last executing test programs: 32.110856666s ago: executing program 4 (id=3888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000080000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000410101c0"]) 32.088132888s ago: executing program 4 (id=3889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 32.074378529s ago: executing program 4 (id=3891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000f99000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 32.035044992s ago: executing program 4 (id=3894): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00001f4000/0x2000)=nil, 0x2000, 0x1) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 31.998313495s ago: executing program 4 (id=3895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync() r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x300081f, &(0x7f0000003f80)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES8=r2, @ANYRESDEC, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES8=r2, @ANYRES8=r0], 0xff, 0x1f1, &(0x7f0000000900)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='size=k,uid>', @ANYRESDEC=r1, @ANYBLOB=',fowner=', @ANYRESDEC=r1, @ANYBLOB, @ANYRESDEC=r1, @ANYBLOB=',\x00']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x105, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x56, &(0x7f00000003c0)=""/86, 0x41100, 0x40, '\x00', 0x0, 0x14, r4, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0x3, 0x401}, 0x10, r5, r7, 0x2, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x4, 0x2, 0x1, 0x9}, {0x2, 0x2, 0xe, 0xa}], 0x10, 0x9}, 0x90) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) 21.541519276s ago: executing program 4 (id=4076): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 7.709659192s ago: executing program 2 (id=4136): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x401, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 5.924854237s ago: executing program 2 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="4a4b1091d520ad6fe99665f97f7d40315878c0cf55a0326945b02d63ab7be97f7a3b51362570a641d0890dcef8a9ca353cad1633ecbd239abaed680353cc2481fdc73111cb4da6874aa61bf0f7b9c34f3bb36739f465d19753bf9cced30bb4b760fb591bcae63058ef44954c9671c88282a207c8294437cebb9a58ed7c7705a6fb641960d368b41acbbc4dd2253c083da6516b12140948029eb0d0762b5a74", 0x9f}, {&(0x7f0000003c80)="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", 0xa4a}], 0x2}}], 0x1, 0x0) 5.906473249s ago: executing program 3 (id=4144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) alarm(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r7, 0xffffffffffffffff, 0x0) 4.076392448s ago: executing program 0 (id=4146): socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x22020400) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x2000000000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x8, 0x0, 0x4, 0x6, 0x833, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7fff, 0x2000, 0x3ff, 0x2250, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000d0000007be8bda6f36d088af8ff00000000bfa200000000ffb703000008000000b7040000000000008500"/55], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffdd8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/keycreate\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/79, 0x4f}], 0x1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f00000000c0)="3f043608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r9, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x5, 0xffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r2, &(0x7f0000000540)="f53f85", &(0x7f0000000640)=@udp=r8}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 4.075424258s ago: executing program 2 (id=4148): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x42000) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x100000000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000200)=[0x5646b990, 0x5]) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000080", @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf250100000014000900ff01000000000000000000000000000108000800ac1e0101080008000a010102080008007f0000010400050008000800ffffffff060001004e240000"], 0x54}, 0x1, 0x0, 0x0, 0x40885}, 0x408c0) 4.074105798s ago: executing program 3 (id=4149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 4.018349992s ago: executing program 1 (id=4150): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 4.017985463s ago: executing program 0 (id=4151): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r1, 0x4, 0x4400) dup3(r1, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r4}, 0x0, &(0x7f0000000e40)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000099ffffffb702000005000000b7030000abfc0020850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 4.017727162s ago: executing program 3 (id=4152): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x401, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 4.015359063s ago: executing program 1 (id=4153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) 2.101127549s ago: executing program 0 (id=4154): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2.100913679s ago: executing program 1 (id=4155): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8001) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x47, 0x0, &(0x7f00000000c0)) 2.100632779s ago: executing program 2 (id=4156): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) 2.100383258s ago: executing program 3 (id=4157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, ':x?\"'}, @local=@item_4={0x3, 0x2, 0x0, "cb340640"}]}}, 0x0}, 0x0) 2.08276858s ago: executing program 0 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000140)={[{@usrquota}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}], [{@hash}, {@smackfsroot={'smackfsroot', 0x3d, '['}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}[*'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^\\'}}], 0x2c}, 0x84, 0x45c, &(0x7f0000000900)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a00000800395032303030"], 0x15) r4 = dup(r3) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.072666011s ago: executing program 1 (id=4159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="4a4b1091d520ad6fe99665f97f7d40315878c0cf55a0326945b02d63ab7be97f7a3b51362570a641d0890dcef8a9ca353cad1633ecbd239abaed680353cc2481fdc73111cb4da6874aa61bf0f7b9c34f3bb36739f465d19753bf9cced30bb4b760fb591bcae63058ef44954c9671c88282a207c8294437cebb9a58ed7c7705a6fb641960d368b41acbbc4dd2253c083da6516b12140948029eb0d0762b5a74", 0x9f}, {&(0x7f0000003c80)="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", 0xa4a}], 0x2}}], 0x1, 0x0) 43.838266ms ago: executing program 0 (id=4160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) personality(0x0) 43.222056ms ago: executing program 1 (id=4161): socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x22020400) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x2000000000000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x8, 0x0, 0x4, 0x6, 0x833, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7fff, 0x2000, 0x3ff, 0x2250, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00000d0000007be8bda6f36d088af8ff00000000bfa200000000ffb703000008000000b7040000000000008500"/55], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffdd8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000140)='kfree\x00'}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/keycreate\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/79, 0x4f}], 0x1, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f00000000c0)="3f043608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') preadv2(r9, &(0x7f0000001540)=[{&(0x7f0000000100)=""/112, 0x70}], 0x1, 0x5, 0xffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r2, &(0x7f0000000540)="f53f85", &(0x7f0000000640)=@udp=r8}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 43.029016ms ago: executing program 2 (id=4162): r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x66, 0xa25, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xa, 0xfff1}}}, 0x24}}, 0x0) 42.905056ms ago: executing program 3 (id=4163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000f70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 21.182678ms ago: executing program 0 (id=4164): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) mount$bind(0x0, &(0x7f0000000ac0)='./bus\x00', 0x0, 0x20a3006, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@subsystem='net_cls'}], [{@audit}, {@subj_role={'subj_role', 0x3d, '/proc/bus/input/devices\x00'}}, {@appraise}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x2, 0x1e6, &(0x7f0000000700)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r3, 0x1a, 0x0, 0x3) 4.143129ms ago: executing program 3 (id=4165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 556.97µs ago: executing program 2 (id=4166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 0s ago: executing program 1 (id=4167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) kernel console output (not intermixed with test programs): 175b0 EFLAGS: 00000246 [ 310.546089][ C0] RAX: 1ffff920001a2eeb RBX: ffffc90000d17ef8 RCX: 0000000000d17701 [ 310.546102][ C0] RDX: dffffc0000000000 RSI: ffffc90000d17f48 RDI: ffffc90000d17758 [ 310.546116][ C0] RBP: ffffc90000d17668 R08: ffffc90000d177e8 R09: 0000000000000009 [ 310.546128][ C0] R10: ffffc90000d177f0 R11: dffffc0000000001 R12: 0000000000000000 [ 310.546141][ C0] R13: ffffc90000d17750 R14: dffffc0000000000 R15: ffffc90000d17700 [ 310.546155][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 310.546170][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.546182][ C0] CR2: 0000001b30af2ff8 CR3: 0000000120f37000 CR4: 00000000003506b0 [ 310.546198][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.546208][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.546219][ C0] Call Trace: [ 310.546224][ C0] [ 310.546231][ C0] ? show_regs+0x58/0x60 [ 310.546250][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 310.546272][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 310.546294][ C0] ? update_stack_state+0x66/0x460 [ 310.546312][ C0] ? update_stack_state+0x66/0x460 [ 310.546330][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 310.546350][ C0] ? nmi_handle+0xa8/0x280 [ 310.546368][ C0] ? update_stack_state+0x66/0x460 [ 310.546386][ C0] ? default_do_nmi+0x69/0x160 [ 310.546405][ C0] ? exc_nmi+0xaf/0x120 [ 310.546422][ C0] ? end_repeat_nmi+0x16/0x31 [ 310.546443][ C0] ? update_stack_state+0x66/0x460 [ 310.546461][ C0] ? update_stack_state+0x66/0x460 [ 310.546485][ C0] ? update_stack_state+0x66/0x460 [ 310.546503][ C0] [ 310.546508][ C0] [ 310.546522][ C0] unwind_next_frame+0x3cb/0x700 [ 310.546542][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 310.546562][ C0] arch_stack_walk+0x10d/0x140 [ 310.546583][ C0] ? kthread+0x421/0x510 [ 310.546602][ C0] stack_trace_save+0x113/0x1c0 [ 310.546620][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 310.546637][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 310.546657][ C0] ? kmem_cache_free_bulk+0x552/0x700 [ 310.546678][ C0] ? kmem_cache_free_bulk+0x552/0x700 [ 310.546696][ C0] kasan_set_track+0x4b/0x70 [ 310.546712][ C0] ? kasan_set_track+0x4b/0x70 [ 310.546727][ C0] ? kasan_set_free_info+0x23/0x40 [ 310.546744][ C0] ? ____kasan_slab_free+0x126/0x160 [ 310.546761][ C0] ? __kasan_slab_free+0x11/0x20 [ 310.546776][ C0] ? slab_free_freelist_hook+0xbd/0x190 [ 310.546796][ C0] ? kmem_cache_free_bulk+0x552/0x700 [ 310.546814][ C0] ? kfree_rcu_work+0x2b2/0x6a0 [ 310.546832][ C0] ? process_one_work+0x6bb/0xc10 [ 310.546847][ C0] ? worker_thread+0xad5/0x12a0 [ 310.546862][ C0] ? kthread+0x421/0x510 [ 310.546888][ C0] ? debug_smp_processor_id+0x17/0x20 [ 310.546907][ C0] ? kasan_quarantine_put+0x34/0x1a0 [ 310.546926][ C0] kasan_set_free_info+0x23/0x40 [ 310.546943][ C0] ____kasan_slab_free+0x126/0x160 [ 310.546961][ C0] __kasan_slab_free+0x11/0x20 [ 310.546977][ C0] slab_free_freelist_hook+0xbd/0x190 [ 310.547004][ C0] ? kfree_rcu_work+0x2b2/0x6a0 [ 310.547023][ C0] kmem_cache_free_bulk+0x552/0x700 [ 310.547045][ C0] kfree_rcu_work+0x2b2/0x6a0 [ 310.547065][ C0] ? rcu_do_batch+0xc10/0xc10 [ 310.547083][ C0] ? read_word_at_a_time+0x12/0x20 [ 310.547100][ C0] ? strscpy+0x9c/0x260 [ 310.547116][ C0] process_one_work+0x6bb/0xc10 [ 310.547134][ C0] worker_thread+0xad5/0x12a0 [ 310.547150][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 310.547170][ C0] kthread+0x421/0x510 [ 310.547186][ C0] ? worker_clr_flags+0x180/0x180 [ 310.547201][ C0] ? kthread_blkcg+0xd0/0xd0 [ 310.547219][ C0] ret_from_fork+0x1f/0x30 [ 310.547239][ C0] [ 310.966629][ T8137] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 310.986662][ T8137] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 310.993659][ T8137] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 311.012703][ T8137] usb 4-1: USB disconnect, device number 22 [ 311.021662][ T8137] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 311.031195][ T8137] ftdi_sio 4-1:0.0: device disconnected [ 311.313699][ T9262] bridge: RTM_NEWNEIGH with invalid ether address [ 312.196995][ T6850] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 312.496692][ T6850] usb 2-1: Using ep0 maxpacket: 16 [ 312.806893][ T6850] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 312.836754][ T6850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.887185][ T6850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 312.916604][ T6850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 312.947947][ T6850] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 253 [ 313.078195][ T6850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.102172][ T6850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.450711][ T6850] usb 2-1: SerialNumber: syz [ 313.696968][ T6850] usb 2-1: USB disconnect, device number 30 [ 314.572827][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 314.584598][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 314.600872][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 