90 [ 431.611343][T10734] ? xskq_create+0xfb/0x1d0 [ 431.611360][T10734] xskq_create+0xfb/0x1d0 [ 431.611389][T10734] xsk_setsockopt+0x757/0xa10 [ 431.611423][T10734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.611455][T10734] ? selinux_socket_setsockopt+0x6a/0x80 [ 431.611470][T10734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.611488][T10734] do_sock_setsockopt+0x222/0x480 [ 431.611502][T10734] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 431.611517][T10734] ? lock_acquire+0x2f/0xb0 [ 431.611539][T10734] __sys_setsockopt+0x1a0/0x230 [ 431.611559][T10734] __x64_sys_setsockopt+0xbd/0x160 [ 431.611577][T10734] ? do_syscall_64+0x91/0x250 [ 431.611592][T10734] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.611607][T10734] do_syscall_64+0xcd/0x250 [ 431.611623][T10734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.611639][T10734] RIP: 0033:0x7f7a6e785d29 [ 431.611654][T10734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.611667][T10734] RSP: 002b:00007f7a6c5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.611681][T10734] RAX: ffffffffffffffda RBX: 00007f7a6e976080 RCX: 00007f7a6e785d29 [ 431.611691][T10734] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 431.611699][T10734] RBP: 00007f7a6e801a20 R08: 0000000000000020 R09: 0000000000000000 [ 431.611707][T10734] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 431.611716][T10734] R13: 0000000000000001 R14: 00007f7a6e976080 R15: 00007ffde0312d88 [ 431.611732][T10734] [ 431.653990][T10734] Mem-Info: [ 431.654240][T10734] active_anon:11232 inactive_anon:11 isolated_anon:0 [ 431.654240][T10734] active_file:18547 inactive_file:3393 isolated_file:0 [ 431.654240][T10734] unevictable:768 dirty:525 writeback:0 [ 431.654240][T10734] slab_reclaimable:7131 slab_unreclaimable:105346 [ 431.654240][T10734] mapped:32674 shmem:5568 pagetables:1051 [ 431.654240][T10734] sec_pagetables:0 bounce:0 [ 431.654240][T10734] kernel_misc_reclaimable:0 [ 431.654240][T10734] free:1344062 free_pcp:321 free_cma:0 [ 431.654418][T10734] Node 0 active_anon:44928kB inactive_anon:44kB active_file:74188kB inactive_file:13564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130696kB dirty:2100kB writeback:0kB shmem:20736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11868kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no [ 431.654591][T10734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 431.654779][T10734] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.655074][T10734] lowmem_reserve[]: 0 2459 2459 0 0 [ 431.655813][T10734] Node 0 DMA32 free:1453028kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:44928kB inactive_anon:44kB active_file:74176kB inactive_file:13480kB unevictable:1536kB writepending:2100kB present:3129332kB managed:2547148kB mlocked:0kB bounce:0kB free_pcp:1268kB local_pcp:428kB free_cma:0kB [ 431.656010][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 431.656718][T10734] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 431.656968][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 431.657637][T10734] Node 1 Normal free:3907860kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.705572][T10734] lowmem_reserve[]: 0 0 0 0 0 [ 431.707561][T10734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 431.713112][T10734] Node 0 DMA32: 2719*4kB (UME) 1387*8kB (UME) 894*16kB (UME) 729*32kB (UME) 296*64kB (UME) 40*128kB (UE) 24*256kB (UME) 25*512kB (UME) 15*1024kB (UME) 8*2048kB (UME) 322*4096kB (UM) = 1453268kB [ 431.720173][T10734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 431.724437][T10734] Node 1 Normal: 221*4kB (UME) 54*8kB (UME) 31*16kB (UME) 202*32kB (UME) 81*64kB (UME) 33*128kB (UME) 12*256kB (UM) 8*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 947*4096kB (M) = 3907860kB [ 431.730520][T10734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.730739][T10734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.730893][T10734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 431.855581][T10734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 431.855808][T10734] 27526 total pagecache pages [ 431.856066][T10734] 0 pages in swap cache [ 431.856342][T10734] Free swap = 124384kB [ 431.856528][T10734] Total swap = 124996kB [ 431.856746][T10734] 2097051 pages RAM [ 431.857263][T10734] 0 pages HighMem/MovableOnly [ 431.857734][T10734] 428606 pages reserved [ 431.857968][T10734] 0 pages cma reserved [ 433.761151][T10751] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1251'. [ 435.407571][ T29] audit: type=1400 audit(2000000017.940:694): avc: denied { read } for pid=10758 comm="syz.3.1253" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 435.407619][ T29] audit: type=1400 audit(2000000017.940:695): avc: denied { open } for pid=10758 comm="syz.3.1253" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 435.407656][ T29] audit: type=1400 audit(2000000017.940:696): avc: denied { ioctl } for pid=10758 comm="syz.3.1253" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 437.325672][ T29] audit: type=1400 audit(2000000019.850:697): avc: denied { write } for pid=10758 comm="syz.3.1253" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 437.476706][T10762] delete_channel: no stack [ 438.110245][T10780] macvtap1: entered promiscuous mode [ 438.147010][T10780] bond0: entered promiscuous mode [ 438.164572][T10780] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 438.214345][T10780] bond0: left promiscuous mode [ 438.485820][ T29] audit: type=1326 audit(2000000021.020:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.5.1262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda99b85d29 code=0x0 [ 438.532819][ T5870] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 438.551326][ T29] audit: type=1400 audit(2000000021.060:699): avc: denied { append } for pid=10788 comm="syz.0.1263" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 