last executing test programs: 9.456045205s ago: executing program 4 (id=2443): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r1, 0x3b8c, &(0x7f00000000c0)={0x30, r2, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000140)=""/178}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x401}}) 9.355095045s ago: executing program 4 (id=2444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1}, 0x6e) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r6, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000a80)) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x8824000) 9.188103368s ago: executing program 0 (id=2446): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bind$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) pipe2(&(0x7f0000000040), 0x84000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, 0x3, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf361}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9c6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000000300), 0xd00) 8.305172178s ago: executing program 0 (id=2447): r0 = syz_open_dev$video4linux(0x0, 0x4, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80009}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000000011000109000000000000000072666337353339657370286f666228746561292c626c616b6532732d3235362d78383629000000"], 0xe0}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r9, 0x1}}, 0x18) r10 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000001800)="52e6d86652d772f2326dbe769f649ea4f50843060c139c20b51054b26dbb3540f70dfd09de29b6e635311dc11c20fef7ff24a59752007ec320f1d4c338bbb237c7e56d26ca173a505a211faad4231144ad3c05d1cfdc8dbbaf98e2dbc3569e58333b512a59f2cb04b2a8eeb0e727b5400455ac6ccb59490335741d194fa149cb6497c6693e0b3f5aff530dc336001393e79e5bb3d5d5baa56240") ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000280)=""/16, 0x10}], 0x4, &(0x7f0000000400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x41) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000380)={0x9, 0x1, @value=0x7ff}) 8.26822278s ago: executing program 4 (id=2448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x25c0}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4800000, "251ff3cc3459335b3ba5528bc66aa24c8dcc181e60c7f0e6ac959567e93528a2"}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x2, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x28) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) 8.107049343s ago: executing program 1 (id=2450): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2ea003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000c300)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000100000020080"], 0x124}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x1b, 0x8a, 0x4000069}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000060000000300000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c1270c26fc2bfc46028d8d61aa87ae8ed024138360f0c307bedf680a0ef0056abf5e5fbe95bb1dabaecce4d5b759b7450383f7116e4ae9d5e5edde1e2bbf65e38c5f1d8b0329cfa74b2d33863499b324d06b182dd8e040a9c0aee0b0e24f79ea08979849327bab9e4f5fdf00031763a385d2d530cba8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000002000000000117d770000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) 7.192099673s ago: executing program 2 (id=2451): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000000)={0x1, 0x80000001}, 0x0) getsockopt$sock_int(r6, 0x1, 0x28, 0x0, &(0x7f0000000140)) 6.234934522s ago: executing program 2 (id=2452): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.148009968s ago: executing program 0 (id=2453): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@dev, @remote, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.091107832s ago: executing program 4 (id=2454): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev}}}}}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x8, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x4018084) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0xc3ff}, 0x1, 0x0, 0x0, 0x40}, 0x0) pause() fcntl$setsig(r1, 0xa, 0x12) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x48, 0x2f, 0xff, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x6, 0x0]}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}}, 0x0) dup2(r1, r2) r7 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0xf0, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x6a, 0xffff}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfc, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fcntl$setown(r1, 0x8, r0) 6.00123806s ago: executing program 3 (id=2455): getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000002cc0)=0xfffffefe) 5.942671546s ago: executing program 1 (id=2456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000cc0)=@newtaction={0x74, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, 0x0, 0x0) getsockopt$sock_int(r6, 0x1, 0x28, 0x0, 0x0) 5.863827432s ago: executing program 3 (id=2457): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000ac00"/88], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000004000000040000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000ddb14f9c942c68fbfd0d470365687f19bf51d32504c27b09861cb1fe53618fbcbd06e8d7efd624150c4b847abd68f6b3d42527c93a473962b884cdbd26218f4ffbe08fa7aae556e05c6e7c3cd7960469ebfb4052f367c03d"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) clock_gettime(0x2, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x120000}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x60040, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r2, r3) kcmp(r0, 0x0, 0x4, r1, 0xffffffffffffffff) 4.447153912s ago: executing program 3 (id=2458): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000ac00"/88], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000004000000040000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000ddb14f9c942c68fbfd0d470365687f19bf51d32504c27b09861cb1fe53618fbcbd06e8d7efd624150c4b847abd68f6b3d42527c93a473962b884cdbd26218f4ffbe08fa7aae556e05c6e7c3cd7960469ebfb4052f367c03d"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800007, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r4}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) clock_gettime(0x2, &(0x7f0000000280)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x120000}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x60040, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r7, r8) kcmp(r1, r2, 0x4, r3, r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r9) 4.193132324s ago: executing program 1 (id=2459): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)=0x28) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f00000000c0)) 