last executing test programs: 8m46.044745721s ago: executing program 0 (id=2496): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x287}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x20000400) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 8m34.722352879s ago: executing program 0 (id=2498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, '\x00'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) 8m33.995561128s ago: executing program 0 (id=2499): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000380)=ANY=[], 0x0) 8m33.645553661s ago: executing program 0 (id=2500): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000021c0)={0x0, 0x0, 0x0}, 0x200008c4) 8m33.37134859s ago: executing program 0 (id=2501): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r3, 0x0, r2, 0x0, 0xffffffffffff7fff, 0x9) 8m32.675381846s ago: executing program 0 (id=2502): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 7m47.482571624s ago: executing program 32 (id=2502): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 6m58.406475653s ago: executing program 2 (id=2574): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4bfb, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 6m58.202014037s ago: executing program 2 (id=2575): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) 6m57.612163477s ago: executing program 2 (id=2576): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0)) 6m56.680439171s ago: executing program 2 (id=2577): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000240)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000", 0xc2}], 0x1) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 6m55.827641219s ago: executing program 2 (id=2578): r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000380)=ANY=[], 0x0) 6m54.801554819s ago: executing program 2 (id=2580): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, r7, r3}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) 6m9.525224039s ago: executing program 33 (id=2580): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x2, 0x2, 0x0, {0x0, r7, r3}}) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) 5m46.125093001s ago: executing program 1 (id=2660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="7e588fccbda9e447e7fe5f7b4e4342", 0x300010, 0x841, 0x0, 0x60) 5m45.601895836s ago: executing program 1 (id=2661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 5m44.484800902s ago: executing program 1 (id=2662): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m44.314650104s ago: executing program 1 (id=2663): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) 5m44.162817874s ago: executing program 1 (id=2664): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000000)="7e588fccbda9e447e7fe5f7b4e4342", 0x300010, 0x841, 0x0, 0x60) 5m44.006207155s ago: executing program 1 (id=2665): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5m6.334720268s ago: executing program 3 (id=2713): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x93) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000300)=0x4000000000, 0x12) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000844) 5m6.034758598s ago: executing program 3 (id=2714): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x9}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 5m4.793768283s ago: executing program 3 (id=2715): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) wait4(0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m0.505668924s ago: executing program 3 (id=2716): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x4, 0x6, 0x12, 0x7, 0xff, 0x6}) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) 5m0.416495581s ago: executing program 3 (id=2717): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m58.381205479s ago: executing program 34 (id=2665): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m57.795202139s ago: executing program 3 (id=2719): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4m32.966181908s ago: executing program 4 (id=2718): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000094b4f562defb5f7756b4cb"], 0x48) 4m32.715166735s ago: executing program 4 (id=2720): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) 4m32.127717855s ago: executing program 4 (id=2721): r0 = socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 4m12.317067703s ago: executing program 35 (id=2719): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3m47.069071341s ago: executing program 36 (id=2721): r0 = socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) 38.666340159s ago: executing program 6 (id=3049): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/215, &(0x7f0000000100)=0xd7) 38.553729857s ago: executing program 6 (id=3050): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000340)={0x1, 0xd937c5614f14216, 0x1000, 0x1, &(0x7f0000000140)="94", 0x2, 0x0, &(0x7f0000000280)="1425"}) 35.912685747s ago: executing program 6 (id=3061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 35.633508526s ago: executing program 6 (id=3063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/firmware/fdt', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 29.801415002s ago: executing program 5 (id=3070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0}}, 0x40) 28.864533616s ago: executing program 5 (id=3071): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393", 0x36}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d7991", 0x8c}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e1", 0x2c}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a", 0xc0}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755c", 0x76}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb2", 0x65}], 0x2}}], 0x2, 0x2090) 28.267894577s ago: executing program 5 (id=3072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 11.3237381s ago: executing program 6 (id=3073): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, 0x0}) 10.976433673s ago: executing program 6 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0xb, 0x0, &(0x7f0000000280)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.085994102s ago: executing program 5 (id=3075): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140000001f000103000000000000000001"], 0x114}], 0x1}, 0x0) dup(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 8.865373647s ago: executing program 5 (id=3076): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000540)={'sit0\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1ff) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 0s ago: executing program 5 (id=3077): r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x8001, 0x0, 0x1, 0x0, 0x1, 0x1, 0x4, 0xb, 0x5c, 0xfd, 0x1002, 0x8, 0xb, 0x800, 0x6, 0xffffffff, 0x3, 0x400, 0x2, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0x7, 0x10000008, 0xf, 0x8, 0x4, 0xfffe, 0xfffffff8]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$COMEDI_SETRSUBD(r3, 0x6410) r4 = socket(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000004) getsockname$llc(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x1, [0x2, 0x2000005f, 0x0, 0x9, 0x10, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000080)=ANY=[]}, 0x50) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) kernel console output (not intermixed with test programs): 1041.356709][ T2873] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1041.357030][ T2873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.357373][ T2873] usb 2-1: Product: syz [ 1041.357423][ T2873] usb 2-1: Manufacturer: syz [ 1041.357599][ T2873] usb 2-1: SerialNumber: syz [ 1041.614534][ T2873] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1041.641995][ T2873] usb 2-1: USB disconnect, device number 13 [ 1041.647580][ T2873] usblp0: removed [ 1042.229410][T10583] binder: 10582:10583 ioctl 400c620e 20000100 returned -22 [ 1042.717455][T10065] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1042.719586][ T3035] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1042.873952][T10065] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1042.898807][ T3035] usb 1-1: config 4 has an invalid interface number: 28 but max is 0 [ 1042.903860][ T3035] usb 1-1: config 4 has no interface number 0 [ 1042.912362][T10065] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1042.912759][T10065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.913036][T10065] usb 2-1: Product: syz [ 1042.913213][T10065] usb 2-1: Manufacturer: syz [ 1042.913262][T10065] usb 2-1: SerialNumber: syz [ 1042.927812][ T3035] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1042.928298][ T3035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.928485][ T3035] usb 1-1: Product: syz [ 1042.928677][ T3035] usb 1-1: Manufacturer: syz [ 1042.928726][ T3035] usb 1-1: SerialNumber: syz [ 1043.018332][ T3035] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:4.28/input/input14 [ 1043.174762][T10065] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1043.179762][T10065] usb 2-1: USB disconnect, device number 14 [ 1043.183331][T10065] usblp0: removed [ 1043.719958][T10590] bcm5974 1-1:4.28: could not read from device [ 1043.722436][T10065] usb 1-1: USB disconnect, device number 16 [ 1044.887439][ T9357] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1045.047604][ T9357] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1045.064823][ T9357] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1045.065141][ T9357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.065555][ T9357] usb 1-1: Product: syz [ 1045.065602][ T9357] usb 1-1: Manufacturer: syz [ 1045.065697][ T9357] usb 1-1: SerialNumber: syz [ 1045.300299][ T9357] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1045.308136][ T9357] usb 1-1: USB disconnect, device number 17 [ 1045.314631][ T9357] usblp0: removed [ 1046.077964][ T11] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1046.258374][ T11] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1046.306965][ T11] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1046.308438][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.311012][ T11] usb 1-1: Product: syz [ 1046.312180][ T11] usb 1-1: Manufacturer: syz [ 1046.312885][ T11] usb 1-1: SerialNumber: syz [ 1046.567924][ T11] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1046.585638][ T11] usb 1-1: USB disconnect, device number 18 [ 1046.597338][ T11] usblp0: removed [ 1047.601246][ T9793] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1047.775183][ T9793] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1047.788300][ T9793] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1047.788636][ T9793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.788877][ T9793] usb 1-1: Product: syz [ 1047.788906][ T9793] usb 1-1: Manufacturer: syz [ 1047.788923][ T9793] usb 1-1: SerialNumber: syz [ 1048.029344][ T9793] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1048.054139][ T9793] usb 1-1: USB disconnect, device number 19 [ 1048.061465][ T9793] usblp0: removed [ 1048.301093][T10728] Illegal XDP return value 2250899480 on prog (id 9) dev N/A, expect packet loss! [ 1049.522548][ T28] audit: type=1400 audit(1049.400:351): avc: denied { bind } for pid=10736 comm="syz.0.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1049.693385][ T28] audit: type=1400 audit(1049.570:352): avc: denied { bind } for pid=10735 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1049.729622][ T28] audit: type=1400 audit(1049.610:353): avc: denied { listen } for pid=10735 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1049.738014][ T28] audit: type=1400 audit(1049.610:354): avc: denied { accept } for pid=10735 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1052.626038][ T28] audit: type=1400 audit(1052.490:355): avc: denied { compute_member } for pid=10764 comm="syz.0.1839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1058.535044][T10800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1851'. [ 1058.541842][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 1060.274993][ T28] audit: type=1400 audit(1060.150:356): avc: denied { write } for pid=10809 comm="syz.1.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1061.821473][ T28] audit: type=1400 audit(1061.700:357): avc: denied { mount } for pid=10819 comm="syz.1.1860" name="/" dev="ramfs" ino=22694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1062.719139][T10828] netlink: 'syz.1.1863': attribute type 1 has an invalid length. [ 1063.101449][T10828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1063.184265][T10828] bond1: (slave gretap1): making interface the new active one [ 1063.204166][T10828] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1063.351259][T10828] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10828 comm=syz.1.1863 [ 1066.175541][ T28] audit: type=1400 audit(1066.050:358): avc: denied { create } for pid=10874 comm="syz.1.1869" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1066.273679][ T28] audit: type=1400 audit(1066.150:359): avc: denied { unlink } for pid=8950 comm="syz-executor" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1066.710770][ T28] audit: type=1400 audit(1066.580:360): avc: denied { bind } for pid=10885 comm="syz.1.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1069.547770][ T9357] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1069.737560][ T9357] usb 1-1: device descriptor read/64, error -71 [ 1069.988422][ T9357] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1070.127902][ T9357] usb 1-1: device descriptor read/64, error -71 [ 1070.241319][ T9357] usb usb1-port1: attempt power cycle [ 1070.657335][ T9357] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1070.682753][ T9357] usb 1-1: device descriptor read/8, error -71 [ 1070.917095][ T9357] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1070.941054][ T9357] usb 1-1: device descriptor read/8, error -71 [ 1071.058124][ T9357] usb usb1-port1: unable to enumerate USB device [ 1075.028625][T10918] fuse: Bad value for 'fd' [ 1080.033730][T10958] fuse: Bad value for 'fd' [ 1080.548219][ T9793] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1080.687632][ T9793] usb 1-1: device descriptor read/64, error -71 [ 1080.937400][ T9793] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1081.067940][ T9793] usb 1-1: device descriptor read/64, error -71 [ 1081.187944][ T9793] usb usb1-port1: attempt power cycle [ 1081.537093][ T9793] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1081.560912][ T9793] usb 1-1: device descriptor read/8, error -71 [ 1081.800648][ T9793] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1081.838534][ T9793] usb 1-1: device descriptor read/8, error -71 [ 1081.948934][ T9793] usb usb1-port1: unable to enumerate USB device [ 1090.557609][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'. [ 1095.597176][ T44] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1095.757125][ T44] usb 1-1: device descriptor read/64, error -71 [ 1096.021746][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1096.202350][ T44] usb 1-1: device descriptor read/64, error -71 [ 1096.324426][ T44] usb usb1-port1: attempt power cycle [ 1096.696852][ T44] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1096.729191][ T44] usb 1-1: device descriptor read/8, error -71 [ 1096.997652][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1097.021684][ T44] usb 1-1: device descriptor read/8, error -71 [ 1097.158737][ T44] usb usb1-port1: unable to enumerate USB device [ 1104.060243][T11015] syzkaller0: entered promiscuous mode [ 1104.061704][T11015] syzkaller0: entered allmulticast mode [ 1105.247975][T11026] netlink: 'syz.1.1919': attribute type 10 has an invalid length. [ 1107.093722][ T9793] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1107.317988][ T9793] usb 2-1: device descriptor read/64, error -71 [ 1107.558187][ T9793] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1107.717462][ T9793] usb 2-1: device descriptor read/64, error -71 [ 1107.828516][ T9793] usb usb2-port1: attempt power cycle [ 1108.301197][ T9793] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1108.338216][ T9793] usb 2-1: device descriptor read/8, error -71 [ 1108.597156][ T2873] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1108.741176][ T9793] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1108.759840][ T9793] usb 2-1: device descriptor read/8, error -71 [ 1108.908964][ T9793] usb usb2-port1: unable to enumerate USB device [ 1108.982263][ T2873] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1108.982589][ T2873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.982950][ T2873] usb 1-1: Product: syz [ 1108.983058][ T2873] usb 1-1: Manufacturer: syz [ 1108.983202][ T2873] usb 1-1: SerialNumber: syz [ 1109.239428][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1109.241240][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1109.241659][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1109.245978][ T2873] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1109.262528][ T2873] usb 1-1: USB disconnect, device number 32 [ 1114.838217][ T28] audit: type=1400 audit(1114.720:361): avc: denied { connect } for pid=11079 comm="syz.0.