438.694744][ T29] audit: type=1400 audit(2000000021.080:700): avc: denied { map } for pid=10788 comm="syz.0.1263" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 438.741262][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 438.761960][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 438.783579][ T29] audit: type=1400 audit(2000000021.080:701): avc: denied { write execute } for pid=10788 comm="syz.0.1263" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 438.794288][ T5870] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 438.817607][ T29] audit: type=1804 audit(2000000021.090:702): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1264" name="/newroot/170/file1" dev="fuse" ino=1 res=1 errno=0 [ 438.839290][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.872492][ T29] audit: type=1804 audit(2000000021.090:703): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1264" name="/newroot/170/file1" dev="fuse" ino=1 res=1 errno=0 [ 438.886419][ T5870] usb 7-1: config 0 descriptor?? [ 439.066374][ T29] audit: type=1326 audit(2000000021.130:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda99b85d29 code=0x7fc00000 [ 439.071373][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input12 [ 439.153207][ T29] audit: type=1326 audit(2000000021.130:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda99b85d29 code=0x7fc00000 [ 439.216713][ T29] audit: type=1326 audit(2000000021.130:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda99b85d29 code=0x7fc00000 [ 439.928241][ T5869] usb 7-1: USB disconnect, device number 13 [ 439.981186][ T5175] bcm5974 7-1:0.0: could not read from device [ 439.999125][ T5175] bcm5974 7-1:0.0: could not read from device [ 440.013504][T10784] bcm5974 7-1:0.0: could not read from device [ 440.051533][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059937][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.075057][ T8416] bcm5974 7-1:0.0: could not read from device [ 443.331447][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 443.331461][ T29] audit: type=1400 audit(2000000025.850:770): avc: denied { connect } for pid=10831 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 443.368282][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1274'. [ 443.388931][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1274'. [ 443.402997][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1274'. [ 443.426882][T10837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1274'. [ 444.922777][T10859] x_tables: duplicate underflow at hook 1 [ 445.960101][ T29] audit: type=1326 audit(2000000028.490:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10862 comm="syz.5.1283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda99b85d29 code=0x0 [ 447.128711][ T29] audit: type=1400 audit(2000000029.670:772): avc: denied { setattr } for pid=10870 comm="syz.6.1285" path="socket:[32032]" dev="sockfs" ino=32032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 447.844387][T10877] TCP: out of memory -- consider tuning tcp_mem [ 447.921229][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 448.072664][ T8] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 448.083759][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.116973][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.142331][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 448.204257][ T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 448.213819][ T8] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 448.231805][ T8] usb 6-1: Manufacturer: syz [ 448.254410][ T8] usb 6-1: config 0 descriptor?? [ 448.679518][ T8] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 448.687982][ T8] appleir 0003:05AC:8243.000B: parse failed [ 448.696252][ T8] appleir 0003:05AC:8243.000B: probe with driver appleir failed with error -22 [ 449.015868][ T29] audit: type=1400 audit(2000000031.560:773): avc: denied { connect } for pid=10874 comm="syz.5.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 449.046025][ T5869] usb 6-1: USB disconnect, device number 11 [ 449.270068][ T55] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 450.145975][ T29] audit: type=1400 audit(2000000032.690:774): avc: denied { bind } for pid=10896 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.195473][ T29] audit: type=1400 audit(2000000032.690:775): avc: denied { write } for pid=10896 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 450.647145][T10899] syz.2.1295 (10899): drop_caches: 2 [ 450.665367][T10899] syz.2.1295 (10899): drop_caches: 2 [ 451.371220][ T29] audit: type=1326 audit(2000000033.690:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.426683][ T29] audit: type=1326 audit(2000000033.690:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.483709][ T29] audit: type=1326 audit(2000000033.800:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.508700][ T29] audit: type=1326 audit(2000000033.980:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.532964][ T29] audit: type=1326 audit(2000000033.980:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.556583][ T29] audit: type=1326 audit(2000000033.980:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 451.580039][ T29] audit: type=1326 audit(2000000033.980:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10912 comm="syz.0.