314.618702][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 314.630730][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 314.639710][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 314.648762][ T9360] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 314.825973][ T9377] syz.4.3294[9377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.826760][ T9377] syz.4.3294[9377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.882859][ T9377] syz.4.3294[9377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.996834][ T9377] syz.4.3294[9377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.044805][ T9384] bridge: RTM_NEWNEIGH with invalid ether address [ 316.147991][ T9420] bridge: RTM_NEWNEIGH with invalid ether address [ 316.517435][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 316.789517][ T30] audit: type=1326 audit(2000000154.185:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 316.816563][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 316.844284][ T30] audit: type=1326 audit(2000000154.185:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 316.894889][ T30] audit: type=1326 audit(2000000154.205:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 316.943986][ T30] audit: type=1326 audit(2000000154.205:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 316.968595][ T311] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 188, using maximum allowed: 30 [ 316.989599][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.991676][ T30] audit: type=1326 audit(2000000154.205:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 317.001843][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.067053][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 188 [ 317.091228][ T311] usb 4-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00 [ 317.154762][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.178598][ T311] usb 4-1: config 0 descriptor?? [ 317.181486][ T9477] device pim6reg1 entered promiscuous mode [ 317.265146][ T9492] input: syz0 as /devices/virtual/input/input44 [ 318.072806][ T706] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 318.433351][ T9523] device pim6reg1 entered promiscuous mode [ 318.442105][ T30] audit: type=1326 audit(2000000155.832:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49510dcbd9 code=0x50000 [ 318.467632][ T311] appleir 0003:05AC:1440.0032: unexpected long global item [ 318.468207][ T30] audit: type=1326 audit(2000000155.832:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49510dcbd9 code=0x50000 [ 318.486181][ T311] appleir 0003:05AC:1440.0032: parse failed [ 318.499612][ T30] audit: type=1326 audit(2000000155.832:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49510dcbd9 code=0x50000 [ 318.506735][ T311] appleir: probe of 0003:05AC:1440.0032 failed with error -22 [ 318.528471][ T30] audit: type=1326 audit(2000000155.832:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49510dcbd9 code=0x50000 [ 318.560142][ T30] audit: type=1326 audit(2000000155.832:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9519 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49510dcbd9 code=0x50000 [ 318.626660][ T706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.646588][ T706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.676614][ T706] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.685495][ T706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.695288][ T63] usb 4-1: USB disconnect, device number 23 [ 318.721676][ T706] usb 3-1: config 0 descriptor?? [ 318.927558][ T9532] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 319.807131][ T706] uclogic 0003:256C:006D.0033: failed retrieving Huion firmware version: -71 [ 319.815837][ T706] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 319.823659][ T706] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 319.847054][ T706] usb 3-1: USB disconnect, device number 25 [ 320.276864][ T1080] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 321.026716][ T1080] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.049961][ T1080] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.066299][ T1080] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 321.166905][ T710] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 321.446698][ T710] usb 2-1: Using ep0 maxpacket: 16 [ 321.597044][ T710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.648476][ T710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.692897][ T710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.707391][ T710] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 321.719163][ T710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.761148][ T710] usb 2-1: config 0 descriptor?? [ 321.936743][ T1080] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.945774][ T1080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.954093][ T1080] usb 5-1: Product: syz [ 321.960061][ T1080] usb 5-1: Manufacturer: syz [ 321.965832][ T1080] usb 5-1: SerialNumber: syz [ 322.017718][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.024841][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.035575][ T9605] device bridge_slave_1 left promiscuous mode [ 322.041632][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.049421][ T9605] device bridge_slave_0 left promiscuous mode [ 322.055386][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.191863][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3389'. [ 322.207118][ T9548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 322.376764][ T710] usbhid 2-1:0.0: can't add hid device: -71 [ 322.382637][ T710] usbhid: probe of 2-1:0.0 failed with error -71 [ 322.390260][ T710] usb 2-1: USB disconnect, device number 31 [ 322.457410][ T30] kauditd_printk_skb: 8267 callbacks suppressed [ 322.457427][ T30] audit: type=1400 audit(2000000159.852:10083): avc: denied { lock } for pid=9629 comm="syz.0.3397" path="socket:[64348]" dev="sockfs" ino=64348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 322.866793][ T9548] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 323.106687][ T1080] cdc_ncm 5-1:1.0: bind() failure [ 323.112687][ T1080] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 323.126578][ T1080] cdc_ncm 5-1:1.1: bind() failure [ 323.182406][ T9658] syz.2.3406[9658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.182489][ T9658] syz.2.3406[9658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.559680][ T438] usb 5-1: USB disconnect, device number 33 [ 324.360235][ T30] audit: type=1400 audit(2000000161.752:10084): avc: denied { ioctl } for pid=9686 comm="syz.2.3419" path="socket:[64565]" dev="sockfs" ino=64565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 324.407434][ T9687] gretap0: refused to change device tx_queue_len [ 324.424442][ T9687] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.335349][ T9695] SELinux: security_context_str_to_sid({) failed for (dev ?, type ?) errno=-22 [ 325.344613][ T9695] SELinux: security_context_str_to_sid({) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 325.426467][ T9718] overlayfs: failed to resolve './file1': -2 [ 325.594251][ T9728] syz.4.3433[9728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.594344][ T9728] syz.4.3433[9728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.886630][ T63] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 325.966597][ T8137] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 326.156595][ T63] usb 5-1: Using ep0 maxpacket: 32 [ 326.206604][ T8137] usb 4-1: Using ep0 maxpacket: 32 [ 326.316708][ T63] usb 5-1: unable to get BOS descriptor or descriptor too short [ 326.396654][ T63] usb 5-1: config 0 has no interfaces? [ 326.486661][ T8137] usb 4-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 326.495612][ T8137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.503950][ T8137] usb 4-1: Product: syz [ 326.508180][ T8137] usb 4-1: Manufacturer: syz [ 326.512642][ T8137] usb 4-1: SerialNumber: syz [ 326.531448][ T8137] usb 4-1: config 0 descriptor?? [ 326.556702][ T63] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.565923][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.574538][ T8137] usb 4-1: bad CDC descriptors [ 326.581445][ T8137] usb-storage 4-1:0.0: USB Mass Storage device detected [ 326.588357][ T63] usb 5-1: Product: syz [ 326.592670][ T63] usb 5-1: Manufacturer: syz [ 326.597281][ T63] usb 5-1: SerialNumber: syz [ 326.606982][ T8137] usb-storage 4-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 326.619664][ T63] usb 5-1: config 0 descriptor?? [ 326.776308][ T63] usb 4-1: USB disconnect, device number 24 [ 326.859472][ T8137] usb 5-1: USB disconnect, device number 34 [ 327.067594][ T9769] device syzkaller0 entered promiscuous mode [ 327.192214][ T30] audit: type=1326 audit(2000000164.582:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.1.3453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x0 [ 327.398545][ T9799] syz.4.3461[9799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.398633][ T9799] syz.4.3461[9799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.662070][ T9814] syz.1.3467[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.675604][ T9814] syz.1.3467[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.809938][ T30] audit: type=1326 audit(2000000166.202:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.850280][ T30] audit: type=1326 audit(2000000166.232:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.874415][ T30] audit: type=1326 audit(2000000166.232:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.897939][ T30] audit: type=1326 audit(2000000166.232:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.925988][ T30] audit: type=1326 audit(2000000166.232:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.957881][ T30] audit: type=1326 audit(2000000166.232:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 328.983799][ T30] audit: type=1326 audit(2000000166.232:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 329.011746][ T30] audit: type=1326 audit(2000000166.232:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.3.3473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 329.435941][ T9843] netlink: 'syz.0.3478': attribute type 2 has an invalid length. [ 329.448851][ T294] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 329.459493][ T2357] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 329.473160][ T30] audit: type=1400 audit(2000000166.502:10094): avc: denied { bind } for pid=9830 comm="syz.1.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.569958][ T30] audit: type=1400 audit(2000000166.502:10095): avc: denied { name_bind } for pid=9830 comm="syz.1.3474" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 329.777817][ T9849] syz.1.3480[9849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.778646][ T9849] syz.1.3480[9849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.914780][ T9861] futex_wake_op: syz.3.3486 tries to shift op by 36; fix this program [ 330.008106][ T294] usb 5-1: Using ep0 maxpacket: 32 [ 330.147300][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.217231][ T2357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.229982][ T2357] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 330.240364][ T2357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.249257][ T2357] usb 3-1: config 0 descriptor?? [ 330.296352][ T9880] syz.3.3493[9880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.296416][ T9880] syz.3.3493[9880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.327100][ T294] usb 5-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 330.347647][ T294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.355719][ T294] usb 5-1: Product: syz [ 330.360281][ T294] usb 5-1: Manufacturer: syz [ 330.366250][ T294] usb 5-1: SerialNumber: syz [ 330.371871][ T294] usb 5-1: config 0 descriptor?? [ 330.391585][ T9892] futex_wake_op: syz.3.3499 tries to shift op by 36; fix this program [ 330.427103][ T294] usb 5-1: bad CDC descriptors [ 330.432175][ T294] usb-storage 5-1:0.0: USB Mass Storage device detected [ 330.440320][ T294] usb-storage 5-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 330.641222][ T6850] usb 5-1: USB disconnect, device number 35 [ 330.876684][ T1080] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 330.916894][ T31] INFO: task syz-executor:3885 blocked for more than 123 seconds. [ 330.924810][ T710] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 330.924870][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 330.939588][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.948234][ T31] task:syz-executor state:D stack:21488 pid: 3885 ppid: 1 flags:0x00004004 [ 330.957346][ T31] Call Trace: [ 330.960536][ T31] [ 330.963294][ T31] __schedule+0xccc/0x1590 [ 330.967625][ T31] ? __sched_text_start+0x8/0x8 [ 330.972330][ T31] ? __sched_text_start+0x8/0x8 [ 330.977105][ T31] schedule+0x11f/0x1e0 [ 330.981244][ T31] schedule_timeout+0xa9/0x370 [ 330.985885][ T31] ? console_conditional_schedule+0x30/0x30 [ 330.991579][ T31] ? __prepare_to_swait+0xac/0x130 [ 330.996504][ T31] wait_for_common+0x285/0x420 [ 331.001423][ T31] ? wait_for_completion+0x20/0x20 [ 331.006417][ T31] ? wake_up_state+0xb/0x10 [ 331.010870][ T31] ? kthread_unpark+0x1a0/0x220 [ 331.015517][ T31] wait_for_completion+0x18/0x20 [ 331.020365][ T31] kthread_stop+0x107/0x410 [ 331.024694][ T31] ext4_stop_mmpd+0x47/0xb0 [ 331.029069][ T31] ext4_put_super+0x866/0xd20 [ 331.033550][ T31] ? ext4_drop_inode+0x1a0/0x1a0 [ 331.038409][ T31] generic_shutdown_super+0x157/0x2e0 [ 331.043529][ T31] kill_block_super+0x7e/0xe0 [ 331.048073][ T31] deactivate_locked_super+0xad/0x110 [ 331.053253][ T31] deactivate_super+0xbe/0xf0 [ 331.058136][ T31] cleanup_mnt+0x45c/0x510 [ 331.062382][ T31] __cleanup_mnt+0x19/0x20 [ 331.066727][ T31] task_work_run+0x129/0x190 [ 331.071063][ T31] exit_to_user_mode_loop+0xc4/0xe0 [ 331.076094][ T31] exit_to_user_mode_prepare+0x5a/0xa0 [ 331.081480][ T31] syscall_exit_to_user_mode+0x26/0x160 [ 331.086854][ T31] do_syscall_64+0x49/0xb0 [ 331.091026][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.096842][ T31] RIP: 0033:0x7f1377743f07 [ 331.101000][ T31] RSP: 002b:00007fff6e158098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 331.109281][ T31] RAX: 0000000000000000 RBX: 00007f13777b0515 RCX: 00007f1377743f07 [ 331.117352][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6e158150 [ 331.125195][ T31] RBP: 00007fff6e158150 R08: 0000000000000000 R09: 0000000000000000 [ 331.133027][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6e159210 [ 331.140956][ T31] R13: 00007f13777b0515 R14: 000000000002ddb0 R15: 000000000002dcaf [ 331.148795][ T31] [ 331.151650][ T31] INFO: task syz-executor:4049 blocked for more than 144 seconds. [ 331.159627][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 331.167079][ T2357] uclogic 0003:256C:006D.0034: failed retrieving Huion firmware version: -71 [ 331.167189][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.183040][ T2357] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 331.191611][ T2357] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 331.192080][ T31] task:syz-executor state:D stack:21456 pid: 4049 ppid: 1 flags:0x00004004 [ 331.211009][ T31] Call Trace: [ 331.214111][ T31] [ 331.214948][ T2357] usb 3-1: USB disconnect, device number 26 [ 331.217283][ T31] __schedule+0xccc/0x1590 [ 331.227232][ T31] ? __sched_text_start+0x8/0x8 [ 331.231927][ T31] ? resched_curr+0x114/0x1c0 [ 331.236436][ T31] schedule+0x11f/0x1e0 [ 331.240727][ T1080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.251606][ T31] schedule_timeout+0xa9/0x370 [ 331.256223][ T31] ? __this_cpu_preempt_check+0x13/0x20 [ 331.261948][ T1080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.263842][ T31] ? tracing_record_taskinfo+0x7b/0x230 [ 331.272094][ T1080] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 331.286151][ T1080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.295034][ T1080] usb 4-1: config 0 descriptor?? [ 331.300084][ T31] ? console_conditional_schedule+0x30/0x30 [ 331.305908][ T31] ? __prepare_to_swait+0xac/0x130 [ 331.311236][ T31] wait_for_common+0x285/0x420 [ 331.315838][ T31] ? wait_for_completion+0x20/0x20 [ 331.321689][ T31] ? wake_up_state+0xb/0x10 [ 331.326186][ T31] ? kthread_unpark+0x1a0/0x220 [ 331.331277][ T31] wait_for_completion+0x18/0x20 [ 331.336205][ T31] kthread_stop+0x107/0x410 [ 331.340850][ T31] ext4_stop_mmpd+0x47/0xb0 [ 331.345184][ T31] ext4_put_super+0x866/0xd20 [ 331.350464][ T31] ? ext4_drop_inode+0x1a0/0x1a0 [ 331.358594][ T31] generic_shutdown_super+0x157/0x2e0 [ 331.363821][ T31] kill_block_super+0x7e/0xe0 [ 331.368440][ T31] deactivate_locked_super+0xad/0x110 [ 331.373824][ T31] deactivate_super+0xbe/0xf0 [ 331.378388][ T31] cleanup_mnt+0x45c/0x510 [ 331.382594][ T31] __cleanup_mnt+0x19/0x20 [ 331.386951][ T710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.387270][ T31] task_work_run+0x129/0x190 [ 331.397667][ T710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.397712][ T710] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 331.402505][ T31] exit_to_user_mode_loop+0xc4/0xe0 [ 331.411950][ T710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.420796][ T31] exit_to_user_mode_prepare+0x5a/0xa0 [ 331.426900][ T710] usb 2-1: config 0 descriptor?? [ 331.444053][ T31] syscall_exit_to_user_mode+0x26/0x160 [ 331.450905][ T31] do_syscall_64+0x49/0xb0 [ 331.455185][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 331.611565][ T31] RIP: 0033:0x7f60af01af07 [ 331.632195][ T31] RSP: 002b:00007ffe01871348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 331.643274][ T31] RAX: 0000000000000000 RBX: 00007f60af087515 RCX: 00007f60af01af07 [ 331.653109][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe01871400 [ 331.662429][ T31] RBP: 00007ffe01871400 R08: 0000000000000000 R09: 0000000000000000 [ 331.670521][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe018724c0 [ 331.678692][ T31] R13: 00007f60af087515 R14: 000000000002d67a R15: 000000000002d5dc [ 331.686652][ T31] [ 331.689790][ T31] INFO: task kmmpd-loop0:5511 blocked for more than 144 seconds. [ 331.697453][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 331.704718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.713210][ T31] task:kmmpd-loop0 state:D stack:27856 pid: 5511 ppid: 2 flags:0x00004000 [ 331.722543][ T31] Call Trace: [ 331.725728][ T31] [ 331.728460][ T31] __schedule+0xccc/0x1590 [ 331.732686][ T31] ? __sched_text_start+0x8/0x8 [ 331.737434][ T31] ? __kasan_check_write+0x14/0x20 [ 331.742319][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 331.747317][ T31] ? _raw_spin_lock_irqsave+0x210/0x210 [ 331.752668][ T31] schedule+0x11f/0x1e0 [ 331.756667][ T31] percpu_rwsem_wait+0x382/0x4b0 [ 331.761416][ T31] ? percpu_free_rwsem+0x80/0x80 [ 331.766187][ T31] ? percpu_rwsem_async_destroy+0xf0/0xf0 [ 331.772059][ T31] ? console_conditional_schedule+0x30/0x30 [ 331.777958][ T31] __percpu_down_read+0xd7/0x110 [ 331.782732][ T31] write_mmp_block+0x1c0/0x270 [ 331.787512][ T31] kmmpd+0x292/0xa30 [ 331.791314][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 331.797112][ T31] ? __kthread_parkme+0xb2/0x200 [ 331.801961][ T31] kthread+0x421/0x510 [ 331.805791][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 331.812612][ T31] ? kthread_blkcg+0xd0/0xd0 [ 331.823865][ T31] ret_from_fork+0x1f/0x30 [ 331.828472][ T31] [ 331.828860][ T1080] sony 0003:054C:0268.0035: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 331.831349][ T31] INFO: task kmmpd-loop2:5562 blocked for more than 124 seconds. [ 331.848310][ T1080] sony 0003:054C:0268.0035: failed to claim input [ 331.852740][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 331.867404][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.876042][ T31] task:kmmpd-loop2 state:D stack:27856 pid: 5562 ppid: 2 flags:0x00004000 [ 331.885432][ T31] Call Trace: [ 331.888775][ T31] [ 331.891742][ T31] __schedule+0xccc/0x1590 [ 331.896138][ T31] ? __sched_text_start+0x8/0x8 [ 331.901142][ T31] ? __kasan_check_write+0x14/0x20 [ 331.906095][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 331.911267][ T31] ? _raw_spin_lock_irqsave+0x210/0x210 [ 331.916737][ T31] schedule+0x11f/0x1e0 [ 331.920637][ T31] percpu_rwsem_wait+0x382/0x4b0 [ 331.928127][ T31] ? percpu_free_rwsem+0x80/0x80 [ 331.933016][ T31] ? percpu_rwsem_async_destroy+0xf0/0xf0 [ 331.938765][ T31] ? console_conditional_schedule+0x30/0x30 [ 331.944544][ T31] ? sched_clock+0x9/0x10 [ 331.948702][ T31] __percpu_down_read+0xd7/0x110 [ 331.953460][ T31] write_mmp_block+0x1c0/0x270 [ 331.958054][ T31] kmmpd+0x292/0xa30 [ 331.961767][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 331.967165][ T31] ? __kthread_parkme+0xb2/0x200 [ 331.971917][ T31] kthread+0x421/0x510 [ 331.975826][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 331.981217][ T31] ? kthread_blkcg+0xd0/0xd0 [ 331.985650][ T31] ret_from_fork+0x1f/0x30 [ 331.989918][ T31] [ 331.993451][ T31] NMI backtrace for cpu 1 [ 331.997620][ T31] CPU: 1 PID: 31 Comm: khungtaskd Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 332.007237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 332.017131][ T31] Call Trace: [ 332.020257][ T31] [ 332.023032][ T31] dump_stack_lvl+0x151/0x1b7 [ 332.027546][ T31] ? io_uring_drop_tctx_refs+0x190/0x190 [ 332.033018][ T31] dump_stack+0x15/0x17 [ 332.037003][ T31] nmi_cpu_backtrace+0x2f7/0x300 [ 332.041781][ T31] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 332.047767][ T31] ? sched_show_task+0x3d8/0x620 [ 332.052545][ T31] ? __rcu_read_unlock+0xd0/0xd0 [ 332.057316][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 332.063218][ T31] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 332.069032][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 332.074937][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 332.080665][ T31] watchdog+0xdd7/0xf50 [ 332.085134][ T31] ? __kasan_check_write+0x14/0x20 [ 332.090043][ T31] ? hungtask_pm_notify+0x50/0x50 [ 332.094898][ T31] ? __kasan_check_read+0x11/0x20 [ 332.099765][ T31] ? __kthread_parkme+0xb2/0x200 [ 332.104530][ T31] kthread+0x421/0x510 [ 332.108435][ T31] ? hungtask_pm_notify+0x50/0x50 [ 332.113306][ T31] ? kthread_blkcg+0xd0/0xd0 [ 332.117744][ T31] ret_from_fork+0x1f/0x30 [ 332.121982][ T31] [ 332.125080][ T31] Sending NMI from CPU 1 to CPUs 0: [ 332.130228][ C0] NMI backtrace for cpu 0 [ 332.130243][ C0] CPU: 0 PID: 9916 Comm: syz.4.3509 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 332.130265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 332.130275][ C0] RIP: 0033:0x7fd0af59489a [ 332.130295][ C0] Code: 41 55 48 89 f0 41 54 48 29 f8 49 89 fc 55 53 48 83 ec 08 48 3d 80 00 00 00 0f 8e 7c 01 00 00 48 89 f7 49 89 d5 49 8d 6c 24 08 <48> 85 d2 0f 84 0f 01 00 00 f3 41 0f 6f 04 24 48 c1 f8 04 48 8b 77 [ 332.130310][ C0] RSP: 002b:00007ffef46799f0 EFLAGS: 00000202 [ 332.130326][ C0] RAX: 00000000000000a0 RBX: 00007fd0af0e6358 RCX: ffffffff8286f364 [ 332.130340][ C0] RDX: 0000000000000017 RSI: 00007fd0af0e63f8 RDI: 00007fd0af0e63f8 [ 332.130353][ C0] RBP: 00007fd0af0e6360 R08: 00007fd0af0e6358 R09: 00007fd0aef47000 [ 332.130366][ C0] R10: 0000000000000008 R11: 000000008286e51f R12: 00007fd0af0e6358 [ 332.130378][ C0] R13: 0000000000000017 R14: 00007fd0aef47008 R15: 00007fd0af84c110 [ 332.130390][ C0] FS: 0000555556c84500 GS: 0000000000000000 [ 332.295729][ T710] uclogic 0003:28BD:0075.0036: unknown main item tag 0x0 [ 332.302875][ T710] uclogic 0003:28BD:0075.0036: unknown main item tag 0x0 [ 332.312571][ T710] uclogic 0003:28BD:0075.0036: unknown main item tag 0x0 [ 332.319082][ T9935] input: syz1 as /devices/virtual/input/input45 [ 332.319518][ T710] uclogic 0003:28BD:0075.0036: unknown main item tag 0x0 [ 332.332473][ T710] uclogic 0003:28BD:0075.0036: unknown main item tag 0x0 [ 332.339751][ T710] uclogic 0003:28BD:0075.0036: No inputs registered, leaving [ 332.348334][ T706] usb 4-1: USB disconnect, device number 25 [ 332.356095][ T710] uclogic 0003:28BD:0075.0036: hidraw0: USB HID v0.00 Device [HID 28bd:0075] on usb-dummy_hcd.1-1/input0 [ 332.472272][ T8137] usb 2-1: USB disconnect, device number 32 [ 333.146585][ T1080] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 333.338057][ T9957] futex_wake_op: syz.0.3523 tries to shift op by 36; fix this program [ 333.526703][ T1080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.619302][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3527'. [ 333.640107][ T9970] device veth4 entered promiscuous mode [ 333.893766][ T1080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.903543][ T1080] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 333.927262][ T1080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.943945][ T1080] usb 4-1: config 0 descriptor?? [ 335.348816][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 335.348833][ T30] audit: type=1400 audit(2000000172.742:10098): avc: denied { mount } for pid=9991 comm="syz.4.3534" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 335.400495][ T30] audit: type=1400 audit(2000000172.792:10099): avc: denied { unmount } for pid=2762 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 335.796716][ T1080] uclogic 0003:256C:006D.0037: failed retrieving Huion firmware version: -71 [ 335.815712][ T1080] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 335.823237][ T8137] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 335.841060][ T1080] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 335.866748][ T1080] usb 4-1: USB disconnect, device number 26 [ 336.006397][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.013440][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.021201][ T9996] device bridge_slave_0 entered promiscuous mode [ 336.028880][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.036271][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.044428][ T9996] device bridge_slave_1 entered promiscuous mode [ 336.096641][ T8137] usb 3-1: Using ep0 maxpacket: 32 [ 336.109838][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.116756][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.123813][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.130713][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.166238][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.174099][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.182107][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.189606][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.209685][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.220284][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.227199][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.234809][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.243193][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.250176][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.261762][ T710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.276494][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.299920][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.314271][ T9996] device veth0_vlan entered promiscuous mode [ 336.327175][ T30] audit: type=1400 audit(2000000173.722:10100): avc: denied { bind } for pid=10008 comm="syz.0.