4.087117489s ago: executing program 3 (id=2460): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x18c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/237, 0xed) 3.953233062s ago: executing program 3 (id=2461): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7b81}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) 3.189244879s ago: executing program 0 (id=2462): r0 = syz_open_dev$video4linux(0x0, 0x4, 0x0) r1 = signalfd4(r0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80009}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000000011000109000000000000000072666337353339657370286f666228746561292c626c616b6532732d3235362d78383629000000"], 0xe0}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), r9, 0x1}}, 0x18) r10 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000001800)="52e6d86652d772f2326dbe769f649ea4f50843060c139c20b51054b26dbb3540f70dfd09de29b6e635311dc11c20fef7ff24a59752007ec320f1d4c338bbb237c7e56d26ca173a505a211faad4231144ad3c05d1cfdc8dbbaf98e2dbc3569e58333b512a59f2cb04b2a8eeb0e727b5400455ac6ccb59490335741d194fa149cb6497c6693e0b3f5aff530dc336001393e79e5bb3d5d5baa56240cd") ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) recvmsg$unix(r1, 0x0, 0x41) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000380)={0x9, 0x1, @value=0x7ff}) 3.18857289s ago: executing program 1 (id=2463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}}, 0x0) 3.137095869s ago: executing program 1 (id=2464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x2, 0x14, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x0, 0xb, 0x1, 0xb, 0x4, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x554}], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000002200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000fc0)=[0x1], &(0x7f0000001000)=[{0x0, 0x5, 0x10, 0xc}, {0x0, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x8}, {0x1, 0x3, 0xf, 0x8}, {0x4, 0x4, 0x0, 0xf}], 0x10, 0xc00000, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000300)="1f59cae5639cf15b04e0d625d96f0e6d5b5ac726b2c5590b57e7a61c0950f033a94c40da6183afb9321768ea8396fd428ff2860cae2d8713376468de8f0b92a502fa001fb7caa4cf48cfc89e753d76b163fd607c7907bc14d6560c08a667b105424a54bfcc3f564bffa5115ccb7923e0aac334f027399c59bdfa9fe668963cbd08be04d24f7981fa096b448f426f73637f649fb1ae81e36f3a70372c5bd2801916fdbee325092def000a95df3c6d4b", 0xaf, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r5}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sha512-avx2\x00'}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab", 0xe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 3.120931225s ago: executing program 2 (id=2465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) getrusage(0x0, &(0x7f0000000180)) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0xc02, 0x0) dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@abs={0x1}, 0x6e) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) connect$unix(r6, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0x1) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, &(0x7f0000000a80)) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x8824000) 2.948725531s ago: executing program 3 (id=2466): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e3a03f089911aa68abc50102030109022d01010000000009040700038a4820000905010240040408ff09050f010004047f020905020820004001ff"], 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) getpgid(0xffffffffffffffff) 1.784030089s ago: executing program 2 (id=2467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)="ba30a945e46b03d7dd459192252b6e3c518d8badd03bee30080487b36c9dc92d57f60c92e675acf419e99d5ca8758bdc1e0ddc04ee8d370e9e5c1faa5b4fefed59d0931c498f0c7a38aeae2c26014b38"}) 1.635575361s ago: executing program 0 (id=2468): r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0x109001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semtimedop(r5, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001000030400"/20, @ANYRES32=r6, @ANYBLOB="a5fdad88000000000a000100aaaa"], 0x2c}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @rand_addr=0x64010102, r6}, 0xc) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, &(0x7f00000001c0)={{}, 0x7}) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) 1.576766172s ago: executing program 2 (id=2469): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b702000000000000850000ac00"/88], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0d00000004000000040000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="00000000000000000000000000ddb14f9c942c68fbfd0d470365687f19bf51d32504c27b09861cb1fe53618fbcbd06e8d7efd624150c4b847abd68f6b3d42527c93a473962b884cdbd26218f4ffbe08fa7aae556e05c6e7c3cd7960469ebfb4052f367c03d"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800007, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='percpu_free_percpu\x00', r4}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) clock_gettime(0x2, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x120000}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x60040, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup2(r7, r8) kcmp(r1, r2, 0x4, r3, r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r9) 1.088491003s ago: executing program 2 (id=2470): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x2, 0x14, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x0, 0xb, 0x1, 0xb, 0x4, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x554}], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000002200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000fc0)=[0x1], &(0x7f0000001000)=[{0x0, 0x5, 0x10, 0xc}, {0x0, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x8}, {0x1, 0x3, 0xf, 0x8}, {0x4, 0x4, 0x0, 0xf}], 0x10, 0xc00000, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r5}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sha512-avx2\x00'}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab", 0xe) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1e8640, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x82}}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 726.620431ms ago: executing program 1 (id=2471): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 719.847802ms ago: executing program 4 (id=2472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="110000000400000004000000ff00100004000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000022bbccfa0cd8cb7bcdb9079879c79c80e10de73089c40af1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4044051) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 430.75719ms ago: executing program 0 (id=2473): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x5, 