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fe385d29 code=0x7ffc0000 [ 454.181238][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 454.227083][T10932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1306'. [ 463.670937][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 463.670949][ T29] audit: type=1326 audit(2000000046.210:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 463.709056][ T29] audit: type=1326 audit(2000000046.250:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 463.830051][T11001] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1321'. [ 463.835586][ T29] audit: type=1326 audit(2000000046.370:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.021534][ T29] audit: type=1326 audit(2000000046.370:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.045303][ T29] audit: type=1326 audit(2000000046.370:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.068894][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.075323][ T29] audit: type=1326 audit(2000000046.370:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.099360][ T29] audit: type=1326 audit(2000000046.370:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.122768][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.129463][ T29] audit: type=1326 audit(2000000046.370:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.154464][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.160769][ T29] audit: type=1326 audit(2000000046.370:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 464.257345][ T29] audit: type=1326 audit(2000000046.670:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10999 comm="syz.3.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbfc6f85d29 code=0x7ffc0000 [ 465.592791][T11013] syz.0.1325 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 467.564869][T11029] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 467.615455][T11029] kvm: pic: single mode not supported [ 467.615559][T11029] kvm: pic: non byte read [ 467.679157][ T1101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.695442][ T1101] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 467.735741][T11029] kvm: pic: level sensitive irq not supported [ 467.735806][T11029] kvm: pic: non byte read [ 467.819610][ T1101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.834596][ T1101] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 468.314046][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.327295][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.339616][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.354252][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.365164][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.389203][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.482615][ T1101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.501316][ T1101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 468.727963][T11048] x_tables: duplicate underflow at hook 1 [ 469.680162][ T1101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.694142][ T1101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.951187][ T5871] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 470.237404][ T5871] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 470.251234][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.305051][ T5871] usb 1-1: config 0 descriptor?? [ 471.395781][ T5823] Bluetooth: hci2: command tx timeout [ 471.476907][T11038] chnl_net:caif_netlink_parms(): no params data found [ 471.514846][ T1101] bridge_slave_1: left allmulticast mode [ 471.567105][ T1101] bridge_slave_1: left promiscuous mode [ 471.575303][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.627630][ T1101] bridge_slave_0: left allmulticast mode [ 471.645795][ T1101] bridge_slave_0: left promiscuous mode [ 471.655602][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.756311][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.769363][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.396767][ T5871] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 472.405418][ T5871] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 472.443841][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.444125][ T5871] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 472.466460][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.482261][ T1101] bond0 (unregistering): Released all slaves [ 472.683238][T11038] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.721709][T11038] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.729592][T11038] bridge_slave_0: entered allmulticast mode [ 472.748340][T11038] bridge_slave_0: entered promiscuous mode [ 472.804041][T11038] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.819163][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.823764][ T5871] [drm] Initialized udl on minor 2 [ 472.859344][T11038] bridge_slave_1: entered allmulticast mode [ 472.872318][T11038] bridge_slave_1: entered promiscuous mode [ 473.167704][ T5871] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 473.177034][ T5871] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 473.184885][ T5904] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 473.211529][ T5904] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 473.251674][ T5871] usb 1-1: USB disconnect, device number 20 [ 473.311338][ T5904] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 473.383521][T11038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.461631][ T5823] Bluetooth: hci2: command tx timeout [ 473.533573][T11038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.707967][ T1101] hsr_slave_0: left promiscuous mode [ 473.759809][ T1101] hsr_slave_1: left promiscuous mode [ 473.835478][ T1101] veth1_macvtap: left promiscuous mode [ 473.851327][ T1101] veth0_macvtap: left promiscuous mode [ 473.860451][ T1101] veth1_vlan: left promiscuous mode [ 473.882957][ T1101] veth0_vlan: left promiscuous mode [ 474.171539][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 474.171576][ T29] audit: type=1400 audit(2000000056.670:1019): avc: denied { setopt } for pid=11103 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 474.430924][T11081] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop5": -EINTR [ 475.541367][ T5823] Bluetooth: hci2: command tx timeout [ 475.983592][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 476.069075][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 