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1114.844840][ T28] audit: type=1400 audit(1114.720:362): avc: denied { bind } for pid=11079 comm="syz.0.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1115.098226][ T2873] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1115.280921][ T2873] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1115.281366][ T2873] usb 1-1: can't read configurations, error -71 [ 1119.470608][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.480815][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.585886][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.677657][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.683102][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.859450][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.881504][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.919318][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.932402][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1119.953579][T11107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11107 comm=syz.1.1943 [ 1123.507026][T11166] fuse: Bad value for 'group_id' [ 1123.507465][T11166] fuse: Bad value for 'group_id' [ 1123.871476][T11175] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1124.102323][T11179] fuse: Bad value for 'group_id' [ 1124.102715][T11179] fuse: Bad value for 'group_id' [ 1124.454905][T11191] fuse: Bad value for 'group_id' [ 1124.458239][T11191] fuse: Bad value for 'group_id' [ 1125.333855][ T28] audit: type=1326 audit(1125.210:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11212 comm="syz.0.1982" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 1135.476996][ T28] audit: type=1400 audit(1135.340:364): avc: denied { recv } for pid=3082 comm="syz-executor" saddr=127.0.0.1 src=44486 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1135.510298][ T28] audit: type=1400 audit(1135.390:365): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=44486 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1136.046827][ T28] audit: type=1400 audit(1135.910:366): avc: denied { bind } for pid=11258 comm="syz.1.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1136.581634][T11261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1138.399647][ T28] audit: type=1400 audit(1138.280:367): avc: denied { recv } for pid=9369 comm="syz-executor" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1139.313691][ T28] audit: type=1326 audit(1139.190:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1139.329523][ T28] audit: type=1326 audit(1139.210:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1139.347235][T11274] syz.1.2007 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1139.359574][ T28] audit: type=1326 audit(1139.220:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1139.368043][ T28] audit: type=1326 audit(1139.220:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1139.370250][ T28] audit: type=1326 audit(1139.220:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1139.372005][ T28] audit: type=1326 audit(1139.220:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.1.2007" exe="/syz-executor" sig=0 arch=40000028 syscall=104 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1141.915028][ T2873] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1142.129792][ T2873] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1142.130581][ T2873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.134027][ T2873] usb 1-1: Product: syz [ 1142.136691][ T2873] usb 1-1: Manufacturer: syz [ 1142.138054][ T2873] usb 1-1: SerialNumber: syz [ 1142.567561][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1142.569946][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1142.571684][ T2873] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1142.578293][ T2873] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1142.594705][ T2873] usb 1-1: USB disconnect, device number 35 [ 1149.080820][ T9793] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1149.328054][ T9793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.328417][ T9793] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1149.328654][ T9793] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1149.328691][ T9793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.335922][ T9793] usb 2-1: config 0 descriptor?? [ 1156.257503][T11337] netlink: 'syz.0.2024': attribute type 3 has an invalid length. [ 1158.257467][T10065] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1158.430887][T10065] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1158.431213][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.431555][T10065] usb 1-1: Product: syz [ 1158.431793][T10065] usb 1-1: Manufacturer: syz [ 1158.431847][T10065] usb 1-1: SerialNumber: syz [ 1158.662871][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1158.663184][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1158.663367][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1158.677644][T10065] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1158.688795][T10065] usb 1-1: USB disconnect, device number 36 [ 1161.398319][T10065] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1161.603054][T10065] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1161.603374][T10065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.603679][T10065] usb 1-1: Product: syz [ 1161.603995][T10065] usb 1-1: Manufacturer: syz [ 1161.604053][T10065] usb 1-1: SerialNumber: syz [ 1161.827414][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1161.827732][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1161.827996][T10065] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1161.832834][T10065] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1161.843642][T10065] usb 1-1: USB disconnect, device number 37 [ 1163.657546][ T9357] usb 2-1: USB disconnect, device number 19 [ 1164.488374][ T2873] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1164.657847][ T2873] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1164.659002][ T2873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.660026][ T2873] usb 2-1: Product: syz [ 1164.660742][ T2873] usb 2-1: Manufacturer: syz [ 1164.661181][ T2873] usb 2-1: SerialNumber: syz [ 1164.894285][ T2873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1164.896593][ T2873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1164.898106][ T2873] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1164.980458][ T2873] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1165.011207][ T2873] usb 2-1: USB disconnect, device number 20 [ 1171.030253][T11412] alloc_vmap_area: 4 callbacks suppressed [ 1171.045310][T11412] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1171.051314][T11412] syz.0.2039: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1171.062115][T11412] CPU: 1 UID: 0 PID: 11412 Comm: syz.0.2039 Tainted: G L syzkaller #0 PREEMPT [ 1171.062241][T11412] Tainted: [L]=SOFTLOCKUP [ 1171.062266][T11412] Hardware name: ARM-Versatile Express [ 1171.062289][T11412] Call trace: [ 1171.062324][T11412] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1171.062449][T11412] r7:60000013 r6:60000013 r5:822a4e44 r4:00000000 [ 1171.062468][T11412] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1171.062517][T11412] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1171.062572][T11412] r7:00000000 r6:822c0bac r5:84c90c00 r4:00000000 [ 1171.062590][T11412] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1171.062655][T11412] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1171.062839][T11412] r3:1ffffff8 r2:822c0bac [ 1171.062876][T11412] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1171.062900][T11412] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1171.062976][T11412] r10:000029c0 r9:81791c4c r8:ffffffff r7:84c90c00 r6:dfb39cf8 r5:00000400 [ 1171.062998][T11412] r4:1ffffff8 [ 1171.063016][T11412] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1171.063093][T11412] r10:85ce2000 r9:dfb39d00 r8:85db4000 r7:00000000 r6:dfb39cf8 r5:85ce2040 [ 1171.063116][T11412] r4:07fffffe [ 1171.063132][T11412] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1171.063189][T11412] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1171.063251][T11412] r10:00000000 r9:20000060 r8:85db4000 r7:85ce2040 r6:dfb39cf8 r5:000002d0 [ 1171.063272][T11412] r4:85ce2000 [ 1171.063289][T11412] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1171.063356][T11412] r10:00000126 r9:815bc984 r8:00000330 r7:85cd15ac r6:dfb39da8 r5:00000040 [ 1171.063379][T11412] r4:84cb8000 [ 1171.063396][T11412] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1171.063474][T11412] r10:00000126 r9:815bc984 r8:00000330 r7:85cd15ac r6:00000040 r5:819238f8 [ 1171.063496][T11412] r4:829f6f38 [ 1171.063513][T11412] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1171.063589][T11412] r6:00000330 r5:84cb8000 r4:00000040 [ 1171.063608][T11412] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1171.063683][T11412] r6:85cd1080 r5:00000029 r4:818d97a0 [ 1171.063701][T11412] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1171.063759][T11412] r4:817c8a90 [ 1171.063776][T11412] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1171.063833][T11412] r4:00000040 [ 1171.063849][T11412] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1171.064099][T11412] r9:84c90c00 r8:00000330 r7:837d8c80 r6:00000040 r5:00000029 r4:819cf958 [ 1171.064129][T11412] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1171.064198][T11412] r8:00000000 r7:838cc780 r6:838cc781 r5:00000040 r4:00000029 [ 1171.064216][T11412] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1171.064284][T11412] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1171.064302][T11412] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1171.064350][T11412] Exception stack(0xdfb39fa8 to 0xdfb39ff0) [ 1171.064392][T11412] 9fa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1171.064426][T11412] 9fc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76fd80dc [ 1171.064451][T11412] 9fe0: 76fd7e88 76fd7e78 00018734 0012fc20 [ 1171.065596][T11412] Mem-Info: [ 1171.066027][T11412] active_anon:1913 inactive_anon:0 isolated_anon:0 [ 1171.066027][T11412] active_file:2048 inactive_file:39835 isolated_file:0 [ 1171.066027][T11412] unevictable:768 dirty:12 writeback:0 [ 1171.066027][T11412] slab_reclaimable:1207 slab_unreclaimable:7171 [ 1171.066027][T11412] mapped:2845 shmem:777 pagetables:360 [ 1171.066027][T11412] sec_pagetables:0 bounce:0 [ 1171.066027][T11412] kernel_misc_reclaimable:0 [ 1171.066027][T11412] free:431187 free_pcp:1303 free_cma:4032 [ 1171.087754][T11412] Node 0 active_anon:7652kB inactive_anon:0kB active_file:8192kB inactive_file:159340kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11380kB dirty:48kB writeback:0kB shmem:3108kB kernel_stack:1520kB pagetables:1440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1171.093329][T11412] Normal free:1370552kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2500kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5216kB local_pcp:2860kB free_cma:0kB [ 1171.093593][T11412] lowmem_reserve[]: 0 4224 4224 [ 1171.093959][T11412] Normal: 6*4kB (UE) 4*8kB (UE) 6*16kB (UE) 5*32kB (UE) 4*64kB (UME) 3*128kB (UE) 2*256kB (M) 8*512kB (UME) 5*1024kB (ME) 2*2048kB (M) 331*4096kB (UM) = 1370552kB [ 1171.095492][T11412] 42660 total pagecache pages [ 1171.095639][T11412] 0 pages in swap cache [ 1171.095686][T11412] Free swap = 124996kB [ 1171.095825][T11412] Total swap = 124996kB [ 1171.095985][T11412] 524288 pages RAM [ 1171.096061][T11412] 135168 pages HighMem/MovableOnly [ 1171.118563][T11412] 32400 pages reserved [ 1171.118717][T11412] 4096 pages cma reserved [ 1171.498261][ T9357] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1171.664617][ T9357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.664852][ T9357] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.665139][ T9357] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.665174][ T9357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.671015][ T9357] usb 2-1: config 0 descriptor?? [ 1171.768167][ T11] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1171.959623][ T11] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1171.960020][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.960298][ T11] usb 1-1: Product: syz [ 1171.960393][ T11] usb 1-1: Manufacturer: syz [ 1171.960432][ T11] usb 1-1: SerialNumber: syz [ 1172.191128][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1172.191562][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1172.192072][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1172.194774][ T11] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1172.217884][ T11] usb 1-1: USB disconnect, device number 38 [ 1177.274431][T11463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 1177.714424][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'. [ 1177.920074][T11477] fuse: Unknown parameter 'group_i00000000000000000000' [ 1186.213820][T10065] usb 2-1: USB disconnect, device number 21 [ 1189.324303][T11495] fuse: Unknown parameter 'group_i00000000000000000000' [ 1189.667387][ T44] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1189.826842][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.827205][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1189.827575][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1189.827658][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.832685][ T44] usb 1-1: config 0 descriptor?? [ 1190.938043][T11507] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2064'. [ 1191.339056][T11512] fuse: Unknown parameter 'group_id00000000000000000000' [ 1191.438261][T11514] fuse: Bad value for 'rootmode' [ 1191.809648][T11521] random: crng reseeded on system resumption [ 1191.914728][T11523] fuse: Unknown parameter 'group_id00000000000000000000' [ 1192.020492][T11525] fuse: Bad value for 'rootmode' [ 1192.395179][ T28] audit: type=1400 audit(1192.270:378): avc: denied { create } for pid=11529 comm="syz.1.2074" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1192.412140][ T28] audit: type=1400 audit(1192.290:379): avc: denied { map } for pid=11529 comm="syz.1.2074" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1192.424828][ T28] audit: type=1400 audit(1192.300:380): avc: denied { read write } for pid=11529 comm="syz.1.2074" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1192.602608][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 1192.783838][T11538] fuse: Unknown parameter 'group_id00000000000000000000' [ 1192.899296][T11540] fuse: Unknown parameter 'use00000000000000000000' [ 1193.783176][T11549] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 1193.790354][T11549] veth0_macvtap: entered allmulticast mode [ 1193.907119][T11551] fuse: Bad value for 'user_id' [ 1193.908571][T11551] fuse: Bad value for 'user_id' [ 1194.018488][T11553] fuse: Unknown parameter 'use00000000000000000000' [ 1197.094608][T11564] fuse: Bad value for 'user_id' [ 1197.094998][T11564] fuse: Bad value for 'user_id' [ 1197.204479][T11566] fuse: Unknown parameter 'use00000000000000000000' [ 1200.909405][T11579] fuse: Unknown parameter 'user_i00000000000000000000' [ 1204.078446][T11591] fuse: Unknown parameter 'user_i00000000000000000000' [ 1204.403184][ T2873] usb 1-1: USB disconnect, device number 39 [ 1204.462131][T11601] fuse: Bad value for 'fd' [ 1204.881478][T11608] fuse: Unknown parameter 'user_i00000000000000000000' [ 1205.377668][T11618] fuse: Bad value for 'fd' [ 1205.749867][T11636] fuse: Unknown parameter 'user_id00000000000000000000' [ 1205.930149][T11640] fuse: Bad value for 'fd' [ 1206.132771][T11646] fuse: Unknown parameter 'user_id00000000000000000000' [ 1206.358699][T11651] fuse: Bad value for 'fd' [ 1206.523063][ T28] audit: type=1400 audit(1206.400:381): avc: denied { getopt } for pid=11655 comm="syz.0.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1207.257134][ T8053] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1207.422468][ T8053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1207.423294][ T8053] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1207.424929][ T8053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.436993][ T8053] usb 2-1: config 0 descriptor?? [ 1207.448393][T11662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1208.403678][ T8053] usbhid 2-1:0.0: can't add hid device: -71 [ 1208.404714][ T8053] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1208.409765][ T8053] usb 2-1: USB disconnect, device number 22 [ 1208.925160][T11680] fuse: Bad value for 'fd' [ 1210.437171][ T28] audit: type=1400 audit(1210.300:382): avc: denied { create } for pid=11687 comm="syz.0.2128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1210.901340][T11692] fuse: Invalid rootmode [ 1212.875262][T11703] fuse: Invalid rootmode [ 1214.569157][T11714] fuse: Invalid rootmode [ 1221.330000][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1221.333256][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1221.348618][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1225.558117][T11760] fuse: Unknown parameter 'use00000000000000000000' [ 1245.535719][T11835] fuse: Unknown parameter 'user_i00000000000000000000' [ 1247.203210][T11871] fuse: Unknown parameter 'user_id00000000000000000000' [ 1249.304665][T11883] fuse: Unknown parameter 'user_id00000000000000000000' [ 1250.449962][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2202'. [ 1252.179066][T11895] fuse: Unknown parameter 'user_id00000000000000000000' [ 1255.961416][T11910] fuse: Bad value for 'fd' [ 1258.654318][T11923] fuse: Bad value for 'fd' [ 1259.839461][T11930] fuse: Unknown parameter 'fd0x0000000000000003' [ 1260.119807][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'. [ 1260.255625][T11932] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1260.281601][T11932] bond2: Unable to set up delay as MII monitoring is disabled [ 1262.439620][T11974] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2221'. [ 1262.755961][T11979] fuse: Unknown parameter 'fd0x0000000000000003' [ 1263.364933][ T28] audit: type=1326 audit(1263.240:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.1.2226" exe="/syz-executor" sig=9 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 1263.798806][ T2873] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1263.974625][ T2873] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1263.975197][ T2873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1263.975615][ T2873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.982747][ T2873] usb 1-1: config 0 descriptor?? [ 1264.003328][ T2873] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1278.521411][ T1475] usb 1-1: USB disconnect, device number 40 [ 1282.460222][ T11] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1282.657884][ T11] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1282.662280][ T11] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1282.663694][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.670605][ T11] usb 1-1: config 0 descriptor?? [ 1282.810452][ T11] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1288.322972][ T28] audit: type=1400 audit(1288.200:384): avc: denied { write } for pid=12051 comm="syz.1.2241" name="file0" dev="tmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1288.324539][ T28] audit: type=1400 audit(1288.200:385): avc: denied { open } for pid=12051 comm="syz.1.2241" path="/331/file0" dev="tmpfs" ino=1745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1296.893151][ T9793] usb 1-1: USB disconnect, device number 41 [ 1299.357695][ T9357] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1299.530094][ T9357] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1299.530584][ T9357] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1299.530659][ T9357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.548664][ T9357] usb 1-1: config 0 descriptor?? [ 1299.555757][ T9357] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1302.409085][ T28] audit: type=1400 audit(1302.290:386): avc: denied { mount } for pid=12106 comm="syz.1.2256" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1302.440146][ T28] audit: type=1400 audit(1302.320:387): avc: denied { associate } for pid=12108 comm="syz.1.2256" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1306.871980][T12123] syzkaller0: entered promiscuous mode [ 1306.873955][T12123] syzkaller0: entered allmulticast mode [ 1314.083975][ T11] usb 1-1: USB disconnect, device number 42 [ 1316.776940][ T1475] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1317.134898][ T1475] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.135264][ T1475] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1317.135674][ T1475] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1317.135788][ T1475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.142649][ T1475] usb 1-1: config 0 descriptor?? [ 1317.189229][ T1475] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1331.418358][T10065] usb 1-1: USB disconnect, device number 43 [ 1333.287416][T12256] UHID_CREATE from different security context by process 682 (syz.0.2302), this is not allowed. [ 1333.577351][ T11] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1333.732907][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.733083][ T11] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1333.733267][ T11] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1333.733419][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.738101][ T11] usb 2-1: config 0 descriptor?? [ 1333.743632][ T11] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1348.144428][ T2873] usb 2-1: USB disconnect, device number 23 [ 1348.735798][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 1349.198981][T12300] netlink: 'syz.1.2312': attribute type 5 has an invalid length. [ 1357.579174][ T433] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.579691][ T433] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.580141][ T433] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.580241][ T433] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.323163][T12353] random: crng reseeded on system resumption [ 1365.365406][T12366] syzkaller0: entered promiscuous mode [ 1365.365882][T12366] syzkaller0: entered allmulticast mode [ 1365.568581][ T28] audit: type=1400 audit(1365.450:388): avc: denied { connect } for pid=12371 comm="syz.0.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1373.657397][T12198] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1373.873252][T12198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.874568][T12198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.878328][T12198] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1373.880932][T12198] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1373.883210][T12198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.900625][T12198] usb 2-1: config 0 descriptor?? [ 1374.399462][T12198] usbhid 2-1:0.0: can't add hid device: -71 [ 1374.402617][T12198] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1374.419779][T12198] usb 2-1: USB disconnect, device number 24 [ 1374.847705][T12198] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 1375.033838][T12198] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.035274][T12198] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1375.037992][T12198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1375.040211][T12198] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 1375.041795][T12198] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1375.042870][T12198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.060347][T12415] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1375.081229][T12198] hub 2-1:1.0: bad descriptor, ignoring hub [ 1375.082546][T12198] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1375.087756][T12198] cdc_wdm 2-1:1.0: skipping garbage [ 1375.089006][T12198] cdc_wdm 2-1:1.0: skipping garbage [ 1375.097857][T12198] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1375.289413][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.301121][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.428980][T12198] usb 2-1: USB disconnect, device number 25 [ 1377.087791][ T3035] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 1377.245854][ T3035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.246607][ T3035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1377.247003][ T3035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1377.247103][ T3035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 1377.247182][ T3035] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1377.247204][ T3035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.257190][T12461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1377.262685][ T3035] hub 2-1:1.0: bad descriptor, ignoring hub [ 1377.262948][ T3035] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1377.263644][ T3035] cdc_wdm 2-1:1.0: skipping garbage [ 1377.263705][ T3035] cdc_wdm 2-1:1.0: skipping garbage [ 1377.276887][ T3035] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1377.484874][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.491926][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1377.615065][ T3035] usb 2-1: USB disconnect, device number 26 [ 1384.097191][ T9587] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1384.297165][ T9587] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.298374][ T9587] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1384.299063][ T9587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1384.299603][ T9587] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 1384.300217][ T9587] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1384.300830][ T9587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.311997][T12505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1384.325163][ T9587] hub 2-1:1.0: bad descriptor, ignoring hub [ 1384.325875][ T9587] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1384.327501][ T9587] cdc_wdm 2-1:1.0: skipping garbage [ 1384.328216][ T9587] cdc_wdm 2-1:1.0: skipping garbage [ 1384.329976][ T9587] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1384.658502][ T9357] usb 2-1: USB disconnect, device number 27 [ 1385.066700][ T3035] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 1385.245959][ T3035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.246967][ T3035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1385.247298][ T3035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1385.247472][ T3035] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10496, setting to 8 [ 1385.247709][ T3035] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1385.247871][ T3035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.294512][T12505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1385.324687][ T3035] hub 2-1:1.0: bad descriptor, ignoring hub [ 1385.337222][ T3035] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1385.341313][ T3035] cdc_wdm 2-1:1.0: skipping garbage [ 1385.348884][ T3035] cdc_wdm 2-1:1.0: skipping garbage [ 1385.354877][ T3035] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1385.638815][ T3035] usb 2-1: USB disconnect, device number 28 [ 1390.657215][ T9587] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 1390.806698][ T9587] usb 2-1: device descriptor read/64, error -71 [ 1391.066964][ T9587] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 1391.196978][ T9587] usb 2-1: device descriptor read/64, error -71 [ 1391.318388][ T9587] usb usb2-port1: attempt power cycle [ 1391.667341][ T9587] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1391.691317][ T9587] usb 2-1: device descriptor read/8, error -71 [ 1391.936917][ T9587] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1391.959266][ T9587] usb 2-1: device descriptor read/8, error -71 [ 1392.068487][ T9587] usb usb2-port1: unable to enumerate USB device [ 1397.964904][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 1398.904725][T12587] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1398.907143][T12587] syz.0.2382: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1398.909327][T12587] CPU: 1 UID: 0 PID: 12587 Comm: syz.0.2382 Tainted: G L syzkaller #0 PREEMPT [ 1398.909419][T12587] Tainted: [L]=SOFTLOCKUP [ 1398.909431][T12587] Hardware name: ARM-Versatile Express [ 1398.909442][T12587] Call trace: [ 1398.909461][T12587] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1398.909543][T12587] r7:60000013 r6:60000013 r5:822a4e44 r4:00000000 [ 1398.909591][T12587] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1398.909658][T12587] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1398.909696][T12587] r7:00000000 