0x3, 0xfffffff9, 0x4]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x8, [{@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0xf, 0x0, [@dev, @remote, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=2474): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)=0x28) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): o Text: inactive [ 519.577431][T12002] vivid-001: RDS Traffic Announcement: false inactive [ 519.587368][T12002] vivid-001: RDS Traffic Program: false inactive [ 519.594231][T12002] vivid-001: RDS Music: false inactive [ 519.599958][T12002] vivid-001: ================== END STATUS ================== [ 520.077804][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'. [ 520.327760][T12021] FAULT_INJECTION: forcing a failure. [ 520.327760][T12021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.353570][T12021] CPU: 0 UID: 0 PID: 12021 Comm: syz.4.1673 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 520.364335][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 520.374384][T12021] Call Trace: [ 520.377638][T12021] [ 520.380548][T12021] dump_stack_lvl+0x16c/0x1f0 [ 520.385214][T12021] should_fail_ex+0x497/0x5b0 [ 520.389876][T12021] _copy_to_user+0x32/0xd0 [ 520.394277][T12021] simple_read_from_buffer+0xd0/0x160 [ 520.399634][T12021] proc_fail_nth_read+0x198/0x270 [ 520.404653][T12021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.410206][T12021] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.415740][T12021] vfs_read+0x1df/0xbe0 [ 520.419874][T12021] ? __fget_files+0x1fc/0x3a0 [ 520.424537][T12021] ? __pfx___mutex_lock+0x10/0x10 [ 520.429545][T12021] ? __pfx_vfs_read+0x10/0x10 [ 520.434211][T12021] ? __fget_files+0x206/0x3a0 [ 520.438884][T12021] ksys_read+0x12b/0x250 [ 520.443114][T12021] ? __pfx_ksys_read+0x10/0x10 [ 520.447866][T12021] do_syscall_64+0xcd/0x250 [ 520.452358][T12021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.458252][T12021] RIP: 0033:0x7ff78cd8472c [ 520.462648][T12021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 520.482235][T12021] RSP: 002b:00007ff78daff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.490626][T12021] RAX: ffffffffffffffda RBX: 00007ff78cf75fa0 RCX: 00007ff78cd8472c [ 520.498576][T12021] RDX: 000000000000000f RSI: 00007ff78daff0a0 RDI: 0000000000000006 [ 520.506525][T12021] RBP: 00007ff78daff090 R08: 0000000000000000 R09: 0000000000000000 [ 520.514473][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.522418][T12021] R13: 0000000000000000 R14: 00007ff78cf75fa0 R15: 00007ffcdbfe7028 [ 520.530379][T12021] [ 523.003438][ T5865] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 523.179914][ T5865] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 523.203339][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.339642][ T5865] usb 4-1: config 0 descriptor?? [ 523.497584][T12062] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 523.526047][T12061] QAT: Device 7 not found [ 523.579066][T12070] 9pnet_fd: Insufficient options for proto=fd [ 523.597721][ T5865] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 523.612977][ T5865] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 524.731497][ T5865] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 524.738372][ T5865] [drm] Initialized udl on minor 2 [ 524.743571][T12082] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1690'. [ 525.139556][ T25] libceph: connect (1)[c::]:6789 error -101 [ 525.145699][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 525.238925][T12087] ceph: No mds server is up or the cluster is laggy [ 525.403105][ T5862] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 525.594821][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.558842][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.570276][ T5862] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 526.579452][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.629339][ T5862] usb 5-1: config 0 descriptor?? [ 527.141971][ T5865] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 527.152672][ T5865] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 527.192971][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 527.215576][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 527.226583][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 527.240805][ T5865] usb 4-1: USB disconnect, device number 27 [ 527.639824][T12112] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 527.649075][T12112] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 527.721862][T12114] netlink: 'syz.3.1697': attribute type 2 has an invalid length. [ 528.165206][ T5862] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 528.210405][ T5862] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 528.218030][ T5862] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 528.235579][ T5862] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -32 [ 528.257631][ T29] audit: type=1326 audit(1734060057.937:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.303976][T12109] vivid-001: ================= START STATUS ================= [ 528.317826][T12109] vivid-001: Radio HW Seek Mode: Bounded [ 528.334820][ T29] audit: type=1326 audit(1734060057.937:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.384789][ T29] audit: type=1326 audit(1734060057.987:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.427488][T12109] vivid-001: Radio Programmable HW Seek: false [ 528.438322][T12109] vivid-001: RDS Rx I/O Mode: Block I/O [ 528.446399][T12109] vivid-001: Generate RBDS Instead of RDS: false [ 528.457590][T12109] vivid-001: RDS Reception: true [ 528.507471][ T29] audit: type=1326 audit(1734060057.987:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.542171][T12109] vivid-001: RDS Program Type: 0 inactive [ 528.557684][T12109] vivid-001: RDS PS Name: inactive [ 528.573077][T12109] vivid-001: RDS Radio Text: inactive [ 528.578730][T12109] vivid-001: RDS Traffic Announcement: false inactive [ 528.587453][T12109] vivid-001: RDS Traffic Program: false inactive [ 528.595082][T12109] vivid-001: RDS Music: false inactive [ 528.600973][T12109] vivid-001: ================== END STATUS ================== [ 528.601127][ T29] audit: type=1326 audit(1734060057.987:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.664379][ T29] audit: type=1326 audit(1734060057.987:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.758009][ T29] audit: type=1326 audit(1734060057.987:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.781969][T12126] QAT: Device 7 not found [ 528.832183][ T29] audit: type=1326 audit(1734060057.987:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 528.918769][ T29] audit: type=1326 audit(1734060057.987:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 529.000390][ T29] audit: type=1326 audit(1734060057.987:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ff78cd85d19 code=0x7ffc0000 [ 529.233290][ T5862] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 529.394543][ T5862] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 529.404639][ T5862] usb 4-1: config 0 has no interface number 0 [ 529.422957][ T5862] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 529.442890][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.459869][ T5862] usb 4-1: Product: syz [ 529.468736][ T5862] usb 4-1: Manufacturer: syz [ 529.488366][ T5862] usb 4-1: SerialNumber: syz [ 529.507625][ T5862] usb 4-1: config 0 descriptor?? [ 529.530613][ T5862] as10x_usb: device has been detected [ 529.546044][ T5862] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 529.580210][ T5865] usb 5-1: USB disconnect, device number 19 [ 529.622896][ T5862] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 529.689773][ T5862] as10x_usb: error during firmware upload part1 [ 529.724965][ T5862] Registered device PCTV Systems picoStick (74e) [ 529.805697][ T5862] usb 4-1: USB disconnect, device number 28 [ 529.870995][ T5862] Unregistered device PCTV Systems picoStick (74e) [ 529.873258][ T5862] as10x_usb: device has been disconnected [ 530.203099][ T5817] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 530.345744][T12153] FAULT_INJECTION: forcing a failure. [ 530.345744][T12153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.359196][T12153] CPU: 1 UID: 0 PID: 12153 Comm: syz.2.1708 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 530.369969][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 530.380023][T12153] Call Trace: [ 530.383298][T12153] [ 530.386226][T12153] dump_stack_lvl+0x16c/0x1f0 [ 530.390911][T12153] should_fail_ex+0x497/0x5b0 [ 530.395599][T12153] _copy_from_user+0x2e/0xd0 [ 530.400201][T12153] copy_msghdr_from_user+0x99/0x160 [ 530.405409][T12153] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 530.411237][T12153] ___sys_sendmsg+0xff/0x1e0 [ 530.415840][T12153] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.421057][T12153] ? __pfx_lock_release+0x10/0x10 [ 530.426084][T12153] ? trace_lock_acquire+0x14e/0x1f0 [ 530.431290][T12153] ? vfs_write+0xa9b/0x1150 [ 530.435806][T12153] ? __fget_files+0x206/0x3a0 [ 530.440494][T12153] __sys_sendmsg+0x16e/0x220 [ 530.445098][T12153] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.450234][T12153] do_syscall_64+0xcd/0x250 [ 530.454744][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.460646][T12153] RIP: 0033:0x7fee66985d19 [ 530.465065][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.484677][T12153] RSP: 002b:00007fee647b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.493093][T12153] RAX: ffffffffffffffda RBX: 00007fee66b76160 RCX: 00007fee66985d19 [ 530.501061][T12153] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000008 [ 530.509031][T12153] RBP: 00007fee647b4090 R08: 0000000000000000 R09: 0000000000000000 [ 530.517001][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.524971][T12153] R13: 0000000000000000 R14: 00007fee66b76160 R15: 00007ffc160a4a88 [ 530.532957][T12153] [ 530.823130][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 530.831688][ T5817] usb 2-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 530.914146][T12161] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1709'. [ 531.105921][ T5817] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 531.404119][T12167] netlink: 'syz.2.1710': attribute type 2 has an invalid length. [ 532.086926][ T5817] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 255 [ 532.097031][ T5817] usb 2-1: config 1 interface 0 has no altsetting 0 [ 532.170574][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 532.177380][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 532.345145][ T5817] usb 2-1: string descriptor 0 read error: -71 [ 532.351444][ T5817] usb 2-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 532.360970][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.380102][ T5817] usb 2-1: can't set config #1, error -71 [ 532.394845][ T5817] usb 2-1: USB disconnect, device number 11 [ 532.454753][T12161] ceph: No mds server is up or the cluster is laggy [ 532.463452][ T25] libceph: connect (1)[c::]:6789 error -101 [ 532.469503][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 532.676146][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 533.383009][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 533.398886][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.420161][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 533.455859][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 533.457433][T12194] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1717'. [ 533.566678][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.639341][ T25] usb 3-1: config 0 descriptor?? [ 533.755447][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 533.761513][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 534.348265][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 534.354716][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 534.449274][T12204] vivid-001: ================= START STATUS ================= [ 534.457433][T12204] vivid-001: Radio HW Seek Mode: Bounded [ 534.463814][T12204] vivid-001: Radio Programmable HW Seek: false [ 534.529469][T12204] vivid-001: RDS Rx I/O Mode: Block I/O [ 534.535530][T12204] vivid-001: Generate RBDS Instead of RDS: false [ 534.542743][T12204] vivid-001: RDS Reception: true [ 534.548079][T12204] vivid-001: RDS Program Type: 0 inactive [ 534.554058][T12204] vivid-001: RDS PS Name: inactive [ 534.560464][T12204] vivid-001: RDS Radio Text: inactive [ 534.566244][T12204] vivid-001: RDS Traffic Announcement: false inactive [ 534.573343][T12204] vivid-001: RDS Traffic Program: false inactive [ 534.736397][T12204] vivid-001: RDS Music: false inactive [ 534.742020][T12204] vivid-001: ================== END STATUS ================== [ 535.329289][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 535.335445][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 535.778921][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 535.803651][ T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 535.944852][ T25] usb 3-1: USB disconnect, device number 15 [ 535.970316][T12214] vivid-003: ================= START STATUS ================= [ 535.979243][T12218] fuse: Bad value for 'fd' [ 536.588632][T12214] vivid-003: Radio HW Seek Mode: Bounded [ 536.598466][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 