476.603361][T11038] team0: Port device team_slave_0 added [ 476.627724][T11117] team_slave_0: entered promiscuous mode [ 476.633830][T11117] team_slave_1: entered promiscuous mode [ 476.639914][T11117] macvtap1: entered promiscuous mode [ 476.645761][T11117] team0: entered promiscuous mode [ 476.655889][T11117] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 476.689592][T11038] team0: Port device team_slave_1 added [ 476.818791][T11038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.826641][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.833927][T11129] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1353'. [ 476.852719][T11038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.854365][T11038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.879311][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.905751][T11038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.032594][T11038] hsr_slave_0: entered promiscuous mode [ 477.391584][T11038] hsr_slave_1: entered promiscuous mode [ 477.633277][ T5823] Bluetooth: hci2: command tx timeout [ 477.992791][T11038] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 478.602181][T11038] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 478.662602][T11038] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 478.677039][ T1101] IPVS: stop unused estimator thread 0... [ 478.697207][T11038] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 478.791695][T11038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.863653][T11038] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.967110][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.974282][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.008168][ T29] audit: type=1400 audit(2000000061.550:1020): avc: denied { ioctl } for pid=11155 comm="syz.5.1357" path="socket:[33081]" dev="sockfs" ino=33081 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 479.008309][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.039998][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.191680][T11038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.380999][T11038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.175999][T11038] veth0_vlan: entered promiscuous mode [ 480.237902][T11038] veth1_vlan: entered promiscuous mode [ 480.287494][T11038] veth0_macvtap: entered promiscuous mode [ 480.295752][T11038] veth1_macvtap: entered promiscuous mode [ 480.337959][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.354359][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.364398][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.374936][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.385185][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.396008][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.407206][T11038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.416373][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.426907][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.436846][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.447336][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.457247][T11038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.467813][T11038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.478519][T11038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.498919][T11038] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.509627][T11038] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.530648][T11038] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.539597][T11038] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.555146][ T5871] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 480.660981][ T9230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.669656][ T9230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.731269][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 480.745048][ T5871] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 480.754594][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.789436][ T5871] usb 1-1: config 0 descriptor?? [ 480.796818][ T9230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.810901][ T9230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.830605][ T5871] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 480.886569][ T29] audit: type=1400 audit(2000000063.440:1021): avc: denied { mounton } for pid=11038 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 482.469759][ T5871] gspca_sonixj: reg_w1 err -110 [ 482.475140][ T5871] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 482.633375][T11200] kvm: kvm [11199]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 483.530667][T11236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1367'. [ 483.539930][ T29] audit: type=1400 audit(2000000066.070:1022): avc: denied { write } for pid=11234 comm="syz.2.1367" name="file0" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 483.562451][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.607532][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1367'. [ 484.004655][ T5904] usb 1-1: USB disconnect, device number 21 [ 484.689778][T11229] kvm: MWAIT instruction emulated as NOP! [ 485.062205][ T5823] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 485.357394][ T29] audit: type=1326 audit(2000000067.900:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11274 comm="syz.3.