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.348305][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.357503][ T294] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 336.366249][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.374330][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.388934][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.400974][ T9996] device veth1_macvtap entered promiscuous mode [ 336.407760][ T8137] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 336.416031][ T706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.421306][ T8137] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.432907][ T8137] usb 3-1: Product: syz [ 336.437085][ T8137] usb 3-1: Manufacturer: syz [ 336.441513][ T8137] usb 3-1: SerialNumber: syz [ 336.450094][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.453241][ T8137] usb 3-1: config 0 descriptor?? [ 336.617147][ T710] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 336.667219][ T30] audit: type=1400 audit(2000000174.062:10101): avc: denied { ioctl } for pid=10021 comm="syz.0.3548" path="socket:[65517]" dev="sockfs" ino=65517 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 336.699220][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.706284][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.714057][T10024] device bridge_slave_0 entered promiscuous mode [ 336.723976][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.730998][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.738416][T10024] device bridge_slave_1 entered promiscuous mode [ 336.776678][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.787707][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.797510][ T294] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.810294][ T294] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.819333][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.828280][ T294] usb 2-1: config 0 descriptor?? [ 336.856502][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.863428][T10024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.870610][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.877495][T10024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.886775][ T710] usb 4-1: Using ep0 maxpacket: 8 [ 336.914533][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.922580][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.930318][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.943299][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.951496][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.958417][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.968054][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.976238][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.983128][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.006641][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.014696][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.022508][ T710] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 337.032537][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.040861][ T710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 337.051057][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.058679][ T710] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 337.068849][ T710] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 337.079106][ T710] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.091992][ T710] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.101106][ T710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.116265][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.125354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.140773][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.149081][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.164998][ T8137] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 337.175607][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.183438][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.185493][ T30] audit: type=1400 audit(2000000174.572:10102): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 337.192685][T10024] device veth0_vlan entered promiscuous mode [ 337.221534][ T30] audit: type=1400 audit(2000000174.612:10103): avc: denied { search } for pid=138 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.234490][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.251894][ T438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.256838][ T30] audit: type=1400 audit(2000000174.642:10104): avc: denied { read } for pid=138 comm="dhcpcd" name="n15" dev="tmpfs" ino=18556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.281651][ T30] audit: type=1400 audit(2000000174.642:10105): avc: denied { open } for pid=138 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=18556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.284121][T10024] device veth1_macvtap entered promiscuous mode [ 337.311320][ T30] audit: type=1400 audit(2000000174.642:10106): avc: denied { getattr } for pid=138 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=18556 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 337.336224][ T294] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 337.346952][ T294] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 337.367201][ T30] audit: type=1400 audit(2000000174.762:10107): avc: denied { read } for pid=10032 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=295 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.368929][ T294] plantronics 0003:047F:FFFF.0038: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 337.412929][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.421480][ T294] usb 3-1: USB disconnect, device number 27 [ 337.427241][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.427633][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.452395][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.463520][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.473927][ T562] device bridge_slave_1 left promiscuous mode [ 337.481379][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.489139][ T562] device bridge_slave_0 left promiscuous mode [ 337.495284][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.504191][ T562] device veth1_macvtap left promiscuous mode [ 337.510272][ T562] device veth0_vlan left promiscuous mode [ 337.751718][T10065] tipc: Failed to remove unknown binding: 66,1,1/0:558489438/558489440 [ 337.760290][T10065] tipc: Failed to remove unknown binding: 66,1,1/0:558489438/558489440 [ 338.056616][ T20] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 338.266613][ T438] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 338.517206][ T438] usb 3-1: Using ep0 maxpacket: 16 [ 338.576694][ T20] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 338.585636][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.593415][ T20] usb 5-1: Product: syz [ 338.597942][ T20] usb 5-1: Manufacturer: syz [ 338.602441][ T20] usb 5-1: SerialNumber: syz [ 338.607757][ T20] usb 5-1: config 0 descriptor?? [ 338.647354][ T20] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 338.654160][ T20] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 338.662155][ T20] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 338.666937][ T438] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 338.853792][ T20] usb 5-1: USB disconnect, device number 36 [ 338.866823][ T438] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 338.875817][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.883735][ T438] usb 3-1: Product: syz [ 338.887795][ T438] usb 3-1: Manufacturer: syz [ 338.892143][ T438] usb 3-1: SerialNumber: syz [ 338.897557][ T438] usb 3-1: config 0 descriptor?? [ 338.937387][ T438] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 338.944978][ T438] usb 3-1: Detected FT232RL [ 339.186712][ T438] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 339.398585][ T706] usb 2-1: USB disconnect, device number 33 [ 339.451447][ T438] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 339.505797][ T1080] usb 4-1: USB disconnect, device number 27 [ 339.606774][T10097] tipc: Failed to remove unknown binding: 66,1,1/0:2216946135/2216946137 [ 339.615595][T10097] tipc: Failed to remove unknown binding: 66,1,1/0:2216946135/2216946137 [ 339.695246][ T438] usb 3-1: USB disconnect, device number 28 [ 339.820732][ T438] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 339.905178][ T438] ftdi_sio 3-1:0.0: device disconnected [ 339.918103][T10100] tipc: Failed to remove unknown binding: 66,1,1/0:3096219408/3096219410 [ 339.926829][T10100] tipc: Failed to remove unknown binding: 66,1,1/0:3096219408/3096219410 [ 340.441501][ T294] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 340.733147][T10117] device pim6reg1 entered promiscuous mode [ 340.804813][T10121] device syzkaller0 entered promiscuous mode [ 340.813100][T10121] device syzkaller0 left promiscuous mode [ 340.833023][ T294] usb 2-1: Using ep0 maxpacket: 32 [ 341.198489][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 341.198505][ T30] audit: type=1400 audit(2000000178.592:10120): avc: denied { write } for pid=10133 comm="syz.0.3576" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 341.230144][T10134] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 341.236893][ T294] usb 2-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 341.240579][ T20] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 341.254420][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.261315][ T30] audit: type=1400 audit(2000000178.622:10121): avc: denied { open } for pid=10133 comm="syz.0.3576" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 341.284321][ T294] usb 2-1: Product: syz [ 341.296566][ T294] usb 2-1: Manufacturer: syz [ 341.307966][ T294] usb 2-1: SerialNumber: syz [ 341.317943][ T294] usb 2-1: config 0 descriptor?? [ 341.364676][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3574'. [ 341.374211][ T294] usb 2-1: bad CDC descriptors [ 341.379093][ T294] usb-storage 2-1:0.0: USB Mass Storage device detected [ 341.393454][T10129] device veth2 entered promiscuous mode [ 341.404074][ T294] usb-storage 2-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 341.591301][ T294] usb 2-1: USB disconnect, device number 34 [ 341.626684][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.637743][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.647553][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.660835][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.669961][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.682705][ T20] usb 5-1: config 0 descriptor?? [ 342.088480][T10149] syz.2.3580[10149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.088571][T10149] syz.2.3580[10149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.167804][ T20] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 342.191237][ T20] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 342.204417][ T20] plantronics 0003:047F:FFFF.0039: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 342.751609][ T30] audit: type=1400 audit(2000000181.146:10122): avc: denied { map } for pid=10170 comm="syz.1.3589" path="socket:[66450]" dev="sockfs" ino=66450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.784171][ T30] audit: type=1400 audit(2000000181.166:10123): avc: denied { read } for pid=10170 comm="syz.1.3589" path="socket:[66450]" dev="sockfs" ino=66450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.850671][ T30] audit: type=1400 audit(2000000181.176:10124): avc: denied { append } for pid=10170 comm="syz.1.3589" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 343.608645][ T8137] usb 5-1: USB disconnect, device number 37 [ 343.636450][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'. [ 343.645901][T10189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'. [ 343.658457][T10189] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 345.028344][T10211] syz.0.3602[10211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.028437][T10211] syz.0.3602[10211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.723563][T10221] tipc: Failed to remove unknown binding: 66,1,1/0:3905565018/3905565020 [ 346.752048][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 346.768237][T10225] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3607'. [ 346.777221][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 346.808245][T10221] tipc: Failed to remove unknown binding: 66,1,1/0:3905565018/3905565020 [ 346.817456][T10223] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 346.947746][ T30] audit: type=1400 audit(2000000186.344:10125): avc: denied { connect } for pid=10233 comm="syz.2.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 347.244448][ T30] audit: type=1400 audit(2000000186.354:10126): avc: denied { setopt } for pid=10235 comm="syz.2.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.986678][T10253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3618'. [ 348.045135][T10260] device syzkaller0 entered promiscuous mode [ 348.054681][T10260] device syzkaller0 left promiscuous mode [ 348.517247][ T30] audit: type=1400 audit(2000000187.914:10127): avc: denied { mount } for pid=10273 comm="syz.1.3624" name="/" dev="configfs" ino=12088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 348.540397][ T30] audit: type=1400 audit(2000000187.914:10128): avc: denied { read } for pid=10273 comm="syz.1.3624" name="/" dev="configfs" ino=12088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 348.553189][T10276] tipc: Failed to remove unknown binding: 66,1,1/0:3555810498/3555810500 [ 348.575578][T10276] tipc: Failed to remove unknown binding: 66,1,1/0:3555810498/3555810500 [ 348.588068][ T30] audit: type=1400 audit(2000000187.914:10129): avc: denied { open } for pid=10273 comm="syz.1.3624" path="/218/file0" dev="configfs" ino=12088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 348.611082][ T30] audit: type=1400 audit(2000000187.914:10130): avc: denied { unmount } for pid=7450 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 348.686849][T10280] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3630'. [ 349.353998][T10308] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3641'. [ 349.445166][T10312] syz.3.3640[10312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.445958][T10312] syz.3.3640[10312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.806556][ T294] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 349.837146][ T30] audit: type=1326 audit(2000000189.234:10131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 349.848824][T10329] fuse: Bad value for 'fd' [ 349.860965][ T30] audit: type=1326 audit(2000000189.234:10132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 349.888816][ T30] audit: type=1326 audit(2000000189.244:10133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 349.917550][ T30] audit: type=1326 audit(2000000189.244:10134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10326 comm="syz.3.