536.598482][ T29] audit: type=1400 audit(1734060065.737:431): avc: denied { write } for pid=12215 comm="syz.2.1725" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 536.628596][T12214] vivid-003: Radio Programmable HW Seek: false [ 536.636574][T12214] vivid-003: RDS Rx I/O Mode: Block I/O [ 536.812499][T12195] ceph: No mds server is up or the cluster is laggy [ 536.833478][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 536.839536][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 536.850312][T12214] vivid-003: Generate RBDS Instead of RDS: false [ 537.571444][T12214] vivid-003: RDS Reception: true [ 537.577078][T12214] vivid-003: RDS Program Type: 0 inactive [ 537.586623][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 537.592716][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 537.633782][T12214] vivid-003: RDS PS Name: inactive [ 537.639105][T12214] vivid-003: RDS Radio Text: inactive [ 537.645556][T12214] vivid-003: RDS Traffic Announcement: false inactive [ 537.652405][T12214] vivid-003: RDS Traffic Program: false inactive [ 537.662557][T12214] vivid-003: RDS Music: false inactive [ 537.668169][T12214] vivid-003: ================== END STATUS ================== [ 537.807803][ T29] audit: type=1400 audit(1734060067.417:432): avc: denied { append } for pid=12232 comm="syz.0.1728" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.605862][T12249] netdevsim netdevsim1: Direct firmware load for ωτ failed with error -2 [ 538.614897][T12249] netdevsim netdevsim1: Falling back to sysfs fallback for: ωτ [ 538.683807][T12250] netlink: 'syz.1.1731': attribute type 2 has an invalid length. [ 540.591554][T12266] fuse: Bad value for 'fd' [ 540.659641][T12267] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1736'. [ 540.668799][T12267] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1736'. [ 540.677799][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1736'. [ 541.683331][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 541.954038][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 541.999063][ T25] usb 4-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 542.063204][ T25] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 542.128279][ T25] usb 4-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 255 [ 542.159934][ T25] usb 4-1: config 1 interface 0 has no altsetting 0 [ 542.179218][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 542.190411][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.198654][ T25] usb 4-1: Product: syz [ 542.207028][ T25] usb 4-1: Manufacturer: syz [ 542.212020][ T25] usb 4-1: SerialNumber: syz [ 542.219524][T12231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.227047][T12231] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.430177][T12285] IPv6: Can't replace route, no match found [ 542.434053][ T972] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 542.448326][ T25] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 542.467091][ T25] usb 4-1: USB disconnect, device number 29 [ 542.740286][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.752524][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.762714][ T972] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 542.771852][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.299105][ T972] usb 5-1: config 0 descriptor?? [ 543.760150][ T972] pyra 0003:1E7D:2CF6.000B: unknown main item tag 0xd [ 543.767535][ T972] pyra 0003:1E7D:2CF6.000B: item fetching failed at offset 6/7 [ 543.898493][T12300] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 543.907204][T12300] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 544.433006][ T972] pyra 0003:1E7D:2CF6.000B: parse failed [ 544.438736][ T972] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -22 [ 544.960160][T12311] fuse: Bad value for 'fd' [ 545.700717][T12320] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 545.710438][T12320] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 546.646798][T12334] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 546.655466][T12334] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 547.751789][ T25] usb 5-1: USB disconnect, device number 20 [ 548.515514][T12348] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 548.524021][T12348] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1758'. [ 549.547932][ T29] audit: type=1400 audit(1734060079.237:433): avc: denied { name_bind 0x1000000 } for pid=12359 comm="syz.4.1765" path="socket:[39841]" dev="sockfs" ino=39841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 549.570853][T12361] QAT: Device 7 not found [ 549.665882][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 549.814113][ T29] audit: type=1400 audit(1734060079.347:434): avc: denied { mount } for pid=12358 comm="syz.3.1764" name="/" dev="pstore" ino=3542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 550.214752][ T29] audit: type=1400 audit(1734060079.907:435): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 550.372298][T12373] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 550.381068][T12373] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 552.048669][T12404] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1774'. [ 552.057780][T12404] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1774'. [ 552.067308][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1774'. [ 552.364786][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 553.649810][ T29] audit: type=1400 audit(1734060083.337:436): avc: denied { open } for pid=12422 comm="syz.3.1785" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 553.699129][ T29] audit: type=1400 audit(1734060083.377:437): avc: denied { ioctl } for pid=12422 comm="syz.3.1785" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 553.724650][ T29] audit: type=1400 audit(1734060083.377:438): avc: denied { getopt } for pid=12422 comm="syz.3.