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfc6f85d29 code=0x0 [ 485.953558][T11290] netlink: 'syz.7.1375': attribute type 1 has an invalid length. [ 486.942498][T11310] rdma_op ffff8880595f11f0 conn xmit_rdma 0000000000000000 [ 487.507696][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 488.430746][ T29] audit: type=1400 audit(2000000070.970:1024): avc: denied { mount } for pid=11319 comm="syz.3.1379" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 489.095664][ T29] audit: type=1400 audit(2000000070.970:1025): avc: denied { read } for pid=11319 comm="syz.3.1379" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 489.118087][ T29] audit: type=1400 audit(2000000070.970:1026): avc: denied { open } for pid=11319 comm="syz.3.1379" path="/275/file0" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 489.141193][ T29] audit: type=1400 audit(2000000070.970:1027): avc: denied { unmount } for pid=11319 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 491.633349][T11371] syz.7.1389: attempt to access beyond end of device [ 491.633349][T11371] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 492.852791][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 495.602863][T11406] : renamed from bond0 (while UP) [ 498.132780][ T29] audit: type=1400 audit(2000000080.580:1028): avc: denied { accept } for pid=11450 comm="syz.0.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.690068][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.722626][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.730913][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 499.348173][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 499.357863][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 499.371019][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.487268][T11481] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 500.499840][T11481] cramfs: wrong magic [ 501.079894][T11459] chnl_net:caif_netlink_parms(): no params data found [ 501.425353][T11489] syzkaller0: entered allmulticast mode [ 501.437609][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.461050][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.479109][T11459] bridge_slave_0: entered allmulticast mode [ 501.485373][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.486564][T11459] bridge_slave_0: entered promiscuous mode [ 501.499305][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.506433][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.513850][T11459] bridge_slave_1: entered allmulticast mode [ 501.520687][T11459] bridge_slave_1: entered promiscuous mode [ 501.524154][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.574226][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.628667][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.027475][ T55] Bluetooth: hci3: command tx timeout [ 502.262979][T11459] team0: Port device team_slave_0 added [ 502.306627][T11459] team0: Port device team_slave_1 added [ 503.302995][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.309970][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.314894][ T29] audit: type=1400 audit(2000000085.820:1029): avc: denied { create } for pid=11504 comm="syz.5.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 503.336629][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.368431][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.375565][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.415457][ T29] audit: type=1400 audit(2000000085.820:1030): avc: denied { getopt } for pid=11504 comm="syz.5.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 503.445320][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.998400][T11459] hsr_slave_0: entered promiscuous mode [ 504.058711][T11523] syz.7.1420: attempt to access beyond end of device [ 504.058711][T11523] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 504.097191][T11459] hsr_slave_1: entered promiscuous mode [ 504.102876][ T55] Bluetooth: hci3: command tx timeout [ 504.190957][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.191947][T11459] Cannot create hsr debugfs directory [ 506.199651][ T55] Bluetooth: hci3: command tx timeout [ 507.324471][T11459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 508.029547][T11459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 508.060530][T11459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 508.162673][T11459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 508.272023][ T55] Bluetooth: hci3: command tx timeout [ 508.331890][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.348326][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.363956][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.371113][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.572113][ T29] audit: type=1800 audit(2000000090.990:1031): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1429" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 508.741969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.749133][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.815490][T11459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.872769][T11459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.311987][T11611] wg1: entered promiscuous mode [ 511.108849][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.971344][ T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 512.141706][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 512.153645][ T47] usb 3-1: config 0 has no interfaces? [ 512.192868][ T47] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 512.245000][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.284671][ T47] usb 3-1: Product: syz [ 512.288884][ T47] usb 3-1: Manufacturer: syz [ 512.310720][ T47] usb 3-1: SerialNumber: syz [ 512.337648][ T47] usb 3-1: config 0 descriptor?? [ 512.716905][T11459] veth0_vlan: entered promiscuous mode [ 512.778400][T11459] veth1_vlan: entered promiscuous mode [ 512.884615][T11459] veth0_macvtap: entered promiscuous mode [ 512.916657][T11459] veth1_macvtap: entered promiscuous mode [ 512.958008][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.968536][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.980163][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.991477][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.031146][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.051199][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.071140][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.101383][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.132187][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.135722][T11643] binder: 