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x7ffc0000 [ 350.179222][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3652'. [ 350.376617][ T294] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 350.385549][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.393677][ T294] usb 2-1: Product: syz [ 350.397879][ T294] usb 2-1: Manufacturer: syz [ 350.403061][T10346] syz.2.3656[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.403152][T10346] syz.2.3656[10346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.414700][ T294] usb 2-1: SerialNumber: syz [ 350.431652][ T294] usb 2-1: config 0 descriptor?? [ 350.467219][ T294] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 350.473939][ T294] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 350.496608][ T294] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 350.755112][ T294] usb 2-1: USB disconnect, device number 35 [ 351.132732][T10356] syz.2.3660[10356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.132794][T10356] syz.2.3660[10356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.033296][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 352.033312][ T30] audit: type=1326 audit(2000000191.424:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.2.3663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x0 [ 352.210255][T10374] netlink: 'syz.1.3666': attribute type 4 has an invalid length. [ 352.507127][ T30] audit: type=1326 audit(2000000191.904:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.518744][T10384] fuse: Bad value for 'fd' [ 352.530749][ T30] audit: type=1326 audit(2000000191.904:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.559003][ T30] audit: type=1326 audit(2000000191.904:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.583106][ T30] audit: type=1326 audit(2000000191.904:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.607141][ T30] audit: type=1326 audit(2000000191.904:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.631185][ T30] audit: type=1326 audit(2000000191.914:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.655421][ T30] audit: type=1326 audit(2000000191.914:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.676819][ T31] INFO: task syz-executor:3885 blocked for more than 145 seconds. [ 352.679285][ T30] audit: type=1326 audit(2000000191.914:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.686732][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 352.710296][ T30] audit: type=1326 audit(2000000191.944:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.1.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 352.717323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.749211][ T31] task:syz-executor state:D stack:21488 pid: 3885 ppid: 1 flags:0x00004004 [ 352.758215][ T31] Call Trace: [ 352.761314][ T31] [ 352.764095][ T31] __schedule+0xccc/0x1590 [ 352.768452][ T31] ? __sched_text_start+0x8/0x8 [ 352.773131][ T31] ? __sched_text_start+0x8/0x8 [ 352.777846][ T31] schedule+0x11f/0x1e0 [ 352.781807][ T31] schedule_timeout+0xa9/0x370 [ 352.786406][ T31] ? console_conditional_schedule+0x30/0x30 [ 352.792232][ T31] ? __prepare_to_swait+0xac/0x130 [ 352.797102][ T31] wait_for_common+0x285/0x420 [ 352.801686][ T31] ? wait_for_completion+0x20/0x20 [ 352.806719][ T31] ? wake_up_state+0xb/0x10 [ 352.810970][ T31] ? kthread_unpark+0x1a0/0x220 [ 352.815661][ T31] wait_for_completion+0x18/0x20 [ 352.820459][ T31] kthread_stop+0x107/0x410 [ 352.824770][ T31] ext4_stop_mmpd+0x47/0xb0 [ 352.829203][ T31] ext4_put_super+0x866/0xd20 [ 352.833626][ T31] ? ext4_drop_inode+0x1a0/0x1a0 [ 352.838903][ T31] generic_shutdown_super+0x157/0x2e0 [ 352.844051][ T31] kill_block_super+0x7e/0xe0 [ 352.848650][ T31] deactivate_locked_super+0xad/0x110 [ 352.853777][ T31] deactivate_super+0xbe/0xf0 [ 352.858312][ T31] cleanup_mnt+0x45c/0x510 [ 352.862537][ T31] __cleanup_mnt+0x19/0x20 [ 352.866969][ T31] task_work_run+0x129/0x190 [ 352.866999][ T31] exit_to_user_mode_loop+0xc4/0xe0 [ 352.867023][ T31] exit_to_user_mode_prepare+0x5a/0xa0 [ 352.867046][ T31] syscall_exit_to_user_mode+0x26/0x160 [ 352.867072][ T31] do_syscall_64+0x49/0xb0 [ 352.867094][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 352.867117][ T31] RIP: 0033:0x7f1377743f07 [ 352.867135][ T31] RSP: 002b:00007fff6e158098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 352.867160][ T31] RAX: 0000000000000000 RBX: 00007f13777b0515 RCX: 00007f1377743f07 [ 352.867176][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6e158150 [ 352.867191][ T31] RBP: 00007fff6e158150 R08: 0000000000000000 R09: 0000000000000000 [ 352.867205][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff6e159210 [ 352.867220][ T31] R13: 00007f13777b0515 R14: 000000000002ddb0 R15: 000000000002dcaf [ 352.867241][ T31] [ 352.867274][ T31] INFO: task syz-executor:4049 blocked for more than 165 seconds. [ 352.867290][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 352.867303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.867313][ T31] task:syz-executor state:D stack:21456 pid: 4049 ppid: 1 flags:0x00004004 [ 352.867356][ T31] Call Trace: [ 352.867362][ T31] [ 352.867370][ T31] __schedule+0xccc/0x1590 [ 352.867393][ T31] ? __sched_text_start+0x8/0x8 [ 352.867413][ T31] ? resched_curr+0x114/0x1c0 [ 352.867438][ T31] schedule+0x11f/0x1e0 [ 352.867460][ T31] schedule_timeout+0xa9/0x370 [ 352.867485][ T31] ? __this_cpu_preempt_check+0x13/0x20 [ 352.867510][ T31] ? tracing_record_taskinfo+0x7b/0x230 [ 352.867536][ T31] ? console_conditional_schedule+0x30/0x30 [ 352.867565][ T31] ? __prepare_to_swait+0xac/0x130 [ 352.867591][ T31] wait_for_common+0x285/0x420 [ 352.867617][ T31] ? wait_for_completion+0x20/0x20 [ 352.867644][ T31] ? wake_up_state+0xb/0x10 [ 352.867666][ T31] ? kthread_unpark+0x1a0/0x220 [ 352.867690][ T31] wait_for_completion+0x18/0x20 [ 352.867711][ T31] kthread_stop+0x107/0x410 [ 352.867732][ T31] ext4_stop_mmpd+0x47/0xb0 [ 352.867752][ T31] ext4_put_super+0x866/0xd20 [ 352.867779][ T31] ? ext4_drop_inode+0x1a0/0x1a0 [ 352.867801][ T31] generic_shutdown_super+0x157/0x2e0 [ 353.081092][ T31] kill_block_super+0x7e/0xe0 [ 353.085546][ T31] deactivate_locked_super+0xad/0x110 [ 353.090793][ T31] deactivate_super+0xbe/0xf0 [ 353.095258][ T31] cleanup_mnt+0x45c/0x510 [ 353.099585][ T31] __cleanup_mnt+0x19/0x20 [ 353.103761][ T31] task_work_run+0x129/0x190 [ 353.108297][ T31] exit_to_user_mode_loop+0xc4/0xe0 [ 353.113400][ T31] exit_to_user_mode_prepare+0x5a/0xa0 [ 353.118725][ T31] syscall_exit_to_user_mode+0x26/0x160 [ 353.124080][ T31] do_syscall_64+0x49/0xb0 [ 353.128361][ T31] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 353.134060][ T31] RIP: 0033:0x7f60af01af07 [ 353.138353][ T31] RSP: 002b:00007ffe01871348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 353.146569][ T31] RAX: 0000000000000000 RBX: 00007f60af087515 RCX: 00007f60af01af07 [ 353.154361][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe01871400 [ 353.162252][ T31] RBP: 00007ffe01871400 R08: 0000000000000000 R09: 0000000000000000 [ 353.170005][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe018724c0 [ 353.177811][ T31] R13: 00007f60af087515 R14: 000000000002d67a R15: 000000000002d5dc [ 353.185611][ T31] [ 353.190196][ T31] INFO: task kmmpd-loop0:5511 blocked for more than 166 seconds. [ 353.197819][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 353.205222][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.213791][ T31] task:kmmpd-loop0 state:D stack:27856 pid: 5511 ppid: 2 flags:0x00004000 [ 353.222993][ T31] Call Trace: [ 353.226105][ T31] [ 353.229240][ T31] __schedule+0xccc/0x1590 [ 353.233579][ T31] ? __sched_text_start+0x8/0x8 [ 353.238485][ T31] ? __kasan_check_write+0x14/0x20 [ 353.243494][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 353.248729][ T31] ? _raw_spin_lock_irqsave+0x210/0x210 [ 353.254430][ T31] schedule+0x11f/0x1e0 [ 353.258995][ T31] percpu_rwsem_wait+0x382/0x4b0 [ 353.267764][ T31] ? percpu_free_rwsem+0x80/0x80 [ 353.272767][ T31] ? percpu_rwsem_async_destroy+0xf0/0xf0 [ 353.278418][ T31] ? console_conditional_schedule+0x30/0x30 [ 353.286538][ T31] __percpu_down_read+0xd7/0x110 [ 353.291364][ T31] write_mmp_block+0x1c0/0x270 [ 353.295926][ T31] kmmpd+0x292/0xa30 [ 353.300495][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 353.305893][ T31] ? __kthread_parkme+0xb2/0x200 [ 353.311124][ T31] kthread+0x421/0x510 [ 353.315141][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 353.320595][ T31] ? kthread_blkcg+0xd0/0xd0 [ 353.324971][ T31] ret_from_fork+0x1f/0x30 [ 353.329239][ T31] [ 353.333692][ T31] INFO: task kmmpd-loop2:5562 blocked for more than 145 seconds. [ 353.341389][ T31] Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 353.348869][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 353.357541][ T31] task:kmmpd-loop2 state:D stack:27856 pid: 5562 ppid: 2 flags:0x00004000 [ 353.366752][ T31] Call Trace: [ 353.369865][ T31] [ 353.372647][ T31] __schedule+0xccc/0x1590 [ 353.376907][ T31] ? __sched_text_start+0x8/0x8 [ 353.381583][ T31] ? __kasan_check_write+0x14/0x20 [ 353.386554][ T31] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 353.391474][ T31] ? _raw_spin_lock_irqsave+0x210/0x210 [ 353.396878][ T31] schedule+0x11f/0x1e0 [ 353.400859][ T31] percpu_rwsem_wait+0x382/0x4b0 [ 353.405712][ T31] ? percpu_free_rwsem+0x80/0x80 [ 353.410602][ T31] ? percpu_rwsem_async_destroy+0xf0/0xf0 [ 353.416166][ T31] ? console_conditional_schedule+0x30/0x30 [ 353.421914][ T31] ? sched_clock+0x9/0x10 [ 353.426063][ T31] __percpu_down_read+0xd7/0x110 [ 353.430850][ T31] write_mmp_block+0x1c0/0x270 [ 353.435435][ T31] kmmpd+0x292/0xa30 [ 353.439197][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 353.444558][ T31] ? __kthread_parkme+0xb2/0x200 [ 353.449366][ T31] kthread+0x421/0x510 [ 353.453321][ T31] ? write_mmp_block_thawed+0x570/0x570 [ 353.458708][ T31] ? kthread_blkcg+0xd0/0xd0 [ 353.463123][ T31] ret_from_fork+0x1f/0x30 [ 353.467390][ T31] [ 353.472031][ T31] NMI backtrace for cpu 0 [ 353.476193][ T31] CPU: 0 PID: 31 Comm: khungtaskd Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 353.485736][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 353.495632][ T31] Call Trace: [ 353.498753][ T31] [ 353.501542][ T31] dump_stack_lvl+0x151/0x1b7 [ 353.506052][ T31] ? io_uring_drop_tctx_refs+0x190/0x190 [ 353.511518][ T31] dump_stack+0x15/0x17 [ 353.515536][ T31] nmi_cpu_backtrace+0x2f7/0x300 [ 353.520279][ T31] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 353.526267][ T31] ? __rcu_read_unlock+0xd0/0xd0 [ 353.531040][ T31] ? asm_sysvec_call_function_single+0x1b/0x20 [ 353.537028][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 353.542932][ T31] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 353.548746][ T31] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 353.554651][ T31] arch_trigger_cpumask_backtrace+0x10/0x20 [ 353.560379][ T31] watchdog+0xdd7/0xf50 [ 353.564369][ T31] ? __kasan_check_write+0x14/0x20 [ 353.569322][ T31] ? hungtask_pm_notify+0x50/0x50 [ 353.574175][ T31] ? __kasan_check_read+0x11/0x20 [ 353.579036][ T31] ? __kthread_parkme+0xb2/0x200 [ 353.583814][ T31] kthread+0x421/0x510 [ 353.587717][ T31] ? hungtask_pm_notify+0x50/0x50 [ 353.592607][ T31] ? kthread_blkcg+0xd0/0xd0 [ 353.597013][ T31] ret_from_fork+0x1f/0x30 [ 353.601261][ T31] [ 353.604293][ T31] Sending NMI from CPU 0 to CPUs 1: [ 353.609484][ C1] NMI backtrace for cpu 1 [ 353.609497][ C1] CPU: 1 PID: 10400 Comm: syz.3.3676 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 353.609518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 353.609529][ C1] RIP: 0010:__list_del_entry_valid+0xa9/0x120 [ 353.609557][ C1] Code: e8 dc cf 48 ff 49 8b 17 4c 39 f2 75 71 48 83 c3 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 ba cf 48 ff 48 8b 13 <4c> 39 f2 75 60 b0 01 5b 41 5c 41 5e 41 5f 5d c3 48 c7 c7 00 11 83 [ 353.609572][ C1] RSP: 0000:ffffc900011e7330 EFLAGS: 00000046 [ 353.609589][ C1] RAX: 1ffffd40009abe3a RBX: ffffea0004d5f1d0 RCX: 7a441626c990cd00 [ 353.609603][ C1] RDX: ffffea0004d51908 RSI: 0000000000000000 RDI: ffffea0004d51910 [ 353.609617][ C1] RBP: ffffc900011e7350 R08: 0000000000000901 R09: 0000000000000003 [ 353.609629][ C1] R10: fffff5200023ce5c R11: dffffc0000000001 R12: dffffc0000000000 [ 353.609642][ C1] R13: dffffc0000000000 R14: ffffea0004d51908 R15: ffff8881f713c580 [ 353.609656][ C1] FS: 0000555556804500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 353.609673][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.609685][ C1] CR2: 00007f1c58b1d0a0 CR3: 000000011f36b000 CR4: 00000000003506a0 [ 353.609701][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 353.609712][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 353.609723][ C1] Call Trace: [ 353.609729][ C1] [ 353.609735][ C1] ? show_regs+0x58/0x60 [ 353.609754][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 353.609775][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 353.609797][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.609816][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.609835][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 353.609858][ C1] ? nmi_handle+0xa8/0x280 [ 353.609876][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.609895][ C1] ? default_do_nmi+0x69/0x160 [ 353.609915][ C1] ? exc_nmi+0xaf/0x120 [ 353.609932][ C1] ? end_repeat_nmi+0x16/0x31 [ 353.609952][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.609971][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.609991][ C1] ? __list_del_entry_valid+0xa9/0x120 [ 353.610010][ C1] [ 353.610016][ C1] [ 353.610022][ C1] get_page_from_freelist+0x644/0x35d0 [ 353.610042][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 353.610067][ C1] ? __schedule+0xcd4/0x1590 [ 353.610087][ C1] ? lruvec_init+0x150/0x150 [ 353.610108][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 353.610127][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 353.610145][ C1] ? hrtimer_try_to_cancel+0x302/0x320 [ 353.610165][ C1] __alloc_pages+0x27e/0x8f0 [ 353.610184][ C1] ? prep_new_page+0x110/0x110 [ 353.610205][ C1] ? do_futex+0x37f0/0x37f0 [ 353.610225][ C1] wp_page_copy+0x200/0x1b00 [ 353.610247][ C1] ? __kasan_check_write+0x14/0x20 [ 353.610266][ C1] ? insert_page_into_pte_locked+0x4e0/0x4e0 [ 353.610285][ C1] ? unlock_page_memcg+0x146/0x160 [ 353.610309][ C1] ? __set_page_dirty_buffers+0x209/0x310 [ 353.610333][ C1] ? __pte_map_lock+0x559/0x620 [ 353.610351][ C1] do_wp_page+0x6fa/0xb60 [ 353.610369][ C1] handle_pte_fault+0x7c0/0x24d0 [ 353.610388][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 353.610407][ C1] ? fault_around_bytes_set+0xc0/0xc0 [ 353.610426][ C1] ? do_handle_mm_fault+0x1578/0x23a0 [ 353.610444][ C1] ? memcpy+0x56/0x70 [ 353.610461][ C1] do_handle_mm_fault+0x1ea9/0x23a0 [ 353.610483][ C1] ? numa_migrate_prep+0xe0/0xe0 [ 353.610500][ C1] ? down_read+0xa9b/0x1360 [ 353.610519][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 353.610535][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 353.610552][ C1] ? __kasan_check_write+0x14/0x20 [ 353.610572][ C1] ? get_timespec64+0x197/0x270 [ 353.610593][ C1] ? debug_smp_processor_id+0x17/0x20 [ 353.610612][ C1] ? exc_page_fault+0x222/0x830 [ 353.610630][ C1] ? access_error+0x246/0x270 [ 353.610651][ C1] exc_page_fault+0x26f/0x830 [ 353.610676][ C1] asm_exc_page_fault+0x27/0x30 [ 353.610692][ C1] RIP: 0033:0x7f1c588664a5 [ 353.610706][ C1] Code: 00 00 00 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ab 00 00 00 48 c1 e2 04 48 8d 0d fe 6b 2b 00 48 01 ca 02 01 48 89 42 08 49 8d 6c 24 10 4c 8d 2d e8 6b 2b 00 0f 1f 84 [ 353.610720][ C1] RSP: 002b:00007ffd1f5357c0 EFLAGS: 00010206 [ 353.610734][ C1] RAX: 000000000000025d RBX: 0000000000056560 RCX: 00007f1c58b1d0a0 [ 353.610745][ C1] RDX: 00007f1c58b1d0a0 RSI: 0000000000000080 RDI: 00007f1c58b20f60 [ 353.610758][ C1] RBP: 000000000005652e R08: 00007ffd1f5a60b0 R09: 000000031f535b1f [ 353.610770][ C1] R10: 00007ffd1f5358e0 R11: 0000000000000246 R12: 00007f1c58b20f60 [ 353.610781][ C1] R13: 0000000000000032 R14: 00007f1c58b20f60 R15: 00007f1c58b20f60 [ 353.610797][ C1] [ 354.237565][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.249609][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.267291][T10412] device bridge_slave_0 entered promiscuous mode [ 354.274671][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.286572][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.294113][T10412] device bridge_slave_1 entered promiscuous mode [ 354.390209][T10412] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.397213][T10412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.404364][T10412] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.411259][T10412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.465108][T10428] fuse: Bad value for 'fd' [ 354.478916][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.495182][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.525179][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 354.541843][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.559335][T10433] netlink: 'syz.1.3687': attribute type 4 has an invalid length. [ 354.568516][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.581112][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.588033][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.596988][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.605434][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.612340][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.629066][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.637271][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.656837][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.671236][T10412] device veth0_vlan entered promiscuous mode [ 354.678634][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.687278][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.694652][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.709374][T10412] device veth1_macvtap entered promiscuous mode [ 354.718586][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.730702][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.743873][ T1080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.876593][ T6157] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 355.166904][ T6157] usb 2-1: Using ep0 maxpacket: 32 [ 355.286632][ T2357] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 355.316730][ T6157] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.327636][ T6157] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.506732][ T6157] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 355.515658][ T6157] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 355.523876][ T6157] usb 2-1: Product: syz [ 355.527886][ T6157] usb 2-1: Manufacturer: syz [ 355.546713][ T2357] usb 3-1: Using ep0 maxpacket: 16 [ 355.567383][ T6157] hub 2-1:4.0: USB hub found [ 355.776751][ T6157] hub 2-1:4.0: 2 ports detected [ 355.856949][ T2357] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 355.878573][ T2357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.901557][ T2357] usb 3-1: Product: syz [ 355.905781][ T2357] usb 3-1: Manufacturer: syz [ 355.925068][ T2357] usb 3-1: SerialNumber: syz [ 355.968371][ T2357] r8152-cfgselector 3-1: config 0 descriptor?? [ 356.087287][ T6157] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 356.110104][ T6157] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 356.219416][ T6157] usb 2-1: USB disconnect, device number 36 [ 356.466675][ T2357] r8152-cfgselector 3-1: Unknown version 0x0000 [ 356.473697][ T2357] r8152-cfgselector 3-1: bad CDC descriptors [ 356.496781][ T2357] r8152-cfgselector 3-1: Unknown version 0x0000 [ 356.760139][ T2357] r8152-cfgselector 3-1: USB disconnect, device number 29 [ 357.412024][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 357.412041][ T30] audit: type=1400 audit(2000000196.804:10260): avc: denied { watch } for pid=10482 comm="syz.4.3705" path="/10/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 357.470799][ T30] audit: type=1400 audit(2000000196.864:10261): avc: denied { unmount } for pid=10412 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 357.999038][T10497] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.005987][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.014842][T10497] device bridge_slave_0 entered promiscuous mode [ 358.023115][T10497] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.030447][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.041126][T10497] device bridge_slave_1 entered promiscuous mode [ 358.245638][ T30] audit: type=1326 audit(2000000197.474:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.453821][ T30] audit: type=1326 audit(2000000197.474:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.481583][ T30] audit: type=1326 audit(2000000197.484:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.505222][ T20] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 358.553271][ T30] audit: type=1326 audit(2000000197.484:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.630386][ T30] audit: type=1326 audit(2000000197.484:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.665839][ T30] audit: type=1326 audit(2000000197.484:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.688045][T10497] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.696107][T10497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.703209][T10497] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.706560][ T30] audit: type=1326 audit(2000000197.484:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.709977][T10497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.741996][ T30] audit: type=1326 audit(2000000197.494:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10503 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a5e86bbd9 code=0x7ffc0000 [ 358.767287][ T2357] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.774631][ T2357] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.119143][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 359.127913][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.164679][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.166719][ T20] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 359.173350][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.190901][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.195701][ T20] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 359.197790][T10359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.199025][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.232942][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.242709][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.249623][T10359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.276843][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.285137][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.307417][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.315893][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.336935][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 359.347433][ T8137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 359.362716][T10497] device veth0_vlan entered promiscuous mode [ 359.371894][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.379662][ T20] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 359.392100][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.399722][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.408397][ T20] usb 5-1: Product: syz [ 359.412506][ T20] usb 5-1: Manufacturer: syz [ 359.417048][ T20] usb 5-1: SerialNumber: syz [ 359.439594][T10497] device veth1_macvtap entered promiscuous mode [ 359.477730][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.485248][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.492910][ T20] usb 5-1: config 0 descriptor?? [ 359.498559][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.509342][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.517582][T10496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.524375][T10496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 359.531610][T10530] syz.0.3710[10530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.531694][T10530] syz.0.3710[10530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.531927][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 359.567825][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.576081][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.587277][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.595647][ T4713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.642782][ T63] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 359.678263][ T562] device bridge_slave_1 left promiscuous mode [ 359.684450][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.692667][ T562] device bridge_slave_0 left promiscuous mode [ 359.699310][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.707692][ T562] device veth1_macvtap left promiscuous mode [ 359.713631][ T562] device veth0_vlan left promiscuous mode [ 360.103797][T10496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 360.124385][T10496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 360.437042][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 360.886618][ T6157] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 360.913338][ T20] Error reading MAC address [ 360.920543][ T20] usb 5-1: USB disconnect, device number 38 [ 360.996855][ T63] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 361.011832][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.020231][ T63] usb 2-1: Product: syz [ 361.024295][ T63] usb 2-1: Manufacturer: syz [ 361.029048][ T63] usb 2-1: SerialNumber: syz [ 361.034657][ T63] r8152-cfgselector 2-1: config 0 descriptor?? [ 361.163119][T10575] binder: 10565:10575 ioctl c0306201 200003c0 returned -14 [ 361.256591][ T6157] usb 4-1: Using ep0 maxpacket: 32 [ 361.386647][ T6157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 361.398097][ T6157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 361.419338][ T6157] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 361.429722][ T6157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.438460][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3742'. [ 361.456935][ T6157] usb 4-1: config 0 descriptor?? [ 361.477136][T10562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 361.497317][ T6157] hub 4-1:0.0: USB hub found [ 361.530652][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 361.564763][ T63] r8152-cfgselector 2-1: bad CDC descriptors [ 361.996619][ T63] r8152-cfgselector 2-1: Unknown version 0x0000 [ 362.010292][ T63] r8152-cfgselector 2-1: USB disconnect, device number 37 [ 362.026718][ T6157] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 362.353408][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3755'. [ 362.416656][ T6157] usbhid 4-1:0.0: can't add hid device: -71 [ 362.422497][ T6157] usbhid: probe of 4-1:0.0 failed with error -71 [ 362.457001][ T6157] usb 4-1: USB disconnect, device number 28 [ 362.776611][ T63] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 363.157207][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 363.157246][ T30] audit: type=1326 audit(2000000202.274:10309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.195035][ T30] audit: type=1326 audit(2000000202.274:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.225777][ T30] audit: type=1326 audit(2000000202.284:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.262013][ T30] audit: type=1326 audit(2000000202.284:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.286184][ T30] audit: type=1326 audit(2000000202.284:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.310317][ T30] audit: type=1326 audit(2000000202.284:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.336216][ T30] audit: type=1326 audit(2000000202.284:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.368666][ T30] audit: type=1326 audit(2000000202.284:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.392245][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 363.399125][ T30] audit: type=1326 audit(2000000202.284:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.423736][ T30] audit: type=1326 audit(2000000202.294:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10650 comm="syz.4.