r6:822c0bac r5:84013000 r4:00000000 [ 1398.909704][T12587] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1398.909734][T12587] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1398.909764][T12587] r3:1ffffff8 r2:822c0bac [ 1398.909778][T12587] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1398.909786][T12587] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1398.909824][T12587] r10:000029c0 r9:81791c4c r8:ffffffff r7:84013000 r6:dfaddcf8 r5:00000400 [ 1398.909834][T12587] r4:1ffffff8 [ 1398.909843][T12587] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1398.909882][T12587] r10:84f22400 r9:dfaddd00 r8:85db4000 r7:00000000 r6:dfaddcf8 r5:84f22440 [ 1398.909892][T12587] r4:07fffffe [ 1398.909899][T12587] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1398.909930][T12587] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1398.909970][T12587] r10:00000000 r9:20000060 r8:85db4000 r7:84f22440 r6:dfaddcf8 r5:000002d0 [ 1398.909981][T12587] r4:84f22400 [ 1398.909988][T12587] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1398.910023][T12587] r10:00000126 r9:815bc984 r8:00000330 r7:8530a62c r6:dfaddda8 r5:00000040 [ 1398.910032][T12587] r4:84cba800 [ 1398.910040][T12587] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1398.910078][T12587] r10:00000126 r9:815bc984 r8:00000330 r7:8530a62c r6:00000040 r5:819238f8 [ 1398.910088][T12587] r4:829f6f38 [ 1398.910095][T12587] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1398.910129][T12587] r6:00000330 r5:84cba800 r4:00000040 [ 1398.910138][T12587] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1398.910169][T12587] r6:8530a100 r5:00000029 r4:818d97a0 [ 1398.910177][T12587] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1398.910207][T12587] r4:817c8a90 [ 1398.910215][T12587] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1398.910246][T12587] r4:00000040 [ 1398.910253][T12587] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1398.910286][T12587] r9:84013000 r8:00000330 r7:836eb180 r6:00000040 r5:00000029 r4:819cf958 [ 1398.910295][T12587] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1398.910324][T12587] r8:00000000 r7:84ecea80 r6:84ecea81 r5:00000040 r4:00000029 [ 1398.910333][T12587] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1398.910364][T12587] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1398.910373][T12587] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1398.910396][T12587] Exception stack(0xdfaddfa8 to 0xdfaddff0) [ 1398.910418][T12587] dfa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1398.910435][T12587] dfc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76fd80dc [ 1398.910448][T12587] dfe0: 76fd7e88 76fd7e78 00018734 0012fc20 [ 1398.929478][T12587] Mem-Info: [ 1398.930490][T12587] active_anon:1997 inactive_anon:0 isolated_anon:0 [ 1398.930490][T12587] active_file:2048 inactive_file:39913 isolated_file:0 [ 1398.930490][T12587] unevictable:768 dirty:11 writeback:0 [ 1398.930490][T12587] slab_reclaimable:1213 slab_unreclaimable:7323 [ 1398.930490][T12587] mapped:2895 shmem:777 pagetables:400 [ 1398.930490][T12587] sec_pagetables:0 bounce:0 [ 1398.930490][T12587] kernel_misc_reclaimable:0 [ 1398.930490][T12587] free:428408 free_pcp:1329 free_cma:4032 [ 1398.933402][T12587] Node 0 active_anon:7988kB inactive_anon:0kB active_file:8192kB inactive_file:159652kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11580kB dirty:44kB writeback:0kB shmem:3108kB kernel_stack:1552kB pagetables:1600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1398.934853][T12587] Normal free:1369136kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2812kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5316kB local_pcp:2676kB free_cma:0kB [ 1398.938360][T12587] lowmem_reserve[]: 0 4224 4224 [ 1398.941117][T12587] Normal: 2*4kB (ME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 1*256kB (M) 8*512kB (UME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1369136kB [ 1398.954465][T12587] 42740 total pagecache pages [ 1398.955304][T12587] 0 pages in swap cache [ 1398.956803][T12587] Free swap = 124996kB [ 1398.957843][T12587] Total swap = 124996kB [ 1398.958563][T12587] 524288 pages RAM [ 1398.960455][T12587] 135168 pages HighMem/MovableOnly [ 1398.961434][T12587] 32400 pages reserved [ 1398.962277][T12587] 4096 pages cma reserved [ 1401.467346][ T11] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1401.617018][ T11] usb 2-1: device descriptor read/64, error -71 [ 1401.857704][ T11] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1401.997329][ T11] usb 2-1: device descriptor read/64, error -71 [ 1402.107699][ T11] usb usb2-port1: attempt power cycle [ 1402.447388][ T11] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1402.455123][ T28] audit: type=1400 audit(1402.330:389): avc: denied { create } for pid=12607 comm="syz.0.2388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1402.475572][ T28] audit: type=1400 audit(1402.340:390): avc: denied { sys_admin } for pid=12607 comm="syz.0.2388" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1402.486710][ T11] usb 2-1: device descriptor read/8, error -71 [ 1403.638087][ T11] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1403.668628][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 1403.840557][ T11] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1403.840925][ T11] usb 2-1: config 0 has no interface number 0 [ 1403.841154][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1403.841207][ T11] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1403.841234][ T11] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1403.841356][ T11] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1403.841417][ T11] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1403.841447][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.848228][ T11] usb 2-1: config 0 descriptor?? [ 1403.905490][ T11] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1404.163364][ T11] usb 2-1: USB disconnect, device number 36 [ 1404.167725][ T11] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1404.495092][T12642] fuse: Bad value for 'fd' [ 1409.423628][T12664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1409.432449][T12664] block device autoloading is deprecated and will be removed. [ 1409.455527][ T28] audit: type=1400 audit(1409.330:391): avc: denied { ioctl } for pid=12661 comm="syz.1.2401" path="/418/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1409.937770][ T9357] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 1410.098154][ T9357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.098467][ T9357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1410.098922][ T9357] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.099128][ T9357] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1410.099176][ T9357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.121984][ T9357] hub 2-1:1.0: bad descriptor, ignoring hub [ 1410.123148][ T9357] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1410.124347][ T9357] cdc_wdm 2-1:1.0: skipping garbage [ 1410.124580][ T9357] cdc_wdm 2-1:1.0: skipping garbage [ 1410.128716][ T9357] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1410.449576][ T2873] usb 2-1: USB disconnect, device number 37 [ 1410.789449][ T11] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 1410.882165][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1410.983214][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.985117][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1410.987053][ T11] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.989536][ T11] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1410.991322][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.027458][ T11] hub 2-1:1.0: bad descriptor, ignoring hub [ 1411.030841][ T11] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1411.033825][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 1411.035643][ T11] cdc_wdm 2-1:1.0: skipping garbage [ 1411.039620][ T11] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1411.072174][T12690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.081502][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.082542][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.082768][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.347050][ T11] usb 2-1: USB disconnect, device number 38 [ 1415.588683][T12739] fuse: Bad value for 'fd' [ 1416.989785][T12704] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1417.993016][T12761] fuse: Bad value for 'fd' [ 1418.368728][ T2873] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1418.568746][ T2873] usb 2-1: config 0 has no interfaces? [ 1418.580571][ T2873] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1418.580767][ T2873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.580922][ T2873] usb 2-1: Product: syz [ 1418.580958][ T2873] usb 2-1: Manufacturer: syz [ 1418.580972][ T2873] usb 2-1: SerialNumber: syz [ 1418.586578][ T2873] usb 2-1: config 0 descriptor?? [ 1419.012225][T12198] usb 2-1: USB disconnect, device number 39 [ 1419.907588][ T2873] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 1420.081715][ T2873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.082211][ T2873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1420.082681][ T2873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.082827][ T2873] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1420.082949][ T2873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.153266][ T2873] hub 2-1:1.0: bad descriptor, ignoring hub [ 1420.153765][ T2873] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1420.155065][ T2873] cdc_wdm 2-1:1.0: skipping garbage [ 1420.155416][ T2873] cdc_wdm 2-1:1.0: skipping garbage [ 1420.155742][ T2873] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1420.517645][ T9357] usb 2-1: USB disconnect, device number 40 [ 1420.956732][ T9357] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 1421.181486][ T9357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.182257][ T9357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1421.183974][ T9357] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.184905][ T9357] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1421.186462][ T9357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.227846][ T9357] hub 2-1:1.0: bad descriptor, ignoring hub [ 1421.228512][ T9357] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1421.229535][ T9357] cdc_wdm 2-1:1.0: skipping garbage [ 1421.231231][ T9357] cdc_wdm 2-1:1.0: skipping garbage [ 1421.232344][ T9357] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1421.594703][ T9357] usb 2-1: USB disconnect, device number 41 [ 1430.135113][T12879] cgroup: Unknown subsys name 'cpuset' [ 1431.202310][T12894] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1431.202818][T12894] syz.1.2450: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1431.203049][T12894] CPU: 0 UID: 0 PID: 12894 Comm: syz.1.2450 Tainted: G L syzkaller #0 PREEMPT [ 1431.203293][T12894] Tainted: [L]=SOFTLOCKUP [ 1431.203629][T12894] Hardware name: ARM-Versatile Express [ 1431.203951][T12894] Call trace: [ 1431.204063][T12894] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1431.204172][T12894] r7:60000013 r6:60000013 r5:822a4e44 r4:00000000 [ 1431.204336][T12894] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1431.204506][T12894] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1431.204619][T12894] r7:00000000 r6:822c0bac r5:84d60000 r4:00000000 [ 1431.204843][T12894] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1431.204909][T12894] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1431.205023][T12894] r3:1ffffff8 r2:822c0bac [ 1431.205083][T12894] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1431.205209][T12894] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1431.205375][T12894] r10:000029c0 r9:81791c4c r8:ffffffff r7:84d60000 r6:dfb6dcf8 r5:00000400 [ 1431.205642][T12894] r4:1ffffff8 [ 1431.205863][T12894] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1431.206050][T12894] r10:85ce1400 r9:dfb6dd00 r8:85c58000 r7:00000000 r6:dfb6dcf8 r5:85ce1440 [ 1431.206288][T12894] r4:07fffffe [ 1431.206808][T12894] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1431.206888][T12894] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1431.206960][T12894] r10:00000000 r9:20000060 r8:85c58000 r7:85ce1440 r6:dfb6dcf8 r5:000002d0 [ 1431.206982][T12894] r4:85ce1400 [ 1431.206999][T12894] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1431.207070][T12894] r10:00000126 r9:815bc984 r8:00000330 r7:8530a62c r6:dfb6dda8 r5:00000040 [ 1431.207091][T12894] r4:84cb8800 [ 1431.207107][T12894] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1431.207217][T12894] r10:00000126 r9:815bc984 r8:00000330 r7:8530a62c r6:00000040 r5:819238f8 [ 1431.207239][T12894] r4:829f6f38 [ 1431.207256][T12894] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1431.207329][T12894] r6:00000330 r5:84cb8800 r4:00000040 [ 1431.207346][T12894] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1431.207412][T12894] r6:8530a100 r5:00000029 r4:818d97a0 [ 1431.207430][T12894] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1431.207491][T12894] r4:817c8a90 [ 1431.207509][T12894] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1431.207569][T12894] r4:00000040 [ 1431.207585][T12894] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1431.207650][T12894] r9:84d60000 r8:00000330 r7:836d6780 r6:00000040 r5:00000029 r4:819cf958 [ 1431.208041][T12894] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1431.208319][T12894] r8:00000000 r7:861e2240 r6:861e2241 r5:00000040 r4:00000029 [ 1431.208770][T12894] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1431.209684][T12894] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1431.209742][T12894] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1431.209873][T12894] Exception stack(0xdfb6dfa8 to 0xdfb6dff0) [ 1431.209924][T12894] dfa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1431.210037][T12894] dfc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76f490dc [ 1431.210143][T12894] dfe0: 76f48e88 76f48e78 00018734 0012fc20 [ 1431.211197][T12894] Mem-Info: [ 1431.211263][T12894] active_anon:2021 inactive_anon:0 isolated_anon:0 [ 1431.211263][T12894] active_file:2048 inactive_file:39927 isolated_file:0 [ 1431.211263][T12894] unevictable:768 dirty:19 writeback:0 [ 1431.211263][T12894] slab_reclaimable:1213 slab_unreclaimable:7333 [ 1431.211263][T12894] mapped:2895 shmem:793 pagetables:405 [ 1431.211263][T12894] sec_pagetables:0 bounce:0 [ 1431.211263][T12894] kernel_misc_reclaimable:0 [ 1431.211263][T12894] free:431332 free_pcp:1307 free_cma:4032 [ 1431.211360][T12894] Node 0 active_anon:8084kB inactive_anon:0kB active_file:8192kB inactive_file:159708kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:11580kB dirty:76kB writeback:0kB shmem:3172kB kernel_stack:1544kB pagetables:1620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1431.211438][T12894] Normal free:1369136kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2868kB unevictable:0kB writepending:44kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5228kB local_pcp:2692kB free_cma:0kB [ 1431.211537][T12894] lowmem_reserve[]: 0 4224 4224 [ 1431.211647][T12894] Normal: 2*4kB (ME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 1*256kB (M) 8*512kB (UME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1369136kB [ 1431.211971][T12894] 42768 total pagecache pages [ 1431.211990][T12894] 0 pages in swap cache [ 1431.212006][T12894] Free swap = 124996kB [ 1431.212021][T12894] Total swap = 124996kB [ 1431.212037][T12894] 524288 pages RAM [ 1431.212050][T12894] 135168 pages HighMem/MovableOnly [ 1431.212070][T12894] 32400 pages reserved [ 1431.212084][T12894] 4096 pages cma reserved [ 1431.323888][ T28] audit: type=1400 audit(1431.200:392): avc: denied { execmem } for pid=12895 comm="syz.0.