11642:11643 ioctl c0306201 0 returned -14 [ 513.162971][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.201706][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.241144][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.271146][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.300551][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.391225][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.408432][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.430060][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.486874][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.512305][T11459] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.529069][T11459] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.538840][T11459] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.553263][T11459] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.889835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.900812][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.915706][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.929056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.733814][ T5870] usb 3-1: USB disconnect, device number 19 [ 517.467963][T11656] syz.8.1441 (11656) used greatest stack depth: 19264 bytes left [ 517.538588][ T29] audit: type=1400 audit(2000000100.080:1032): avc: denied { sqpoll } for pid=11673 comm="syz.7.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 517.886486][T11687] wg1: entered promiscuous mode [ 518.695532][ T29] audit: type=1400 audit(2000000101.240:1033): avc: denied { getopt } for pid=11689 comm="syz.0.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 519.361344][ T29] audit: type=1326 audit(2000000101.910:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 519.438565][ T29] audit: type=1326 audit(2000000101.940:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 519.529615][ T29] audit: type=1326 audit(2000000102.060:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 519.630786][ T29] audit: type=1326 audit(2000000102.060:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 519.719789][ T29] audit: type=1326 audit(2000000102.060:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36659b85e5 code=0x7ffc0000 [ 519.849269][ T29] audit: type=1326 audit(2000000102.220:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11701 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 519.992695][ T29] audit: type=1326 audit(2000000102.260:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 520.075203][ T29] audit: type=1326 audit(2000000102.260:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11696 comm="syz.8.1447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3665985d29 code=0x7ffc0000 [ 521.694781][T11729] hsr0: entered promiscuous mode [ 521.712051][T11729] hsr_slave_0: left promiscuous mode [ 521.740641][T11729] hsr_slave_1: left promiscuous mode [ 521.830193][T11729] hsr0 (unregistering): left promiscuous mode [ 521.861410][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 522.907710][T11750] syz.0.1457 (11750): drop_caches: 2 [ 522.923329][T11750] syz.0.1457 (11750): drop_caches: 2 [ 522.961140][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 522.961156][ T29] audit: type=1400 audit(2000000105.490:1053): avc: denied { bind } for pid=11741 comm="syz.7.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 523.762085][ T47] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 523.981351][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 524.030752][ T47] usb 8-1: config 0 has an invalid interface number: 124 but max is 0 [ 524.221991][ T47] usb 8-1: config 0 has no interface number 0 [ 524.257574][ T47] usb 8-1: config 0 interface 124 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 524.556783][ T47] usb 8-1: config 0 interface 124 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 524.567370][ T47] usb 8-1: config 0 interface 124 has no altsetting 0 [ 524.577700][ T47] usb 8-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=b8.1e [ 524.586994][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.595359][ T47] usb 8-1: Product: syz [ 524.599561][ T47] usb 8-1: Manufacturer: syz [ 524.617722][ T47] usb 8-1: SerialNumber: syz [ 526.235113][ T47] usb 8-1: config 0 descriptor?? [ 526.291326][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 526.977416][T11804] infiniband syz2: set down [ 526.982643][T11804] infiniband syz2: added team_slave_1 [ 527.262840][T11804] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 527.268956][T11804] infiniband syz2: Couldn't open port 1 [ 527.400737][T11804] RDS/IB: syz2: added [ 527.406058][T11804] smc: adding ib device syz2 with port count 1 [ 527.431661][T11804] smc: ib device syz2 port 1 has pnetid [ 527.493050][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.504382][ T5904] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 527.517129][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.409413][ T5904] usb 9-1: config 0 descriptor?? [ 528.415488][ T47] usb 8-1: USB disconnect, device number 2 [ 528.417663][ T5904] usb 9-1: can't set config #0, error -71 [ 528.673701][T11823] cgroup: No subsys list or none specified [ 528.949898][ T5904] usb 9-1: USB disconnect, device number 2 [ 529.971187][ T29] audit: type=1800 audit(2000000112.470:1054): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1473" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 530.015390][T11820] netlink: 'syz.7.1472': attribute type 1 has an invalid length. [ 531.623847][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 532.693998][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029eedc00: rx