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.936495][T12434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1787'. [ 556.293028][ T5864] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 557.203229][ T29] audit: type=1400 audit(1734060086.877:439): avc: denied { create } for pid=12442 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 557.312496][T12466] netlink: 'syz.4.1793': attribute type 2 has an invalid length. [ 561.149481][T12489] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 561.158210][T12489] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 562.958986][T12511] IPv6: Can't replace route, no match found [ 565.092046][ T29] audit: type=1400 audit(1734060094.777:440): avc: denied { mount } for pid=12501 comm="syz.0.1804" name="/" dev="ramfs" ino=41113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 565.121129][T12526] erofs (device erofs): cannot find valid erofs superblock [ 565.148458][ T29] audit: type=1400 audit(1734060094.807:441): avc: denied { mounton } for pid=12501 comm="syz.0.1804" path="/385/file0/file0" dev="ramfs" ino=41114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 565.362414][ T29] audit: type=1400 audit(1734060095.047:442): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 565.463106][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 565.614528][ T29] audit: type=1326 audit(1734060095.227:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.3.1811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68f585d19 code=0x0 [ 565.661090][ T25] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 565.731240][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 565.877421][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 565.919318][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 565.930652][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.952953][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.962153][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.974720][ T25] usb 3-1: config 0 descriptor?? [ 565.982837][T12528] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 566.582687][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1815'. [ 566.607422][ T972] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 567.239274][ T25] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 567.249852][ T25] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 567.263539][ T25] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 567.949908][T12562] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 567.965968][T12562] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 568.125186][ T972] usb 2-1: device not accepting address 13, error -71 [ 568.808080][ T29] audit: type=1400 audit(1734060097.557:444): avc: denied { create } for pid=12554 comm="syz.0.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 569.227403][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1820'. [ 569.393723][ T5817] usb 3-1: USB disconnect, device number 16 [ 569.547723][T12584] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 569.588481][T12584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.454223][T12569] vivid-002: ================= START STATUS ================= [ 570.498728][T12569] vivid-002: Radio HW Seek Mode: Bounded [ 570.537500][T12569] vivid-002: Radio Programmable HW Seek: false [ 570.548865][T12569] vivid-002: RDS Rx I/O Mode: Block I/O [ 570.608377][T12569] vivid-002: Generate RBDS Instead of RDS: false [ 570.628271][T12569] vivid-002: RDS Reception: true [ 570.663364][T12596] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 570.682699][T12596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.701904][T12569] vivid-002: RDS Program Type: 0 inactive [ 570.728126][T12569] vivid-002: RDS PS Name: inactive [ 570.748155][T12569] vivid-002: RDS Radio Text: inactive [ 570.794685][T12569] vivid-002: RDS Traffic Announcement: false inactive [ 570.801492][T12569] vivid-002: RDS Traffic Program: false inactive [ 570.961389][T12569] vivid-002: RDS Music: false inactive [ 570.967174][T12569] vivid-002: ================== END STATUS ================== [ 571.052036][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 572.785755][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 574.261202][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1834'. [ 574.640356][ T29] audit: type=1326 audit(1734060104.327:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12629 comm="syz.4.1837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x0 [ 575.087455][T12634] vivid-003: ================= START STATUS ================= [ 575.095182][T12634] vivid-003: Radio HW Seek Mode: Bounded [ 575.100804][T12634] vivid-003: Radio Programmable HW Seek: false [ 575.107208][T12634] vivid-003: RDS Rx I/O Mode: Block I/O [ 575.112749][T12634] vivid-003: Generate RBDS Instead of RDS: false [ 575.119089][T12634] vivid-003: RDS Reception: true [ 575.124037][T12634] vivid-003: RDS Program Type: 0 inactive [ 575.129744][T12634] vivid-003: RDS PS Name: inactive [ 575.134967][T12634] vivid-003: RDS Radio Text: inactive [ 575.140414][T12634] vivid-003: RDS Traffic Announcement: false inactive [ 575.147199][T12634] vivid-003: RDS Traffic Program: false inactive [ 575.153580][T12634] vivid-003: RDS Music: false inactive [ 575.159035][T12634] vivid-003: ================== END STATUS ================== [ 575.428536][T12653] QAT: Device 7 not found [ 575.950601][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 576.593535][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 576.652221][T12665] IPv6: Can't replace route, no match found [ 576.913271][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 576.925624][ T25] usb 1-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 577.193457][ T25] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 577.223491][ T25] usb 1-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 255 [ 577.450762][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 577.499937][ T25] usb 1-1: string descriptor 0 read error: -71 [ 577.523008][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 577.559316][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.753193][ T25] usb 1-1: can't set config #1, error -71 [ 577.800089][ T25] usb 1-1: USB disconnect, device number 17 [ 577.902914][ T5864] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 580.313298][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 580.320972][ T5864] usb 4-1: device descriptor read/all, error -71 [ 580.615823][T12703] vivid-003: ================= START STATUS ================= [ 580.623981][T12703] vivid-003: Radio HW Seek Mode: Bounded [ 580.630588][T12703] vivid-003: Radio Programmable HW Seek: false [ 580.638364][T12703] vivid-003: RDS Rx I/O Mode: Block I/O [ 580.644401][T12703] vivid-003: Generate RBDS Instead of RDS: false [ 580.651245][T12703] vivid-003: RDS Reception: true [ 580.657183][T12703] vivid-003: RDS Program Type: 0 inactive [ 580.663282][T12703] vivid-003: RDS PS Name: inactive [ 580.669045][T12703] vivid-003: RDS Radio Text: inactive [ 580.675069][T12703] vivid-003: RDS Traffic Announcement: false inactive [ 580.683868][T12703] vivid-003: RDS Traffic Program: false inactive [ 580.690480][T12703] vivid-003: RDS Music: false inactive [ 580.697639][T12703] vivid-003: ================== END STATUS ================== [ 581.087706][T12702] QAT: Device 7 not found [ 