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 363.896694][ T63] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 363.905622][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.913810][ T63] usb 3-1: Product: syz [ 364.145359][ T63] usb 3-1: Manufacturer: syz [ 364.149972][ T63] usb 3-1: SerialNumber: syz [ 364.155303][ T63] r8152-cfgselector 3-1: config 0 descriptor?? [ 364.244692][T10681] device syzkaller0 entered promiscuous mode [ 365.050225][T10709] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 365.060937][T10709] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22 [ 365.073026][T10709] 9pnet: Insufficient options for proto=fd [ 365.136622][ T63] r8152-cfgselector 3-1: Unknown version 0x0000 [ 365.142813][ T63] r8152-cfgselector 3-1: bad CDC descriptors [ 365.166720][ T63] r8152-cfgselector 3-1: Unknown version 0x0000 [ 365.184594][ T63] r8152-cfgselector 3-1: USB disconnect, device number 30 [ 365.696617][ T6850] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 365.923467][T10747] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 365.939947][ T6850] usb 5-1: Using ep0 maxpacket: 32 [ 367.397506][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 367.486711][ T6850] usb 5-1: New USB device found, idVendor=0403, idProduct=da74, bcdDevice= 9.28 [ 367.495835][ T6850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.503707][ T6850] usb 5-1: Product: syz [ 367.507697][ T6850] usb 5-1: Manufacturer: syz [ 367.512069][ T6850] usb 5-1: SerialNumber: syz [ 367.525842][ T6850] usb 5-1: config 0 descriptor?? [ 367.567462][ T6850] usb 5-1: NDI device with a latency value of 1 [ 367.646572][ T311] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 367.828228][ T6850] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 367.835992][ T6850] usb 5-1: Detected FT232H [ 367.856613][ T6850] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 367.876640][ T6850] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 367.896652][ T6850] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 367.903575][ T6850] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 367.914012][ T6850] usb 5-1: USB disconnect, device number 39 [ 367.918221][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 367.922329][ T6850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 367.934141][ T6850] ftdi_sio 5-1:0.0: device disconnected [ 368.266699][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 368.276480][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.288158][ T311] usb 4-1: Product: syz [ 368.292151][ T311] usb 4-1: Manufacturer: syz [ 368.296876][ T311] usb 4-1: SerialNumber: syz [ 368.306737][ T311] r8152-cfgselector 4-1: config 0 descriptor?? [ 369.082141][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 369.082233][ T30] audit: type=1326 audit(2000000207.834:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.260496][ T30] audit: type=1326 audit(2000000207.834:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.294574][ T30] audit: type=1326 audit(2000000207.834:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.347014][ T30] audit: type=1326 audit(2000000207.834:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.371827][ T30] audit: type=1326 audit(2000000207.834:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.376715][ T311] r8152-cfgselector 4-1: Unknown version 0x0000 [ 369.401269][ T30] audit: type=1326 audit(2000000207.834:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.404196][ T311] r8152-cfgselector 4-1: bad CDC descriptors [ 369.429497][ T30] audit: type=1326 audit(2000000207.834:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.456584][ T30] audit: type=1326 audit(2000000207.834:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.489237][ T311] r8152-cfgselector 4-1: Unknown version 0x0000 [ 369.497071][ T30] audit: type=1326 audit(2000000207.844:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.521549][ T311] r8152-cfgselector 4-1: USB disconnect, device number 29 [ 369.529599][ T30] audit: type=1326 audit(2000000207.844:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10783 comm="syz.4.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472f5b9bd9 code=0x7ffc0000 [ 369.950625][T10816] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 369.961335][T10816] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22 [ 369.973217][T10816] 9pnet: Insufficient options for proto=fd [ 370.396585][ T311] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 370.647099][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 370.997112][ T311] usb 4-1: New USB device found, idVendor=0403, idProduct=da74, bcdDevice= 9.28 [ 371.006237][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.018779][ T311] usb 4-1: Product: syz [ 371.022907][ T311] usb 4-1: Manufacturer: syz [ 371.028924][ T311] usb 4-1: SerialNumber: syz [ 371.036459][ T311] usb 4-1: config 0 descriptor?? [ 371.080088][ T311] usb 4-1: NDI device with a latency value of 1 [ 371.286625][ T311] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 371.294813][ T311] usb 4-1: Detected FT232H [ 371.333559][ T311] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 371.391890][ T311] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 371.416633][ T311] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 371.423956][ T311] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 371.433737][ T311] usb 4-1: USB disconnect, device number 30 [ 371.440836][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 371.450234][ T311] ftdi_sio 4-1:0.0: device disconnected [ 372.005270][T10854] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3846'. [ 373.471403][T10920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10920 comm=syz.2.3873 [ 375.023345][T10965] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3890'. [ 375.073084][T10974] raw_sendmsg: syz.2.3893 forgot to set AF_INET. Fix it! [ 375.157227][T10978] tmpfs: Unknown parameter 'uid>00000000000000016832' [ 375.241461][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 375.241478][ T30] audit: type=1107 audit(2000000214.634:10391): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 375.336087][T10983] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 375.343929][T10983] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 375.559307][ T30] audit: type=1107 audit(2000000214.954:10392): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 376.739208][ T30] audit: type=1107 audit(2000000216.134:10393): pid=11041 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 377.001595][ T30] audit: type=1326 audit(2000000216.304:10394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.034736][ T30] audit: type=1326 audit(2000000216.304:10395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.059981][ T30] audit: type=1326 audit(2000000216.304:10396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.066619][T10115] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 377.083845][ T30] audit: type=1326 audit(2000000216.304:10397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.115348][ T30] audit: type=1326 audit(2000000216.304:10398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.146634][ T30] audit: type=1326 audit(2000000216.304:10399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.186609][ T30] audit: type=1326 audit(2000000216.304:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.2.3913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc852bd9 code=0x7ffc0000 [ 377.351707][T11070] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 377.392787][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.413160][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.447213][T11063] device bridge_slave_0 entered promiscuous mode [ 377.481164][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.496695][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.504442][T11063] device bridge_slave_1 entered promiscuous mode [ 377.536658][T10115] usb 4-1: unable to get BOS descriptor set [ 377.590252][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.597185][T11063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.604256][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.611056][T11063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.638368][T10115] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 377.646465][T10115] usb 4-1: config 0 has no interface number 0 [ 377.660788][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.667228][T11080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 377.677482][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.685287][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.692889][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 377.708358][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 377.717259][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.724134][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.724389][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.739779][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.746667][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.767663][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.782308][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.806977][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.824196][T11063] device veth0_vlan entered promiscuous mode [ 377.832352][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.842597][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.846706][T10115] usb 4-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=22.e3 [ 377.850509][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.863425][T10115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.875159][T10115] usb 4-1: Product: syz [ 377.879461][T10115] usb 4-1: Manufacturer: syz [ 377.879703][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.883924][T10115] usb 4-1: SerialNumber: syz [ 377.894271][T11063] device veth1_macvtap entered promiscuous mode [ 377.902027][T10115] usb 4-1: config 0 descriptor?? [ 377.911671][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.924444][ T6157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 377.947283][T10115] usb-storage 4-1:0.235: USB Mass Storage device detected [ 377.960570][T11096] device batadv_slave_0 entered promiscuous mode [ 377.962162][T10115] usb-storage 4-1:0.235: Quirks match for vid 0421 pid 0492: 400 [ 378.225631][T10115] usb 4-1: USB disconnect, device number 31 [ 378.931175][T11173] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 378.952809][T11177] input: syz0 as /devices/virtual/input/input46 [ 379.011699][T11187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3977'. [ 379.048744][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3981'. [ 379.058322][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3981'. [ 379.085685][T11201] input: syz0 as /devices/virtual/input/input47 [ 379.089851][T11199] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 379.238754][T11218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3992'. [ 379.272097][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'. [ 379.281096][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'. [ 379.325343][T11228] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 379.425508][ T6157] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 379.926641][ T6157] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.936194][ T6157] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 379.945647][ T6157] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 379.955228][ T6157] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 380.038519][T11246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4004'. [ 380.176665][ T6157] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 380.185670][ T6157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.193958][ T6157] usb 2-1: Product: syz [ 380.198571][ T6157] usb 2-1: Manufacturer: syz [ 380.203160][ T6157] usb 2-1: SerialNumber: syz [ 380.435585][T11273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4016'. [ 380.557516][ T6157] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 380.616633][ T20] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 380.758703][ T6157] usb 2-1: USB disconnect, device number 38 [ 380.765411][ T6157] usblp0: removed [ 380.856646][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 380.986719][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.997470][ T20] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.007293][ T20] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.176712][ T20] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 381.185597][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.193436][ T20] usb 4-1: Product: syz [ 381.197410][ T20] usb 4-1: Manufacturer: syz [ 381.201796][ T20] usb 4-1: SerialNumber: syz [ 381.596757][ T20] usbhid 4-1:1.0: can't add hid device: -22 [ 381.602558][ T20] usbhid: probe of 4-1:1.0 failed with error -22 [ 381.609730][ T20] usb 4-1: USB disconnect, device number 32 [ 382.223685][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 382.223704][ T30] audit: type=1400 audit(2000000221.614:10416): avc: denied { link } for pid=11333 comm="syz.3.4044" name="#81" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.252470][ T30] audit: type=1400 audit(2000000221.614:10417): avc: denied { rename } for pid=11333 comm="syz.3.4044" name="#82" dev="tmpfs" ino=1811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 382.520326][T11350] hub 6-0:1.0: USB hub found [ 382.526021][T11350] hub 6-0:1.0: 1 port detected [ 382.936472][ T30] audit: type=1400 audit(2000000222.324:10418): avc: denied { shutdown } for pid=11361 comm="syz.1.