timeout, send abort [ 532.702474][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880317ef000: rx timeout, send abort [ 532.711180][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029eedc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 532.727928][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880317ef000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 532.934588][T11846] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1475'. [ 533.418209][T11820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.837245][T11879] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 536.690437][ T29] audit: type=1800 audit(2000000119.000:1055): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1486" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 537.841244][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 540.418988][T11925] syz.8.1493: attempt to access beyond end of device [ 540.418988][T11925] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 547.955060][ T8412] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 548.153810][ T8412] usb 1-1: Using ep0 maxpacket: 32 [ 548.190129][ T8412] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 548.231139][ T8412] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.260957][ T8412] usb 1-1: Product: syz [ 548.281172][ T8412] usb 1-1: Manufacturer: syz [ 548.307044][ T8412] usb 1-1: SerialNumber: syz [ 548.403090][ T8412] usb 1-1: config 0 descriptor?? [ 548.724880][T12001] cgroup: fork rejected by pids controller in /syz0 [ 548.739660][ T29] audit: type=1400 audit(2000000131.270:1056): avc: denied { override_creds } for pid=12000 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 548.828951][ T8412] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 549.011774][ T8412] airspy 1-1:0.0: Could not detect board [ 549.017995][ T8412] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 549.028408][ T8412] usb 1-1: USB disconnect, device number 22 [ 550.602846][T12032] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ܻ}rءÑV§jPb [ 553.353357][T12046] block nbd2: Device being setup by another task [ 553.361478][T12041] block nbd2: shutting down sockets [ 554.399370][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.430568][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.844813][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1528'. [ 554.961513][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1528'. [ 555.024076][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1528'. [ 555.087113][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.184005][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.207869][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1528'. [ 555.579686][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 555.592550][ C0] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 555.600990][ C0] CPU: 0 UID: 0 PID: 12056 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 555.611956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 555.622036][ C0] RIP: 0010:put_page+0x21/0x280 [ 555.626925][ C0] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 04 2a 98 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 555.646554][ C0] RSP: 0018:ffffc90000007428 EFLAGS: 00010202 [ 555.652624][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff890368b8 [ 555.660596][ C0] RDX: 0000000000000001 RSI: ffffffff8901ea3c RDI: 0000000000000008 [ 555.668562][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 555.676530][ C0] R10: 0000000000000000 R11: 0000000000000006 R12: ffff888029de7680 [ 555.684497][ C0] R13: ffff88807fac5040 R14: ffff88807fac5070 R15: 0000000000000007 [ 555.692463][ C0] FS: 000055555cd8f500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 555.701410][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.708009][ C0] CR2: 0000001b2e406ff8 CR3: 0000000069dd0000 CR4: 00000000003526f0 [ 555.715985][ C0] Call Trace: [ 555.719264][ C0] [ 555.722106][ C0] ? die_addr+0x3b/0xa0 [ 555.726277][ C0] ? exc_general_protection+0x155/0x230 [ 555.732275][ C0] ? asm_exc_general_protection+0x26/0x30 [ 555.738006][ C0] ? skb_release_data+0x4b8/0x730 [ 555.743029][ C0] ? put_page+0xc/0x280 [ 555.747185][ C0] ? put_page+0x21/0x280 [ 555.751432][ C0] ? put_page+0xc/0x280 [ 555.755939][ C0] skb_release_data+0x4d7/0x730 [ 555.760789][ C0] __kfree_skb+0x4f/0x70 [ 555.765028][ C0] tcp_ack+0x1eb7/0x5ba0 [ 555.769288][ C0] ? __pfx_tcp_ack+0x10/0x10 [ 555.773887][ C0] ? tcp_validate_incoming+0x662/0x1d00 [ 555.779447][ C0] ? read_tsc+0x9/0x20 [ 555.783527][ C0] tcp_rcv_state_process+0xdd4/0x4c40 [ 555.788908][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 555.794107][ C0] ? __pfx_lock_release+0x10/0x10 [ 555.799132][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 555.804365][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 555.810269][ C0] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 555.816082][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 555.821367][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 555.827006][ C0] ? rcu_is_watching+0x12/0xc0 [ 555.831776][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 555.836804][ C0] ? tcp_v4_do_rcv+0x1ad/0xa90 [ 555.841612][ C0] tcp_v4_do_rcv+0x1ad/0xa90 [ 555.846219][ C0] tcp_v4_rcv+0x33a0/0x4380 [ 555.850739][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 555.855609][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 555.861088][ C0] ? rcu_is_watching+0x12/0xc0 [ 555.865869][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 555.870732][ C0] ip_protocol_deliver_rcu+0xba/0x4c0 [ 555.876107][ C0] ip_local_deliver_finish+0x316/0x570 [ 555.881566][ C0] ip_local_deliver+0x18e/0x1f0 [ 555.886419][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 555.891790][ C0] ip_rcv+0x2c3/0x5d0 [ 555.895769][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 