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1432.025543][T12908] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1435.010961][T12922] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1435.137451][ T28] audit: type=1400 audit(1435.010:393): avc: denied { watch_reads } for pid=12923 comm="syz.1.2463" path="/445/control" dev="tmpfs" ino=2332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1435.311655][ T28] audit: type=1400 audit(1435.190:394): avc: denied { transfer } for pid=12925 comm="syz.1.2464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1435.884200][T12933] syzkaller0: entered promiscuous mode [ 1435.890197][T12933] syzkaller0: entered allmulticast mode [ 1439.119353][T12942] serio: Serial port ptm0 [ 1440.657968][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'. [ 1440.674585][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'. [ 1441.415380][ T28] audit: type=1400 audit(1441.290:395): avc: denied { name_bind } for pid=12964 comm="syz.1.2476" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1444.612414][T12971] bond0: (slave bond_slave_0): Releasing backup interface [ 1444.688420][T12971] bond0: (slave bond_slave_1): Releasing backup interface [ 1444.711375][T12971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1451.461559][T12977] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1451.461958][T12977] warn_alloc: 2 callbacks suppressed [ 1451.462632][T12977] syz.0.2480: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1451.462978][T12977] CPU: 0 UID: 0 PID: 12977 Comm: syz.0.2480 Tainted: G L syzkaller #0 PREEMPT [ 1451.463044][T12977] Tainted: [L]=SOFTLOCKUP [ 1451.463111][T12977] Hardware name: ARM-Versatile Express [ 1451.463159][T12977] Call trace: [ 1451.463187][T12977] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1451.463348][T12977] r7:60000113 r6:60000113 r5:822a4e44 r4:00000000 [ 1451.463367][T12977] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1451.463419][T12977] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1451.463484][T12977] r7:00000000 r6:822c0bac r5:84078000 r4:00000000 [ 1451.463496][T12977] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1451.463529][T12977] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1451.463563][T12977] r3:1ffffff8 r2:822c0bac [ 1451.463578][T12977] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1451.463587][T12977] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1451.463637][T12977] r10:000029c0 r9:81791c4c r8:ffffffff r7:84078000 r6:dfa51cf8 r5:00000400 [ 1451.463659][T12977] r4:1ffffff8 [ 1451.463677][T12977] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1451.463798][T12977] r10:84f22400 r9:dfa51d00 r8:85db4000 r7:00000000 r6:dfa51cf8 r5:84f22440 [ 1451.463824][T12977] r4:07fffffe [ 1451.463842][T12977] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1451.463896][T12977] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1451.463936][T12977] r10:00000000 r9:20000060 r8:85db4000 r7:84f22440 r6:dfa51cf8 r5:000002d0 [ 1451.463947][T12977] r4:84f22400 [ 1451.463955][T12977] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1451.463999][T12977] r10:00000126 r9:815bc984 r8:00000330 r7:8530a0ac r6:dfa51da8 r5:00000040 [ 1451.464009][T12977] r4:84cb9800 [ 1451.464017][T12977] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1451.464062][T12977] r10:00000126 r9:815bc984 r8:00000330 r7:8530a0ac r6:00000040 r5:819238f8 [ 1451.464073][T12977] r4:829f6f38 [ 1451.464081][T12977] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1451.464121][T12977] r6:00000330 r5:84cb9800 r4:00000040 [ 1451.464129][T12977] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1451.464165][T12977] r6:85309b80 r5:00000029 r4:818d97a0 [ 1451.464173][T12977] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1451.464207][T12977] r4:817c8a90 [ 1451.464217][T12977] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1451.464249][T12977] r4:00000040 [ 1451.464257][T12977] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1451.464293][T12977] r9:84078000 r8:00000330 r7:836ed680 r6:00000040 r5:00000029 r4:819cf958 [ 1451.464302][T12977] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1451.464337][T12977] r8:00000000 r7:84ecea80 r6:84ecea81 r5:00000040 r4:00000029 [ 1451.464346][T12977] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1451.464383][T12977] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1451.464392][T12977] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1451.464418][T12977] Exception stack(0xdfa51fa8 to 0xdfa51ff0) [ 1451.464444][T12977] 1fa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1451.464464][T12977] 1fc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76fd80dc [ 1451.464480][T12977] 1fe0: 76fd7e88 76fd7e78 00018734 0012fc20 [ 1451.464496][T12977] Mem-Info: [ 1451.464512][T12977] active_anon:4888 inactive_anon:0 isolated_anon:0 [ 1451.464512][T12977] active_file:2048 inactive_file:39933 isolated_file:0 [ 1451.464512][T12977] unevictable:768 dirty:12 writeback:0 [ 1451.464512][T12977] slab_reclaimable:1216 slab_unreclaimable:7333 [ 1451.464512][T12977] mapped:5781 shmem:3663 pagetables:404 [ 1451.464512][T12977] sec_pagetables:0 bounce:0 [ 1451.464512][T12977] kernel_misc_reclaimable:0 [ 1451.464512][T12977] free:428494 free_pcp:1353 free_cma:4032 [ 1451.464560][T12977] Node 0 active_anon:19552kB inactive_anon:0kB active_file:8192kB inactive_file:159732kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:23124kB dirty:48kB writeback:0kB shmem:14652kB kernel_stack:1544kB pagetables:1616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1451.464597][T12977] Normal free:1368884kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2892kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5412kB local_pcp:2616kB free_cma:0kB [ 1451.464640][T12977] lowmem_reserve[]: 0 4224 4224 [ 1451.464672][T12977] Normal: 3*4kB (UME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 2*256kB (UM) 7*512kB (ME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1368884kB [ 1451.464937][T12977] 45644 total pagecache pages [ 1451.464947][T12977] 0 pages in swap cache [ 1451.464955][T12977] Free swap = 124996kB [ 1451.464973][T12977] Total swap = 124996kB [ 1451.464982][T12977] 524288 pages RAM [ 1451.464989][T12977] 135168 pages HighMem/MovableOnly [ 1451.464999][T12977] 32400 pages reserved [ 1451.465006][T12977] 4096 pages cma reserved [ 1452.541627][T12988] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1452.639178][T12990] netlink: 'syz.0.2486': attribute type 58 has an invalid length. [ 1453.605499][T13000] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1453.764293][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 1455.440623][T13013] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1468.052488][T13031] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1468.056645][T13031] warn_alloc: 3 callbacks suppressed [ 1468.064801][T13031] syz.0.2500: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1468.077431][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.0.2500 Tainted: G L syzkaller #0 PREEMPT [ 1468.077579][T13031] Tainted: [L]=SOFTLOCKUP [ 1468.077600][T13031] Hardware name: ARM-Versatile Express [ 1468.077624][T13031] Call trace: [ 1468.077669][T13031] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1468.077810][T13031] r7:60000113 r6:60000113 r5:822a4e44 r4:00000000 [ 1468.077831][T13031] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1468.077884][T13031] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1468.077948][T13031] r7:00000000 r6:822c0bac r5:83e36c00 r4:00000000 [ 1468.077968][T13031] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1468.078025][T13031] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1468.078085][T13031] r3:1ffffff8 r2:822c0bac [ 1468.078118][T13031] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1468.078137][T13031] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1468.078210][T13031] r10:000029c0 r9:81791c4c r8:ffffffff r7:83e36c00 r6:dfb5dcf8 r5:00000400 [ 1468.078232][T13031] r4:1ffffff8 [ 1468.078250][T13031] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1468.078326][T13031] r10:84ef1c00 r9:dfb5dd00 r8:85db4000 r7:00000000 r6:dfb5dcf8 r5:84ef1c40 [ 1468.078348][T13031] r4:07fffffe [ 1468.078365][T13031] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1468.078430][T13031] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1468.078494][T13031] r10:00000000 r9:20000060 r8:85db4000 r7:84ef1c40 r6:dfb5dcf8 r5:000002d0 [ 1468.078518][T13031] r4:84ef1c00 [ 1468.078534][T13031] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1468.078601][T13031] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:dfb5dda8 r5:00000040 [ 1468.078621][T13031] r4:84cbc800 [ 1468.078637][T13031] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1468.078721][T13031] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:00000040 r5:819238f8 [ 1468.078742][T13031] r4:829f6f38 [ 1468.078758][T13031] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1468.078827][T13031] r6:00000330 r5:84cbc800 r4:00000040 [ 1468.078845][T13031] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1468.078905][T13031] r6:85309080 r5:00000029 r4:818d97a0 [ 1468.078931][T13031] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1468.078990][T13031] r4:817c8a90 [ 1468.079007][T13031] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1468.079063][T13031] r4:00000040 [ 1468.079079][T13031] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1468.079143][T13031] r9:83e36c00 r8:00000330 r7:837dd900 r6:00000040 r5:00000029 r4:819cf958 [ 1468.079163][T13031] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1468.079222][T13031] r8:00000000 r7:861e2480 r6:861e2481 r5:00000040 r4:00000029 [ 1468.079243][T13031] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1468.079304][T13031] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1468.079323][T13031] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1468.079373][T13031] Exception stack(0xdfb5dfa8 to 0xdfb5dff0) [ 1468.079418][T13031] dfa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1468.079455][T13031] dfc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76fd80dc [ 1468.079485][T13031] dfe0: 76fd7e88 76fd7e78 00018734 0012fc20 [ 1468.147710][T13031] Mem-Info: [ 1468.147968][T13031] active_anon:5344 inactive_anon:0 isolated_anon:0 [ 1468.147968][T13031] active_file:2048 inactive_file:39939 isolated_file:0 [ 1468.147968][T13031] unevictable:768 dirty:10 writeback:0 [ 1468.147968][T13031] slab_reclaimable:1217 slab_unreclaimable:7350 [ 1468.147968][T13031] mapped:3901 shmem:4125 pagetables:406 [ 1468.147968][T13031] sec_pagetables:0 bounce:0 [ 1468.147968][T13031] kernel_misc_reclaimable:0 [ 1468.147968][T13031] free:428165 free_pcp:1325 free_cma:4032 [ 1468.148392][T13031] Node 0 active_anon:21376kB inactive_anon:0kB active_file:8192kB inactive_file:159756kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:15604kB dirty:40kB writeback:0kB shmem:16500kB kernel_stack:1552kB pagetables:1624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1468.148498][T13031] Normal free:1368884kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2916kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5300kB local_pcp:2864kB free_cma:0kB [ 1468.148624][T13031] lowmem_reserve[]: 0 4224 4224 [ 1468.148732][T13031] Normal: 3*4kB (UME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 2*256kB (UM) 7*512kB (ME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1368884kB [ 1468.149190][T13031] 46112 total pagecache pages [ 1468.149310][T13031] 0 pages in swap cache [ 1468.149336][T13031] Free swap = 124996kB [ 1468.149352][T13031] Total swap = 124996kB [ 1468.149367][T13031] 524288 pages RAM [ 1468.149429][T13031] 135168 pages HighMem/MovableOnly [ 1468.149506][T13031] 32400 pages reserved [ 1468.149529][T13031] 4096 pages cma reserved [ 1469.887226][ T11] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1470.017986][ T11] usb 2-1: device descriptor read/64, error -71 [ 1470.326357][ T11] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1470.580538][ T11] usb 2-1: device descriptor read/64, error -71 [ 1470.758021][ T11] usb usb2-port1: attempt power cycle [ 1472.038864][ T11] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1472.689993][ T11] usb 2-1: device descriptor read/8, error -71 [ 1472.932644][ T11] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1472.954113][ T11] usb 2-1: device descriptor read/8, error -71 [ 1473.058556][ T11] usb usb2-port1: unable to enumerate USB device [ 1481.792097][T13053] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1481.794660][T13053] syz.1.2505: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1481.822998][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.1.2505 Tainted: G L syzkaller #0 PREEMPT [ 1481.823109][T13053] Tainted: [L]=SOFTLOCKUP [ 1481.823120][T13053] Hardware name: ARM-Versatile Express [ 1481.823132][T13053] Call trace: [ 1481.823155][T13053] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1481.823228][T13053] r7:60000113 r6:60000113 r5:822a4e44 r4:00000000 [ 1481.823237][T13053] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1481.823264][T13053] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1481.823295][T13053] r7:00000000 r6:822c0bac r5:83803000 r4:00000000 [ 1481.823304][T13053] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1481.823332][T13053] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1481.823363][T13053] r3:1ffffff8 r2:822c0bac [ 1481.823377][T13053] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1481.823385][T13053] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1481.823423][T13053] r10:000029c0 r9:81791c4c r8:ffffffff r7:83803000 r6:dfa05cf8 r5:00000400 [ 1481.823434][T13053] r4:1ffffff8 [ 1481.823443][T13053] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1481.823484][T13053] r10:84f22000 r9:dfa05d00 r8:85c58000 r7:00000000 r6:dfa05cf8 r5:84f22040 [ 1481.823495][T13053] r4:07fffffe [ 1481.823503][T13053] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1481.823538][T13053] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1481.823573][T13053] r10:00000000 r9:20000060 r8:85c58000 r7:84f22040 r6:dfa05cf8 r5:000002d0 [ 1481.823583][T13053] r4:84f22000 [ 1481.823590][T13053] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1481.823625][T13053] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:dfa05da8 r5:00000040 [ 1481.823635][T13053] r4:84cbc800 [ 1481.823643][T13053] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1481.823682][T13053] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:00000040 