581.339584][T12718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1858'. [ 582.962897][ T5817] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 583.535995][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.547093][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.556900][ T5817] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 583.565960][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.592437][ T5817] usb 5-1: config 0 descriptor?? [ 584.841841][T12769] QAT: Device 7 not found [ 585.258669][ T5817] usbhid 5-1:0.0: can't add hid device: -71 [ 585.270514][ T5817] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 585.283551][ T5817] usb 5-1: USB disconnect, device number 21 [ 585.526439][T12779] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 585.557202][T12779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.502114][T12800] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1878'. [ 587.511418][T12800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1878'. [ 587.520612][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1878'. [ 588.915031][T12817] netlink: 'syz.0.1879': attribute type 2 has an invalid length. [ 590.691752][T12832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 597.363746][T12881] netdevsim netdevsim4: Direct firmware load for ωτ failed with error -2 [ 597.372379][T12881] netdevsim netdevsim4: Falling back to sysfs fallback for: ωτ [ 597.451652][T12882] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 598.726264][T12900] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1894'. [ 598.735428][T12900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1894'. [ 598.744433][T12900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 604.080203][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'. [ 604.820590][T12965] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1909'. [ 604.829809][T12965] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1909'. [ 604.838841][T12965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'. [ 607.541519][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1915'. [ 609.085496][T13015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 609.810428][T13027] QAT: Device 7 not found [ 610.343177][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 610.465513][ T5865] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 611.889835][T13054] IPv6: Can't replace route, no match found [ 611.916978][ T5865] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 611.928248][ T5865] usb 2-1: config 0 has no interface number 0 [ 612.479014][ T5865] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.490256][ T5865] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 612.502518][ T5865] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 612.527301][ T5865] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 612.537227][ T5865] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 612.552459][ T5865] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 612.561639][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.569681][ T5865] usb 2-1: Product: syz [ 612.573913][ T5865] usb 2-1: Manufacturer: syz [ 612.578515][ T5865] usb 2-1: SerialNumber: syz [ 612.649379][ T29] audit: type=1400 audit(1734060142.337:446): avc: denied { connect } for pid=13062 comm="syz.0.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 612.662776][ T5865] usb 2-1: config 0 descriptor?? [ 612.675643][T13041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.685614][ T5865] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 612.744771][ T5865] scsi host1: usb-storage 2-1:0.189 [ 612.878246][ T5817] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 613.299405][ T5864] usb 2-1: USB disconnect, device number 15 [ 613.672909][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 613.680140][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.691328][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.760285][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 613.773731][ T5817] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 613.788864][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.795380][ T29] audit: type=1400 audit(1734060143.477:447): avc: denied { map } for pid=13073 comm="syz.4.1935" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 614.406785][ T5817] usb 3-1: config 0 descriptor?? [ 614.670783][ T29] audit: type=1400 audit(1734060144.357:448): avc: denied { read } for pid=13087 comm="syz.1.1938" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 614.682644][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 614.694165][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.780962][ T29] audit: type=1400 audit(1734060144.387:449): avc: denied { open } for pid=13087 comm="syz.1.1938" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 615.043086][ T29] audit: type=1400 audit(1734060144.387:450): avc: denied { ioctl } for pid=13087 comm="syz.1.1938" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 615.068321][ C1] vkms_vblank_simulate: vblank timer overrun [ 615.125857][ T5817] hid (null): unknown global tag 0xc [ 615.131170][ T5817] hid (null): invalid report_count -888556264 [ 615.137444][ T5817] hid (null): unknown global tag 0xc [ 615.149579][ T5817] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000D/input/input13 [ 615.215171][ T5817] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000D/input/input14 [ 615.216597][T13098] input: syz1 as /devices/virtual/input/input12 [ 615.242918][ T29] audit: type=1400 audit(1734060144.897:451): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.266571][ T29] audit: type=1400 audit(1734060144.897:452): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2933 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.438813][ T29] audit: type=1400 audit(1734060145.117:453): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2933 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 616.227604][ T5817] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 616.523660][ T5865] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 616.544724][T13111] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 616.640697][T13112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1942'. [ 616.673090][ T5865] usb 3-1: device descriptor read/64, error -32 [ 617.062893][ T5865] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 617.105950][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 617.114750][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 617.132310][T13110] IPv6: Can't replace route, no match found [ 617.147676][T13115] ceph: No mds server is up or the cluster is laggy [ 617.222094][ T5865] usb 3-1: device descriptor read/64, error -32 [ 617.779273][T13130] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1945'. [ 617.788757][T13130] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1945'. [ 617.797939][T13130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1945'. [ 618.141959][T13133] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 618.150818][T13133] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 619.208456][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1946'. [ 619.692892][ T29] audit: type=1400 audit(1734060149.377:454): avc: denied { append } for pid=13126 comm="syz.3.1947" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 619.716276][T13148] fuse: Bad value for 'fd' [ 619.768327][ T25] usb 3-1: USB disconnect, device number 17 [ 621.195862][ T29] audit: type=1400 audit(1734060150.877:455): avc: denied { shutdown } for pid=13159 comm="syz.2.