555.900266][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 555.906167][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 555.912586][ C0] ? rcu_is_watching+0x12/0xc0 [ 555.917356][ C0] ? process_backlog+0x3f1/0x15f0 [ 555.922384][ C0] ? process_backlog+0x3f1/0x15f0 [ 555.927424][ C0] __netif_receive_skb+0x1d/0x160 [ 555.932453][ C0] process_backlog+0x443/0x15f0 [ 555.937325][ C0] __napi_poll.constprop.0+0xb7/0x550 [ 555.942731][ C0] net_rx_action+0xa94/0x1010 [ 555.947429][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 555.952553][ C0] ? __pfx_lock_release+0x10/0x10 [ 555.957583][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 555.962792][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 555.967993][ C0] ? sched_clock+0x38/0x60 [ 555.972419][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 555.977268][ C0] ? clockevents_program_event+0x155/0x380 [ 555.983082][ C0] ? mark_held_locks+0x9f/0xe0 [ 555.987845][ C0] handle_softirqs+0x213/0x8f0 [ 555.992615][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 555.997907][ C0] __irq_exit_rcu+0x109/0x170 [ 556.002583][ C0] irq_exit_rcu+0x9/0x30 [ 556.006826][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 556.012457][ C0] [ 556.015377][ C0] [ 556.018297][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 556.024284][ C0] RIP: 0010:lock_acquire.part.0+0xd1/0x380 [ 556.030089][ C0] Code: 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 80 02 00 00 8b 95 dc 0a 00 00 85 d2 0f 85 d5 00 00 00 44 89 44 24 04 89 0c 24 <9c> 5d fa 48 c7 c7 20 db 6c 8b e8 60 75 b2 09 44 89 e2 44 89 f6 4c [ 556.049694][ C0] RSP: 0018:ffffc900044675b8 EFLAGS: 00000246 [ 556.055759][ C0] RAX: 0000000000000007 RBX: 1ffff9200088ceb8 RCX: 0000000000000002 [ 556.063723][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802f90535c [ 556.071692][ C0] RBP: ffff88802f904880 R08: 0000000000000000 R09: 0000000000000000 [ 556.079659][ C0] R10: ffffffff905f3097 R11: 0000000000000003 R12: 0000000000000000 [ 556.087623][ C0] R13: ffffffff8e1bb840 R14: 0000000000000000 R15: 0000000000000000 [ 556.095596][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 556.101230][ C0] ? rcu_is_watching+0x12/0xc0 [ 556.106001][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 556.111206][ C0] ? find_held_lock+0x2d/0x110 [ 556.115973][ C0] ? page_table_check_set+0x114/0x9c0 [ 556.121347][ C0] ? lock_acquire+0x2f/0xb0 [ 556.125848][ C0] ? page_table_check_set+0x114/0x9c0 [ 556.131220][ C0] page_table_check_set+0x11a/0x9c0 [ 556.136416][ C0] ? page_table_check_set+0x114/0x9c0 [ 556.141785][ C0] ? __lruvec_stat_mod_folio+0xa0/0x360 [ 556.147340][ C0] __page_table_check_ptes_set+0x2d0/0x3e0 [ 556.153154][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 556.159484][ C0] ? __lruvec_stat_mod_folio+0x236/0x360 [ 556.165130][ C0] ? const_folio_flags+0x5b/0x100 [ 556.170152][ C0] ? folio_add_file_rmap_ptes+0x289/0x310 [ 556.175871][ C0] insert_page_into_pte_locked.isra.0+0x403/0x6f0 [ 556.182296][ C0] ? __pfx_insert_page_into_pte_locked.isra.0+0x10/0x10 [ 556.189250][ C0] vm_insert_page+0x450/0x6d0 [ 556.193926][ C0] ? __pfx_vm_insert_page+0x10/0x10 [ 556.199122][ C0] ? up_write+0x1b2/0x520 [ 556.203454][ C0] kcov_mmap+0xd7/0x150 [ 556.207614][ C0] __mmap_region+0x1786/0x2670 [ 556.212382][ C0] ? find_held_lock+0x2d/0x110 [ 556.217149][ C0] ? __pfx___mmap_region+0x10/0x10 [ 556.222259][ C0] ? hlock_class+0x4e/0x130 [ 556.226766][ C0] ? mark_lock+0xb5/0xc60 [ 556.231095][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 556.236324][ C0] ? cap_mmap_addr+0x53/0x320 [ 556.240998][ C0] mmap_region+0x270/0x320 [ 556.245412][ C0] do_mmap+0xc00/0xfc0 [ 556.249476][ C0] vm_mmap_pgoff+0x1ba/0x360 [ 556.254066][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 556.259178][ C0] ? __fget_files+0x206/0x3a0 [ 556.263855][ C0] ksys_mmap_pgoff+0x32c/0x5c0 [ 556.268636][ C0] ? rcu_is_watching+0x12/0xc0 [ 556.273408][ C0] __x64_sys_mmap+0x125/0x190 [ 556.278085][ C0] do_syscall_64+0xcd/0x250 [ 556.282594][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.288491][ C0] RIP: 0033:0x7f2a7c185d63 [ 556.292898][ C0] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 556.312511][ C0] RSP: 002b:00007fffa18d2e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 556.320922][ C0] RAX: ffffffffffffffda RBX: 00007f2a7c375f40 RCX: 00007f2a7c185d63 [ 556.328885][ C0] RDX: 0000000000000003 RSI: 0000000000800000 RDI: 00007f2a7a7f9000 [ 556.336847][ C0] RBP: 00007f2a7c376738 R08: 00000000000000d7 R09: 0000000000000000 [ 556.344811][ C0] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000008 [ 556.352771][ C0] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 556.360741][ C0] [ 556.363747][ C0] Modules linked in: [ 556.367741][ C0] ---[ end trace 0000000000000000 ]--- [ 556.373232][ C0] RIP: 0010:put_page+0x21/0x280 [ 556.378123][ C0] Code: 90 90 90 90 90 90 90 90 90 41 54 55 53 48 89 fb e8 04 2a 98 f8 48 8d 7b 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 20 02 00 00 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 [ 556.397786][ C0] RSP: 0018:ffffc90000007428 EFLAGS: 00010202 [ 556.403938][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff890368b8 [ 556.411950][ C0] RDX: 0000000000000001 RSI: ffffffff8901ea3c RDI: 0000000000000008 [ 556.419947][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 556.427979][ C0] R10: 0000000000000000 R11: 0000000000000006 R12: ffff888029de7680 [ 556.435997][ C0] R13: ffff88807fac5040 R14: ffff88807fac5070 R15: 0000000000000007 [ 556.444004][ C0] FS: 000055555cd8f500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 556.452976][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.459575][ C0] CR2: 0000001b2e406ff8 CR3: 0000000069dd0000 CR4: 00000000003526f0 [ 556.467588][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 556.475002][ C0] Kernel Offset: disabled [ 556.479310][ C0] Rebooting in 86400 seconds..