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.965941][ T30] audit: type=1107 audit(2000000222.354:10419): pid=11363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 383.019388][ T30] audit: type=1404 audit(2000000222.414:10420): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 383.035323][ T30] audit: type=1404 audit(2000000222.434:10421): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 383.060103][ T30] audit: type=1400 audit(2000000222.454:10422): avc: denied { read } for pid=11371 comm="syz.1.4060" dev="nsfs" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 383.082025][ T30] audit: type=1400 audit(2000000222.454:10423): avc: denied { open } for pid=11371 comm="syz.1.4060" path="net:[4026533484]" dev="nsfs" ino=4026533484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 383.105696][ T30] audit: type=1400 audit(2000000222.454:10424): avc: denied { create } for pid=11371 comm="syz.1.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 383.126073][ T30] audit: type=1400 audit(2000000222.454:10425): avc: denied { map_create } for pid=11371 comm="syz.1.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 383.899578][ T20] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 384.416630][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 384.546703][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.557424][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.566993][ T20] usb 2-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 384.575790][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.411009][ T20] usb 2-1: config 0 descriptor?? [ 386.009082][ T20] wacom 0003:056A:0028.003A: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 386.019538][ T20] wacom 0003:056A:0028.003A: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.1-1/input0 [ 386.032193][ T20] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0028.003A/input/input48 [ 386.210831][ T20] usb 2-1: USB disconnect, device number 39 [ 387.275246][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 387.275265][ T30] audit: type=1400 audit(2000000226.664:10550): avc: denied { read write } for pid=11458 comm="syz.3.4091" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.305405][ T30] audit: type=1400 audit(2000000226.664:10551): avc: denied { open } for pid=11458 comm="syz.3.4091" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.328920][ T30] audit: type=1400 audit(2000000226.664:10552): avc: denied { setopt } for pid=11456 comm="syz.1.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.576605][ T39] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 387.826622][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 388.056200][ T30] audit: type=1400 audit(2000000227.444:10553): avc: denied { mounton } for pid=11467 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 388.080383][ T30] audit: type=1400 audit(2000000227.464:10554): avc: denied { mount } for pid=11467 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 388.103007][ T30] audit: type=1400 audit(2000000227.464:10555): avc: denied { read } for pid=11467 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.124773][ T39] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 388.125220][ T30] audit: type=1400 audit(2000000227.464:10556): avc: denied { open } for pid=11467 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 388.133694][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.133719][ T39] usb 4-1: Product: syz [ 388.157656][ T30] audit: type=1400 audit(2000000227.464:10557): avc: denied { mounton } for pid=11467 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 388.172802][ T39] usb 4-1: Manufacturer: syz [ 388.195140][ T39] usb 4-1: SerialNumber: syz [ 388.207277][ T39] usb 4-1: config 0 descriptor?? [ 388.249090][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.255941][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.263856][T11467] device bridge_slave_0 entered promiscuous mode [ 388.273519][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.280604][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.287984][T11467] device bridge_slave_1 entered promiscuous mode [ 388.344494][T11467] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.351365][T11467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.358509][T11467] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.365384][T11467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.372923][ T26] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 388.400191][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.407897][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.415713][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.428505][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.436814][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.443653][T10359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.453472][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.461626][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.468496][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.488200][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.496162][T10115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.515536][T10359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.529987][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.538539][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.546043][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.554801][T11467] device veth0_vlan entered promiscuous mode [ 388.562521][ T8] device bridge_slave_1 left promiscuous mode [ 388.568693][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.576120][ T8] device bridge_slave_0 left promiscuous mode [ 388.582382][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.590567][ T8] device veth1_macvtap left promiscuous mode [ 388.646712][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 388.654433][ T30] audit: type=1400 audit(2000000228.044:10558): avc: denied { confidentiality } for pid=11458 comm="syz.3.4091" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 388.679557][ T30] audit: type=1400 audit(2000000228.044:10559): avc: denied { name_bind } for pid=11458 comm="syz.3.4091" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 388.786306][T11467] device veth1_macvtap entered promiscuous mode [ 388.795520][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 388.803706][ T26] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 388.814285][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.823353][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 388.827379][ T26] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 388.835978][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.844542][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.860977][ T26] usb 2-1: config 0 descriptor?? [ 388.907106][ T26] usb 2-1: bad CDC descriptors [ 389.112792][ T26] usb 2-1: USB disconnect, device number 40 [ 389.146691][ T39] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:a6:29:4c:d2:46 [ 389.158438][ T39] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 389.169374][ T39] usb 4-1: USB disconnect, device number 33 [ 392.293631][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 392.293670][ T30] audit: type=1400 audit(2000000231.634:10592): avc: denied { block_suspend } for pid=11554 comm="syz.2.4113" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.336316][ T30] audit: type=1400 audit(2000000231.674:10593): avc: denied { setopt } for pid=11554 comm="syz.2.4113" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.365724][ T30] audit: type=1400 audit(2000000231.684:10594): avc: denied { connect } for pid=11554 comm="syz.2.4113" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 392.456569][ T4713] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 392.696600][ T4713] usb 2-1: Using ep0 maxpacket: 32 [ 392.816657][ T4713] usb 2-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 392.826830][ T4713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 392.839710][ T4713] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 392.848597][ T4713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.857171][ T4713] usb 2-1: config 0 descriptor?? [ 392.926993][ T4713] usb 2-1: bad CDC descriptors [ 393.102152][ T4713] usb 2-1: USB disconnect, device number 41 [ 393.299315][ T30] audit: type=1400 audit(2000000232.694:10595): avc: denied { read write } for pid=11563 comm="syz.0.4115" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 393.323967][ T26] hid-generic 0000:0000:0000.003B: item fetching failed at offset 0/1 [ 393.333972][ T26] hid-generic: probe of 0000:0000:0000.003B failed with error -22 [ 393.336739][ T30] audit: type=1400 audit(2000000232.694:10596): avc: denied { open } for pid=11563 comm="syz.0.4115" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 394.678710][ T30] audit: type=1400 audit(2000000234.074:10597): avc: denied { write } for pid=11578 comm="syz.2.4120" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.727617][ T30] audit: type=1400 audit(2000000234.074:10598): avc: denied { add_name } for pid=11578 comm="syz.2.4120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 394.748852][ T30] audit: type=1400 audit(2000000234.074:10599): avc: denied { create } for pid=11578 comm="syz.2.4120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 394.781086][ T30] audit: type=1400 audit(2000000234.074:10600): avc: denied { associate } for pid=11578 comm="syz.2.4120" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 396.139406][ T30] audit: type=1400 audit(2000000235.534:10601): avc: denied { create } for pid=11592 comm="syz.1.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 396.164863][T11593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4126'. [ 397.712863][ T4713] hid-generic 0000:0000:0000.003C: item fetching failed at offset 0/1 [ 397.731381][ T4713] hid-generic: probe of 0000:0000:0000.003C failed with error -22 [ 397.983155][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 397.983174][ T30] audit: type=1400 audit(2000000237.374:10604): avc: denied { remount } for pid=11609 comm="syz.2.4131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 398.016595][ T6850] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 398.256607][ T6850] usb 4-1: Using ep0 maxpacket: 32 [ 398.376713][ T6850] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 398.386840][ T6850] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.399537][ T6850] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 398.408331][ T6850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.417289][ T6850] usb 4-1: config 0 descriptor?? [ 398.457246][ T6850] usb 4-1: bad CDC descriptors [ 398.660859][ T6850] usb 4-1: USB disconnect, device number 34 [ 401.238410][ T30] audit: type=1400 audit(2000000240.634:10605): avc: denied { write } for pid=11644 comm="syz.3.4144" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.261586][ T30] audit: type=1326 audit(2000000240.654:10606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11644 comm="syz.3.4144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c58992bd9 code=0x0 [ 405.266609][ T6850] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 405.546605][ T6850] usb 4-1: Using ep0 maxpacket: 32 [ 405.676674][ T6850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.687491][ T6850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.697116][ T6850] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 405.705902][ T6850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.714861][ T6850] usb 4-1: config 0 descriptor?? [ 406.199217][ T6850] lua 0003:1E7D:2C2E.003D: item fetching failed at offset 5/7 [ 406.206722][ T6850] lua 0003:1E7D:2C2E.003D: parse failed [ 406.212095][ T6850] lua: probe of 0003:1E7D:2C2E.003D failed with error -22 [ 406.399759][ T6850] usb 4-1: USB disconnect, device number 35 [ 407.063660][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4162'. SYZFAIL: netlink_send_ext: short netlink write wrote=-1, want=60 (errno 13: Permission denied) loop exited with status 67 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=4 req=4076 state=1 status=1 (errno 9: Bad file descriptor) [ 407.116681][ T30] audit: type=1400 audit(2000000246.504:10607): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[13431]" dev="pipefs" ino=13431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 407.210982][ T30] audit: type=1400 audit(2000000246.604:10608): avc: denied { map } for pid=11702 comm="syz.2.4166" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 408.497685][ T416] device bridge_slave_1 left promiscuous mode [ 408.503873][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.511655][ T416] device bridge_slave_0 left promiscuous mode [ 408.518029][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.526046][ T416] device bridge_slave_1 left promiscuous mode [ 408.532029][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.539504][ T416] device bridge_slave_0 left promiscuous mode [ 408.545437][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.553617][ T416] device bridge_slave_1 left promiscuous mode [ 408.559646][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.567116][ T416] device bridge_slave_0 left promiscuous mode [ 408.573063][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.581742][ T416] device veth1_macvtap left promiscuous mode [ 408.587604][ T416] device veth0_vlan left promiscuous mode [ 408.593393][ T416] device veth1_macvtap left promiscuous mode [ 408.599323][ T416] device veth0_vlan left promiscuous mode [ 408.605205][ T416] device veth1_macvtap left promiscuous mode [ 408.611073][ T416] device veth0_vlan left promiscuous mode