r5:819238f8 [ 1481.823692][T13053] r4:829f6f38 [ 1481.823715][T13053] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1481.823749][T13053] r6:00000330 r5:84cbc800 r4:00000040 [ 1481.823759][T13053] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1481.823791][T13053] r6:85309080 r5:00000029 r4:818d97a0 [ 1481.823800][T13053] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1481.823830][T13053] r4:817c8a90 [ 1481.823839][T13053] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1481.823868][T13053] r4:00000040 [ 1481.823877][T13053] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1481.823909][T13053] r9:83803000 r8:00000330 r7:836cc500 r6:00000040 r5:00000029 r4:819cf958 [ 1481.823919][T13053] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1481.823951][T13053] r8:00000000 r7:84edd300 r6:84edd301 r5:00000040 r4:00000029 [ 1481.823960][T13053] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1481.823992][T13053] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1481.824001][T13053] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1481.824026][T13053] Exception stack(0xdfa05fa8 to 0xdfa05ff0) [ 1481.824047][T13053] 5fa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1481.824065][T13053] 5fc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76f490dc [ 1481.824079][T13053] 5fe0: 76f48e88 76f48e78 00018734 0012fc20 [ 1481.884785][T13053] Mem-Info: [ 1481.921158][T13053] active_anon:4888 inactive_anon:0 isolated_anon:0 [ 1481.921158][T13053] active_file:2048 inactive_file:39943 isolated_file:0 [ 1481.921158][T13053] unevictable:768 dirty:9 writeback:3 [ 1481.921158][T13053] slab_reclaimable:1217 slab_unreclaimable:7350 [ 1481.921158][T13053] mapped:5813 shmem:3663 pagetables:391 [ 1481.921158][T13053] sec_pagetables:0 bounce:0 [ 1481.921158][T13053] kernel_misc_reclaimable:0 [ 1481.921158][T13053] free:428596 free_pcp:1329 free_cma:4032 [ 1481.943879][T13053] Node 0 active_anon:19552kB inactive_anon:0kB active_file:8192kB inactive_file:159772kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:23252kB dirty:36kB writeback:12kB shmem:14652kB kernel_stack:1560kB pagetables:1564kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1481.970347][T13053] Normal free:1368884kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2932kB unevictable:0kB writepending:20kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5316kB local_pcp:2440kB free_cma:0kB [ 1481.997190][T13053] lowmem_reserve[]: 0 4224 4224 [ 1482.107208][T13053] Normal: 3*4kB (UME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 2*256kB (UM) 7*512kB (ME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1368884kB [ 1482.399531][T13053] 45654 total pagecache pages [ 1482.409087][T13053] 0 pages in swap cache [ 1482.420726][T13053] Free swap = 124996kB [ 1482.427563][T13053] Total swap = 124996kB [ 1482.438052][T13053] 524288 pages RAM [ 1482.450542][T13053] 135168 pages HighMem/MovableOnly [ 1482.464668][T13053] 32400 pages reserved [ 1482.472125][T13053] 4096 pages cma reserved [ 1490.198256][T12198] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1490.346992][T12198] usb 2-1: device descriptor read/64, error -71 [ 1490.597793][T12198] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1490.757657][T12198] usb 2-1: device descriptor read/64, error -71 [ 1490.867938][T12198] usb usb2-port1: attempt power cycle [ 1491.217644][T12198] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1491.260421][T12198] usb 2-1: device descriptor read/8, error -71 [ 1491.507988][T12198] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1491.541422][T12198] usb 2-1: device descriptor read/8, error -71 [ 1491.647955][T12198] usb usb2-port1: unable to enumerate USB device [ 1500.032980][T13074] vmalloc_node_range for size 536875008 failed: Address range restricted to 0xdf800000 - 0xff800000 [ 1500.047187][T13074] syz.1.2511: vmalloc error: size 536870904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1500.065506][T13074] CPU: 1 UID: 0 PID: 13074 Comm: syz.1.2511 Tainted: G L syzkaller #0 PREEMPT [ 1500.065645][T13074] Tainted: [L]=SOFTLOCKUP [ 1500.065675][T13074] Hardware name: ARM-Versatile Express [ 1500.065699][T13074] Call trace: [ 1500.065737][T13074] [<80201a14>] (dump_backtrace) from [<80201b08>] (show_stack+0x18/0x1c) [ 1500.065869][T13074] r7:600d0013 r6:600d0013 r5:822a4e44 r4:00000000 [ 1500.065894][T13074] [<80201af0>] (show_stack) from [<8021e454>] (dump_stack_lvl+0x5c/0x70) [ 1500.065949][T13074] [<8021e3f8>] (dump_stack_lvl) from [<8021e480>] (dump_stack+0x18/0x1c) [ 1500.066014][T13074] r7:00000000 r6:822c0bac r5:84c89800 r4:00000000 [ 1500.066118][T13074] [<8021e468>] (dump_stack) from [<80512878>] (warn_alloc+0xe0/0x188) [ 1500.066190][T13074] [<80512798>] (warn_alloc) from [<804ffe78>] (__vmalloc_node_range_noprof+0xbc/0x668) [ 1500.066264][T13074] r3:1ffffff8 r2:822c0bac [ 1500.066299][T13074] r7:822c0be4 r6:00000dc0 r5:ff800000 r4:df800000 [ 1500.066321][T13074] [<804ffdbc>] (__vmalloc_node_range_noprof) from [<805233d8>] (__kvmalloc_node_noprof+0x328/0x57c) [ 1500.066398][T13074] r10:000029c0 r9:81791c4c r8:ffffffff r7:84c89800 r6:dfa45cf8 r5:00000400 [ 1500.066424][T13074] r4:1ffffff8 [ 1500.066445][T13074] [<805230b0>] (__kvmalloc_node_noprof) from [<81791c4c>] (xt_alloc_entry_offsets+0x28/0x34) [ 1500.066536][T13074] r10:86139c00 r9:dfa45d00 r8:85c58000 r7:00000000 r6:dfa45cf8 r5:86139c40 [ 1500.066564][T13074] r4:07fffffe [ 1500.066585][T13074] [<81791c24>] (xt_alloc_entry_offsets) from [<81922234>] (translate_table+0x74/0x764) [ 1500.066662][T13074] [<819221c0>] (translate_table) from [<819233fc>] (do_replace+0xf4/0x5f0) [ 1500.066927][T13074] r10:00000000 r9:20000060 r8:85c58000 r7:86139c40 r6:dfa45cf8 r5:000002d0 [ 1500.066962][T13074] r4:86139c00 [ 1500.066984][T13074] [<81923308>] (do_replace) from [<81923a2c>] (do_ip6t_set_ctl+0x134/0x29c) [ 1500.067064][T13074] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:dfa45da8 r5:00000040 [ 1500.067093][T13074] r4:84cbc800 [ 1500.067115][T13074] [<819238f8>] (do_ip6t_set_ctl) from [<817185cc>] (nf_setsockopt+0x54/0x70) [ 1500.067197][T13074] r10:00000126 r9:815bc984 r8:00000330 r7:853095ac r6:00000040 r5:819238f8 [ 1500.067227][T13074] r4:829f6f38 [ 1500.067248][T13074] [<8171857c>] (nf_setsockopt) from [<818d983c>] (ipv6_setsockopt+0x9c/0xbc) [ 1500.067320][T13074] r6:00000330 r5:84cbc800 r4:00000040 [ 1500.067343][T13074] [<818d97a4>] (ipv6_setsockopt) from [<817c8acc>] (tcp_setsockopt+0x3c/0x58) [ 1500.067413][T13074] r6:85309080 r5:00000029 r4:818d97a0 [ 1500.067435][T13074] [<817c8a94>] (tcp_setsockopt) from [<815bc9bc>] (sock_common_setsockopt+0x38/0x40) [ 1500.067498][T13074] r4:817c8a90 [ 1500.067521][T13074] [<815bc988>] (sock_common_setsockopt) from [<819cfa04>] (smc_setsockopt+0xac/0x354) [ 1500.067581][T13074] r4:00000040 [ 1500.067603][T13074] [<819cf95c>] (smc_setsockopt) from [<815b80cc>] (do_sock_setsockopt+0x70/0xc8) [ 1500.067685][T13074] r9:84c89800 r8:00000330 r7:836ed400 r6:00000040 r5:00000029 r4:819cf958 [ 1500.067710][T13074] [<815b805c>] (do_sock_setsockopt) from [<815bbc1c>] (__sys_setsockopt+0x7c/0xc4) [ 1500.067772][T13074] r8:00000000 r7:84ece6c0 r6:84ece6c1 r5:00000040 r4:00000029 [ 1500.067795][T13074] [<815bbba0>] (__sys_setsockopt) from [<815bbc80>] (sys_setsockopt+0x1c/0x24) [ 1500.067856][T13074] r8:8020029c r7:00000126 r6:00346318 r5:00000000 r4:00000330 [ 1500.067877][T13074] [<815bbc64>] (sys_setsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1500.067925][T13074] Exception stack(0xdfa45fa8 to 0xdfa45ff0) [ 1500.067972][T13074] 5fa0: 00000330 00000000 00000003 00000029 00000040 20000000 [ 1500.068009][T13074] 5fc0: 00000330 00000000 00346318 00000126 003462d8 00000000 00000001 76f490dc [ 1500.068040][T13074] 5fe0: 76f48e88 76f48e78 00018734 0012fc20 [ 1500.116872][T13074] Mem-Info: [ 1500.119465][T13074] active_anon:4903 inactive_anon:0 isolated_anon:0 [ 1500.119465][T13074] active_file:2048 inactive_file:39945 isolated_file:0 [ 1500.119465][T13074] unevictable:768 dirty:9 writeback:0 [ 1500.119465][T13074] slab_reclaimable:1217 slab_unreclaimable:7350 [ 1500.119465][T13074] mapped:5813 shmem:3663 pagetables:404 [ 1500.119465][T13074] sec_pagetables:0 bounce:0 [ 1500.119465][T13074] kernel_misc_reclaimable:0 [ 1500.119465][T13074] free:428687 free_pcp:1325 free_cma:4032 [ 1500.126606][T13074] Node 0 active_anon:19612kB inactive_anon:0kB active_file:8192kB inactive_file:159780kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:23252kB dirty:36kB writeback:0kB shmem:14652kB kernel_stack:1544kB pagetables:1616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1500.130137][T13074] Normal free:1368884kB boost:0kB min:4772kB low:6196kB high:7620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:2940kB unevictable:0kB writepending:24kB zspages:0kB present:1556480kB managed:1426880kB mlocked:0kB bounce:0kB free_pcp:5300kB local_pcp:2424kB free_cma:0kB [ 1500.135041][T13074] lowmem_reserve[]: 0 4224 4224 [ 1500.145514][T13074] Normal: 3*4kB (UME) 3*8kB (UE) 5*16kB (UE) 4*32kB (UE) 3*64kB (UME) 3*128kB (UE) 2*256kB (UM) 7*512kB (ME) 6*1024kB (UME) 3*2048kB (UM) 330*4096kB (UM) = 1368884kB [ 1500.203821][T13074] 45658 total pagecache pages [ 1500.208585][T13074] 0 pages in swap cache [ 1500.218418][T13074] Free swap = 124996kB [ 1500.225498][T13074] Total swap = 124996kB [ 1500.230072][T13074] 524288 pages RAM [ 1500.237779][T13074] 135168 pages HighMem/MovableOnly [ 1500.241488][T13074] 32400 pages reserved [ 1500.246506][T13074] 4096 pages cma reserved [ 1501.957310][ T9357] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1502.107328][ T9357] usb 2-1: device descriptor read/64, error -71 [ 1502.348233][ T9357] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1502.498500][ T9357] usb 2-1: device descriptor read/64, error -71 [ 1502.609873][ T9357] usb usb2-port1: attempt power cycle [ 1502.957587][ T9357] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1502.991264][ T9357] usb 2-1: device descriptor read/8, error -71 [ 1503.227802][ T9357] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1503.250477][ T9357] usb 2-1: device descriptor read/8, error -71 [ 1503.358407][ T9357] usb usb2-port1: unable to enumerate USB device [ 1513.710042][ T28] audit: type=1326 audit(1513.590:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.727715][ T28] audit: type=1326 audit(1513.600:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.727988][ T28] audit: type=1326 audit(1513.600:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.728231][ T28] audit: type=1326 audit(1513.600:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.728342][ T28] audit: type=1326 audit(1513.600:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.728444][ T28] audit: type=1326 audit(1513.600:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.728545][ T28] audit: type=1326 audit(1513.600:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.728645][ T28] audit: type=1326 audit(1513.600:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.767610][ T28] audit: type=1326 audit(1513.600:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1513.775353][ T28] audit: type=1326 audit(1513.650:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.729469][ T28] kauditd_printk_skb: 828 callbacks suppressed [ 1518.730108][ T28] audit: type=1326 audit(1518.610:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.742244][ T28] audit: type=1326 audit(1518.620:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.792088][ T28] audit: type=1326 audit(1518.670:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.808090][ T28] audit: type=1326 audit(1518.680:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.813911][ T28] audit: type=1326 audit(1518.690:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.886770][ T28] audit: type=1326 audit(1518.750:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.887264][ T28] audit: type=1326 audit(1518.750:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.887604][ T28] audit: type=1326 audit(1518.750:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.887827][ T28] audit: type=1326 audit(1518.750:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1518.888027][ T28] audit: type=1326 audit(1518.750:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13098 comm="syz.1.2518" exe="/syz-executor" sig=0 arch=40000028 syscall=119 compat=0 ip=0xf2e68 code=0x7ffc0000 [ 1523.077252][ T3035] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1523.248137][ T3035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.248485][ T3035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1523.248997][ T3035] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1523.249244][ T3035] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1523.249457][ T3035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.434197][ T3035] hub 2-1:1.0: bad descriptor, ignoring hub [ 1523.434836][ T3035] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1523.440751][ T3035] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1523.691662][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.709897][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.749187][ T3035] usb 2-1: USB disconnect, device number 54 [ 1524.097179][ T3035] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 1524.282600][ T3035] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.283874][ T3035] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1524.287626][ T3035] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.289533][ T3035] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1524.290590][ T3035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.358869][ T3035] hub 2-1:1.0: bad descriptor, ignoring hub [ 1524.364845][ T3035] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1524.379818][ T3035] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1524.678062][ T3035] usb 2-1: USB disconnect, device number 55 [ 1526.613658][T13101] hsr_slave_0: entered promiscuous mode [ 1526.629814][T13101] hsr_slave_1: entered promiscuous mode [ 1526.639987][T13101] debugfs: 'hsr0' already exists in 'hsr' [ 1526.647205][T13101] Cannot create hsr debugfs directory [ 1527.975962][T13101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1528.021450][T13101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1528.073743][T13101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1528.113660][T13101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1531.184012][T13101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.000250][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.007553][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.011856][ T52] bond0 (unregistering): Released all slaves [ 1541.130116][ T52] hsr_slave_0: left promiscuous mode [ 1541.132081][ T52] hsr_slave_1: left promiscuous mode [ 1542.603179][T13464] ip6gre1: entered promiscuous mode [ 1542.604179][T13464] ip6gre1: entered allmulticast mode [ 1542.638203][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1542.641145][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1542.659629][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1542.674988][T13464] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1543.258400][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1543.388451][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1543.662515][T13101] veth0_vlan: entered promiscuous mode [ 1543.715831][T13101] veth1_vlan: entered promiscuous mode [ 1543.873916][T13101] veth0_macvtap: entered promiscuous mode [ 1543.900234][T13101] veth1_macvtap: entered promiscuous mode [ 1544.031508][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.032304][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.032709][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.032966][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.347701][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1548.905405][T13549] syz_tun: entered allmulticast mode [ 1548.917767][T13548] syz_tun: left allmulticast mode [ 1549.415483][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.420156][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.876518][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1554.540931][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.546073][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.698039][T13584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1554.700355][T13584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1554.927210][ T28] kauditd_printk_skb: 349 callbacks suppressed [ 1554.927655][ T28] audit: type=1400 audit(1554.810:1593): avc: denied { create } for pid=13588 comm="syz.2.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1554.971476][ T28] audit: type=1400 audit(1554.850:1594): avc: denied { connect } for pid=13588 comm="syz.2.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1555.463972][ T28] audit: type=1400 audit(1555.340:1595): avc: denied { shutdown } for pid=13588 comm="syz.2.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1560.202760][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 1560.387822][T13651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.392349][T13651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.733717][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.788553][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.018343][T13668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.030845][T13668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.949434][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.960118][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.709124][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.710196][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1569.227574][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1570.050262][ T28] audit: type=1400 audit(1569.610:1596): avc: denied { override_creds } for pid=13702 comm="syz.2.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1581.508372][T13738] netlink: 'syz.1.2591': attribute type 3 has an invalid length. [ 1581.644348][T13738] syz_tun: entered allmulticast mode [ 1582.272733][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.594250][T13738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1582.602835][T13738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1582.610670][T13738] veth1_vlan: left promiscuous mode [ 1582.612348][T13738] veth0_vlan: left promiscuous mode [ 1582.633427][T13738] veth0_vlan: entered promiscuous mode [ 1582.642796][T13738] veth1_vlan: entered promiscuous mode [ 1582.672563][T13738] veth1_macvtap: left promiscuous mode [ 1582.683681][T13738] veth0_macvtap: left promiscuous mode [ 1582.686835][T13738] veth0_macvtap: left allmulticast mode [ 1582.690127][T13738] veth0_macvtap: entered promiscuous mode [ 1582.699588][T13738] veth1_macvtap: entered promiscuous mode [ 1582.741070][T13738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1582.743774][T13738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1582.752797][T13738] ip6gre1: left promiscuous mode [ 1582.762058][T13738] ip6gre1: left allmulticast mode [ 1582.788107][ T8053] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1582.835447][T10595] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.835837][T10595] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.837560][T10595] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.837793][T10595] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.845020][T13737] syz_tun: left allmulticast mode [ 1582.927729][ T9587] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1598.666998][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1612.939344][T13803] fuse: Unknown parameter 'group_id00000000000000000000' [ 1614.601431][T13814] fuse: Unknown parameter 'group_id00000000000000000000' [ 1617.409696][T13829] fuse: Bad value for 'user_id' [ 1617.415431][T13829] fuse: Bad value for 'user_id' [ 1619.022143][T13875] fuse: Bad value for 'user_id' [ 1619.025047][T13875] fuse: Bad value for 'user_id' [ 1620.912224][T13942] fuse: Bad value for 'user_id' [ 1620.919792][T13942] fuse: Bad value for 'user_id' [ 1623.258776][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.309261][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.712538][T13798] hsr_slave_0: entered promiscuous mode [ 1627.721200][T13798] hsr_slave_1: entered promiscuous mode [ 1628.091700][T13798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1628.100387][T13798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1628.114865][T13798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1628.123363][T13798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1629.264890][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.883248][ T28] audit: type=1400 audit(1633.760:1597): avc: denied { mounton } for pid=14187 comm="syz.1.2658" path="/582/file0" dev="tmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1643.022184][T13798] veth0_vlan: entered promiscuous mode [ 1643.062221][T13798] veth1_vlan: entered promiscuous mode [ 1643.183188][T13798] veth0_macvtap: entered promiscuous mode [ 1643.211141][T13798] veth1_macvtap: entered promiscuous mode [ 1643.322597][ T5516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.324160][ T5516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.329379][ T5516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.342367][ T5516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.120368][ T433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.222691][ T433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.378995][ T433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.488541][ T433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.268171][ T433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.273428][ T433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.287820][ T433] bond0 (unregistering): Released all slaves [ 1645.386042][ T433] hsr_slave_0: left promiscuous mode [ 1645.394391][ T433] hsr_slave_1: left promiscuous mode [ 1645.413375][ T433] veth1_macvtap: left promiscuous mode [ 1645.414913][ T433] veth0_macvtap: left promiscuous mode [ 1645.418291][ T433] veth1_vlan: left promiscuous mode [ 1645.419207][ T433] veth0_vlan: left promiscuous mode [ 1646.855469][ T28] audit: type=1400 audit(1646.730:1598): avc: denied { ioctl } for pid=14256 comm="syz.3.2670" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30309 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1647.011952][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.015513][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.525082][T14284] fuse: Bad value for 'fd' [ 1654.419449][T14300] fuse: Bad value for 'fd' [ 1655.387253][ T28] audit: type=1400 audit(1655.260:1599): avc: denied { watch_mount } for pid=14307 comm="syz.3.2685" path="/20" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1656.907237][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1657.174827][T14325] fuse: Bad value for 'fd' [ 1658.119667][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.123456][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1660.997542][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.003601][T14357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.439602][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.442710][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.313078][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.321465][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.787211][ T28] audit: type=1326 audit(1668.660:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14405 comm="syz.3.2708" exe="/syz-executor" sig=31 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x0 [ 1672.052253][T14421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.067126][T14421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.787936][T14470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.794958][T14470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.751455][T14470] hsr_slave_0: entered promiscuous mode [ 1691.755452][T14470] hsr_slave_1: entered promiscuous mode [ 1691.768420][T14470] debugfs: 'hsr0' already exists in 'hsr' [ 1691.771461][T14470] Cannot create hsr debugfs directory [ 1692.567554][T14470] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1692.580050][T14470] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1692.601944][T14470] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1692.622538][T14470] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1694.528783][T14470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.052663][T14470] veth0_vlan: entered promiscuous mode [ 1708.080786][T14470] veth1_vlan: entered promiscuous mode [ 1708.157532][T14470] veth0_macvtap: entered promiscuous mode [ 1708.179317][T14470] veth1_macvtap: entered promiscuous mode [ 1708.269810][T14761] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.299457][T14761] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.300227][T14761] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.300615][T14761] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.942514][T14799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.962821][T14799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.849606][T14799] hsr_slave_0: entered promiscuous mode [ 1737.852482][T14799] hsr_slave_1: entered promiscuous mode [ 1737.859058][T14799] debugfs: 'hsr0' already exists in 'hsr' [ 1737.868331][T14799] Cannot create hsr debugfs directory [ 1738.730604][T14799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1738.750607][T14799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1738.770756][T14799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1738.801035][T14799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1740.333672][T14799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.841198][T14799] veth0_vlan: entered promiscuous mode [ 1751.872985][T14799] veth1_vlan: entered promiscuous mode [ 1753.807716][T14799] veth0_macvtap: entered promiscuous mode [ 1753.812744][T14799] veth1_macvtap: entered promiscuous mode [ 1754.864279][T14761] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.879957][T14761] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.890252][T14761] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.891836][T14761] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.379044][T15229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.379833][T15229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.019488][T15239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.027170][T15239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.911763][T15109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.949418][T15109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.301415][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.383973][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.465716][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.584625][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.164167][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1769.175635][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1769.197986][ T52] bond0 (unregistering): Released all slaves [ 1769.333895][ T52] hsr_slave_0: left promiscuous mode [ 1769.373940][ T52] hsr_slave_1: left promiscuous mode [ 1769.398153][ T52] veth1_macvtap: left promiscuous mode [ 1769.398716][ T52] veth0_macvtap: left promiscuous mode [ 1769.403480][ T52] veth1_vlan: left promiscuous mode [ 1769.404661][ T52] veth0_vlan: left promiscuous mode [ 1770.235993][T15109] hsr_slave_0: entered promiscuous mode [ 1770.298713][T15109] hsr_slave_1: entered promiscuous mode [ 1770.307389][T15109] debugfs: 'hsr0' already exists in 'hsr' [ 1770.308533][T15109] Cannot create hsr debugfs directory [ 1771.448485][T15109] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1771.475356][T15109] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1771.508783][T15109] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1771.543175][T15109] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1773.992987][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.667730][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1783.080843][T15109] veth0_vlan: entered promiscuous mode [ 1783.133937][T15109] veth1_vlan: entered promiscuous mode [ 1783.305324][T15109] veth0_macvtap: entered promiscuous mode [ 1783.364005][T15109] veth1_macvtap: entered promiscuous mode [ 1783.575773][ T5516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.580732][ T5516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.600582][ T5516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.604788][ T5516] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.184150][ T28] audit: type=1400 audit(1791.060:1601): avc: denied { map } for pid=15641 comm="syz.6.2787" path="/proc/48" dev="proc" ino=33332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1792.743314][T13701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.878703][T13701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.029714][T13701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.112793][T13701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1793.573008][T13701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.598837][T13701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.621714][T13701] bond0 (unregistering): Released all slaves [ 1793.727572][T13701] hsr_slave_0: left promiscuous mode [ 1793.744320][T13701] hsr_slave_1: left promiscuous mode [ 1793.790158][T13701] veth1_macvtap: left promiscuous mode [ 1793.790721][T13701] veth0_macvtap: left promiscuous mode [ 1793.794267][T13701] veth1_vlan: left promiscuous mode [ 1793.794977][T13701] veth0_vlan: left promiscuous mode [ 1794.811240][T15682] fuse: Unknown parameter 'group_id00000000000000000000' [ 1795.652816][T15703] fuse: Unknown parameter 'group_id00000000000000000000' [ 1796.330183][T15710] ptrace attach of "/syz-executor exec"[15734] was attempted by "/syz-executor exec"[15710] [ 1796.573264][T15738] fuse: Unknown parameter 'group_id00000000000000000000' [ 1797.945884][T15760] fuse: Bad value for 'user_id' [ 1797.961937][T15760] fuse: Bad value for 'user_id' [ 1798.712096][T15777] fuse: Bad value for 'user_id' [ 1798.712662][T15777] fuse: Bad value for 'user_id' [ 1801.265880][T15836] fuse: Bad value for 'fd' [ 1803.608154][ T28] audit: type=1400 audit(1803.480:1602): avc: denied { lock } for pid=15886 comm="syz.6.2863" path="socket:[33706]" dev="sockfs" ino=33706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1807.569612][T15984] fuse: Bad value for 'fd' [ 1838.073153][T16100] can0: slcan on ptm0. [ 1838.157701][T16099] can0 (unregistered): slcan off ptm0. [ 1838.472142][T16110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.475703][T16110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.757862][T16114] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1839.035052][T16123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.037069][T16123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.115880][T12200] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1839.132610][T12200] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1841.965074][T16139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.967506][T16139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.232843][T16154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.234018][T16154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.571729][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.578590][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1851.519321][T16184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1851.521014][T16184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.856969][T16184] i2c i2c-1: died at extended address code [ 1860.981412][T16192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.984087][T16192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.265836][T16202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.281851][T16202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.601111][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1864.643010][T16214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1867.078363][T16220] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1868.374121][T16220] *** NOT YET: opcode c3 *** [ 1871.259126][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.262396][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.422157][T16237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.424797][T16237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.555044][T16241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.560119][T16241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.537319][T16253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.538223][T16253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.903848][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.910931][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1877.781196][T16281] netem: incorrect ge model size [ 1877.782032][T16281] netem: change failed [ 1887.164062][T16300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.173735][T16300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.348686][ T28] audit: type=1326 audit(1887.230:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.2996" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1887.349085][ T28] audit: type=1326 audit(1887.230:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.2996" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1887.351912][ T28] audit: type=1326 audit(1887.230:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.2996" exe="/syz-executor" sig=0 arch=40000028 syscall=398 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1887.353156][ T28] audit: type=1326 audit(1887.230:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16303 comm="syz.6.2996" exe="/syz-executor" sig=0 arch=40000028 syscall=240 compat=0 ip=0x12fc20 code=0x7ffc0000 [ 1896.631787][T16321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.635469][T16321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.080838][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.081641][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.292149][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.293461][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.719633][ T28] audit: type=1400 audit(1897.600:1607): avc: denied { getopt } for pid=16338 comm="syz.5.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1915.408046][ T28] audit: type=1400 audit(1915.280:1608): avc: denied { unmount } for pid=14799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1915.581659][T16370] binder: 16369:16370 ioctl c0306201 0 returned -14 [ 1915.923775][T16374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.924842][T16374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.045393][T16380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.050905][T16380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.559320][T16389] tmpfs: Unsupported parameter 'mpol' [ 1917.742433][T16399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.752392][T16399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1929.959733][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1930.052567][T16428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.055507][T16428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1943.885739][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3055'. [ 1944.383795][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3056'. [ 1945.247695][T16510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1945.259630][T16510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.831305][T16577] 8<--- cut here --- [ 1981.831872][T16577] Unable to handle kernel paging request at virtual address fee08004 when write [ 1981.831982][T16577] [fee08004] *pgd=80000080007003, *pmd=00000000 [ 1981.832811][T16577] Internal error: Oops: a06 [#1] SMP ARM [ 1981.835564][T16577] Modules linked in: [ 1981.835880][T16577] CPU: 1 UID: 0 PID: 16577 Comm: syz.5.3077 Tainted: G L syzkaller #0 PREEMPT [ 1981.836452][T16577] Tainted: [L]=SOFTLOCKUP [ 1981.836557][T16577] Hardware name: ARM-Versatile Express [ 1981.836887][T16577] PC is at subdev_8255_io+0x60/0x6c [ 1981.837060][T16577] LR is at subdev_8255_io+0x4c/0x6c [ 1981.837320][T16577] pc : [<81436160>] lr : [<8143614c>] psr: 60000013 [ 1981.837740][T16577] sp : e0349cb8 ip : e0349cb8 fp : e0349cd4 [ 1981.838471][T16577] r10: 00000000 r9 : 00000084 r8 : e0349da4 [ 1981.838917][T16577] r7 : 00008001 r6 : 0000009b r5 : 846d1840 r4 : 00008004 [ 1981.839668][T16577] r3 : 0000009b r2 : fee08004 r1 : 00000001 r0 : 846d1840 [ 1981.839977][T16577] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 1981.840740][T16577] Control: 30c5387d Table: 852add40 DAC: 00000000 [ 1981.841247][T16577] Register r0 information: slab kmalloc-192 start 846d1840 pointer offset 0 size 192 [ 1981.842607][T16577] Register r1 information: non-paged memory [ 1981.843157][T16577] Register r2 information: 0-page vmalloc region starting at 0xfee00000 allocated at pci_reserve_io+0x0/0x38 [ 1981.844354][T16577] Register r3 information: non-paged memory [ 1981.844746][T16577] Register r4 information: non-paged memory [ 1981.845201][T16577] Register r5 information: slab kmalloc-192 start 846d1840 pointer offset 0 size 192 [ 1981.846103][T16577] Register r6 information: non-paged memory [ 1981.846660][T16577] Register r7 information: non-paged memory [ 1981.847058][T16577] Register r8 information: 2-page vmalloc region starting at 0xe0348000 allocated at kernel_clone+0xac/0x428 [ 1981.847680][T16577] Register r9 information: non-paged memory [ 1981.848155][T16577] Register r10 information: NULL pointer [ 1981.848630][T16577] Register r11 information: 2-page vmalloc region starting at 0xe0348000 allocated at kernel_clone+0xac/0x428 [ 1981.849731][T16577] Register r12 information: 2-page vmalloc region starting at 0xe0348000 allocated at kernel_clone+0xac/0x428 [ 1981.850450][T16577] Process syz.5.3077 (pid: 16577, stack limit = 0xe0348000) [ 1981.851122][T16577] Stack: (0xe0349cb8 to 0xe034a000) [ 1981.851383][T16577] 9ca0: 81436100 00008001 [ 1981.851724][T16577] 9cc0: 846d1840 00008001 e0349cf4 e0349cd8 81435e3c 8143610c 00008001 805223ec [ 1981.852059][T16577] 9ce0: 873513c0 873513c0 e0349d14 e0349cf8 814361f4 81435df0 846d1840 00000000 [ 1981.852388][T16577] 9d00: 873513c0 00008001 e0349d54 e0349d18 814363a4 81436178 82b15584 833e0700 [ 1981.852774][T16577] 9d20: 82821780 00000000 00000000 829d6504 846d1840 00000000 e0349d90 846d1840 [ 1981.853092][T16577] 9d40: 00000000 82b2df9c e0349d8c e0349d58 81424d90 8143633c 40946400 00000000 [ 1981.853440][T16577] 9d60: e0349d7c 200000c0 846d1840 b5403587 40946400 8397a400 00000003 846d1870 [ 1981.853798][T16577] 9d80: e0349e4c e0349d90 814206c8 81424c90 35353238 00000000 00000000 00000000 [ 1981.854239][T16577] 9da0: 00000000 00008001 00000000 00000001 00000000 00000001 00000001 00000004 [ 1981.854586][T16577] 9dc0: 0000000b 0000005c 000000fd 00001002 00000008 0000000b 00000800 00000006 [ 1981.854990][T16577] 9de0: ffffffff 00000003 00000400 00000002 40000003 00000089 00000002 00000f27 [ 1981.855336][T16577] 9e00: 00000006 00000007 10000008 0000000f 00000008 00000004 0000fffe fffffff8 [ 1981.855941][T16577] 9e20: 00000000 6053bfdd 00000000 861dac00 846d1840 200000c0 40946400 8397a400 [ 1981.856410][T16577] 9e40: e0349f14 e0349e50 81421248 81420600 00000000 6053bfdd 00000000 00000000 [ 1981.856736][T16577] 9e60: 824b557c e0349ea4 0000005f 847b3600 00000064 846fe24c e0349ee4 e0349e88 [ 1981.857094][T16577] 9e80: 807cb7cc 807c1ba4 00000064 00000001 00000000 e0349ea4 8609fc10 83438f68 [ 1981.857685][T16577] 9ea0: 00006400 0000000b e0349e98 00000000 00000000 6053bfdd 00000000 861dac00 [ 1981.859696][T16577] 9ec0: 40946400 200000c0 200000c0 861dac00 00000005 8397a400 e0349ef4 e0349ee8 [ 1981.860159][T16577] 9ee0: 807cb8fc 6053bfdd e0349f14 00000000 861dac01 40946400 200000c0 861dac00 [ 1981.860472][T16577] 9f00: 00000005 8397a400 e0349fa4 e0349f18 8058f558 81421150 ecac8b10 8397a400 [ 1981.860797][T16577] 9f20: e0349f3c e0349f30 81ad9274 81ad9140 e0349f54 e0349f40 8025a85c 8028bff0 [ 1981.861117][T16577] 9f40: e0349fb0 40000000 e0349f84 e0349f58 80220bf8 8025a818 00000000 8281d27c [ 1981.861463][T16577] 9f60: e0349fb0 0013ddc0 ecac8b10 80220b4c 00000000 6053bfdd e0349fac 00000000 [ 1981.861873][T16577] 9f80: 00000000 00346310 00000036 8020029c 8397a400 00000036 00000000 e0349fa8 [ 1981.862218][T16577] 9fa0: 80200060 8058f320 00000000 00000000 00000005 40946400 200000c0 00000000 [ 1981.862546][T16577] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f340dc [ 1981.862919][T16577] 9fe0: 76f33e88 76f33e78 00018734 0012fc20 60000010 00000005 00000000 00000000 [ 1981.863337][T16577] Call trace: [ 1981.863620][T16577] [<81436100>] (subdev_8255_io) from [<81435e3c>] (subdev_8255_do_config+0x58/0x60) [ 1981.864071][T16577] r7:00008001 r6:846d1840 r5:00008001 r4:81436100 [ 1981.864520][T16577] [<81435de4>] (subdev_8255_do_config) from [<814361f4>] (subdev_8255_io_init+0x88/0x98) [ 1981.865058][T16577] r4:873513c0 [ 1981.865222][T16577] [<8143616c>] (subdev_8255_io_init) from [<814363a4>] (dev_8255_attach+0x74/0x120) [ 1981.865690][T16577] r7:00008001 r6:873513c0 r5:00000000 r4:846d1840 [ 1981.865973][T16577] [<81436330>] (dev_8255_attach) from [<81424d90>] (comedi_device_attach+0x10c/0x248) [ 1981.867161][T16577] r10:82b2df9c r9:00000000 r8:846d1840 r7:e0349d90 r6:00000000 r5:846d1840 [ 1981.867715][T16577] r4:829d6504 [ 1981.867950][T16577] [<81424c84>] (comedi_device_attach) from [<814206c8>] (do_devconfig_ioctl+0xd4/0x21c) [ 1981.868389][T16577] r10:846d1870 r9:00000003 r8:8397a400 r7:40946400 r6:b5403587 r5:846d1840 [ 1981.869411][T16577] r4:200000c0 [ 1981.869763][T16577] [<814205f4>] (do_devconfig_ioctl) from [<81421248>] (comedi_unlocked_ioctl+0x104/0x1c80) [ 1981.870340][T16577] r8:8397a400 r7:40946400 r6:200000c0 r5:846d1840 r4:861dac00 [ 1981.870896][T16577] [<81421144>] (comedi_unlocked_ioctl) from [<8058f558>] (sys_ioctl+0x244/0xb5c) [ 1981.871371][T16577] r10:8397a400 r9:00000005 r8:861dac00 r7:200000c0 r6:40946400 r5:861dac01 [ 1981.871675][T16577] r4:00000000 [ 1981.871972][T16577] [<8058f314>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1981.872351][T16577] Exception stack(0xe0349fa8 to 0xe0349ff0) [ 1981.872870][T16577] 9fa0: 00000000 00000000 00000005 40946400 200000c0 00000000 [ 1981.873363][T16577] 9fc0: 00000000 00000000 00346310 00000036 003462d8 00000000 00000001 76f340dc [ 1981.873696][T16577] 9fe0: 76f33e88 76f33e78 00018734 0012fc20 [ 1981.874039][T16577] r10:00000036 r9:8397a400 r8:8020029c r7:00000036 r6:00346310 r5:00000000 [ 1981.874364][T16577] r4:00000000 [ 1981.874860][T16577] Code: e6ef3076 e0842002 e7f32052 e2422612 (e5c23000) [ 1981.877477][T16577] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1981.942023][ T28] audit: type=1400 audit(1981.810:1609): avc: denied { read } for pid=2894 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1981.942286][ T28] audit: type=1400 audit(1981.810:1610): avc: denied { search } for pid=2894 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.942399][ T28] audit: type=1400 audit(1981.810:1611): avc: denied { search } for pid=2894 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.942501][ T28] audit: type=1400 audit(1981.810:1612): avc: denied { add_name } for pid=2894 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.942602][ T28] audit: type=1400 audit(1981.810:1613): avc: denied { create } for pid=2894 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1981.942704][ T28] audit: type=1400 audit(1981.810:1614): avc: denied { append open } for pid=2894 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1981.942806][ T28] audit: type=1400 audit(1981.810:1615): avc: denied { getattr } for pid=2894 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1981.960261][T16577] Kernel panic - not syncing: Fatal exception [ 1981.963206][T16577] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:54:59 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=0000b79b R02=00000000 R03=81ad9b40 R04=00000006 R05=828f8348 R06=00000001 R07=828f8340 R08=872f5400 R09=828f8348 R10=00000000 R11=df99dbec R12=df99dbf0 R13=df99dbe0 R14=80341078 R15=81ad9b50 PSR=00000093 ---- A S svc32 s00=ff420000 s01=000cffff d00=000cffffff420000 s02=00090000 s03=00000000 d01=0000000000090000 s04=7b97fa3b s05=f4bb455c d02=f4bb455c7b97fa3b s06=89cd16fb s07=ba729d97 d03=ba729d9789cd16fb s08=fc917079 s09=2ac03e3c d04=2ac03e3cfc917079 s10=6c44ee46 s11=276ad616 d05=276ad6166c44ee46 s12=4a7b2782 s13=3aa7b63f d06=3aa7b63f4a7b2782 s14=af813d3c s15=11a55000 d07=11a55000af813d3c s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=59eb2092 s33=9be6f216 d16=9be6f21659eb2092 s34=0369346a s35=415d224f d17=415d224f0369346a s36=e9d9738c s37=15924ef4 d18=15924ef4e9d9738c s38=441e5d3e s39=abc8fa0c d19=abc8fa0c441e5d3e s40=48f0ed9c s41=d75e33cf d20=d75e33cf48f0ed9c s42=45a02ab0 s43=29102b4a d21=29102b4a45a02ab0 s44=bbdf4613 s45=2972a556 d22=2972a556bbdf4613 s46=8721b94b s47=18145c13 d23=18145c138721b94b s48=0000000b s49=000a0004 d24=000a00040000000b s50=00080000 s51=00000000 d25=0000000000080000 s52=00000300 s53=ffea0000 d26=ffea000000000300 s54=000cffff s55=00010000 d27=00010000000cffff s56=00000000 s57=00000300 d28=0000030000000000 s58=00000000 s59=0010000a d29=0010000a00000000 s60=0008000f s61=000a0004 d30=000a00040008000f s62=000c0000 s63=00160000 d31=00160000000c0000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=e0349a24 R01=00000012 R02=00000048 R03=80000193 R04=00000000 R05=82827484 R06=dddda3d5 R07=00000000 R08=e0349a24 R09=00000000 R10=828273d0 R11=e03499e4 R12=e03499e8 R13=e0349990 R14=802e2234 R15=802e84b0 PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000