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 621.255006][ T29] audit: type=1400 audit(1734060150.877:456): avc: denied { read } for pid=13159 comm="syz.2.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 621.275160][ T29] audit: type=1400 audit(1734060150.927:457): avc: denied { create } for pid=13164 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 621.295319][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.303913][ T29] audit: type=1400 audit(1734060150.927:458): avc: denied { write } for pid=13164 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 621.324397][ T29] audit: type=1400 audit(1734060150.927:459): avc: denied { nlmsg_write } for pid=13164 comm="syz.0.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 621.345058][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.550615][T13174] netdevsim netdevsim4: Direct firmware load for ωτ failed with error -2 [ 621.559374][T13174] netdevsim netdevsim4: Falling back to sysfs fallback for: ωτ [ 621.633981][T13175] netlink: 'syz.4.1955': attribute type 2 has an invalid length. [ 622.733446][T13190] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 622.742485][T13190] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 623.166756][T13191] netlink: 'syz.0.1958': attribute type 2 has an invalid length. [ 626.091915][T13210] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 626.100937][T13210] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 631.468068][T13262] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1978'. [ 631.477207][T13262] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1978'. [ 631.486202][T13262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1978'. [ 632.015964][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 632.892264][T13275] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 632.900947][T13275] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 632.943339][T13281] netlink: 'syz.3.1982': attribute type 2 has an invalid length. [ 636.822237][T13315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1989'. [ 636.840606][T13317] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1992'. [ 636.897048][T13319] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1993'. [ 638.211003][T13332] virtio-fs: tag <(null)> not found [ 638.865911][ T29] audit: type=1326 audit(1734060167.697:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13327 comm="syz.1.1996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x0 [ 638.977123][ T29] audit: type=1400 audit(1734060168.027:461): avc: denied { bind } for pid=13327 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 639.038549][T13343] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 639.047887][T13343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.070895][ T29] audit: type=1400 audit(1734060168.027:462): avc: denied { listen } for pid=13327 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 639.144748][ T29] audit: type=1400 audit(1734060168.027:463): avc: denied { connect } for pid=13327 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 639.492264][T13352] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 639.501057][T13352] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 639.575687][T13353] netlink: 'syz.0.2000': attribute type 2 has an invalid length. [ 639.899026][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 640.033635][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 640.042541][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.082143][T13351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.138043][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.154114][T13351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.343728][T13370] block device autoloading is deprecated and will be removed. [ 641.374217][T13370] syz.4.2005: attempt to access beyond end of device [ 641.374217][T13370] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 645.148505][T13404] FAULT_INJECTION: forcing a failure. [ 645.148505][T13404] name failslab, interval 1, probability 0, space 0, times 0 [ 645.163271][T13404] CPU: 0 UID: 0 PID: 13404 Comm: syz.4.2014 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 645.174042][T13404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 645.184090][T13404] Call Trace: [ 645.187359][T13404] [ 645.190280][T13404] dump_stack_lvl+0x16c/0x1f0 [ 645.194958][T13404] should_fail_ex+0x497/0x5b0 [ 645.199633][T13404] ? fs_reclaim_acquire+0xae/0x150 [ 645.204749][T13404] should_failslab+0xc2/0x120 [ 645.209428][T13404] __kmalloc_noprof+0xcb/0x510 [ 645.214192][T13404] io_alloc_async_data+0x9d/0x150 [ 645.219212][T13404] ? io_connect_prep+0x131/0x350 [ 645.224149][T13404] io_msg_alloc_async+0x82/0x390 [ 645.229083][T13404] io_connect_prep+0x228/0x350 [ 645.233850][T13404] io_submit_sqes+0x853/0x25c0 [ 645.238708][T13404] __do_sys_io_uring_enter+0xd43/0x1620 [ 645.244258][T13404] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 645.250239][T13404] ? irqentry_exit+0x3b/0x90 [ 645.254832][T13404] ? lockdep_hardirqs_on+0x7c/0x110 [ 645.260046][T13404] do_syscall_64+0xcd/0x250 [ 645.264547][T13404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.270442][T13404] RIP: 0033:0x7ff78cd85d19 [ 645.274850][T13404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.294451][T13404] RSP: 002b:00007ff78abf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 645.302859][T13404] RAX: ffffffffffffffda RBX: 00007ff78cf76160 RCX: 00007ff78cd85d19 [ 645.310818][T13404] RDX: 0000000000000000 RSI: 00000000000047f9 RDI: 0000000000000006 [ 645.318780][T13404] RBP: 00007ff78abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 645.326743][T13404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.334706][T13404] R13: 0000000000000000 R14: 00007ff78cf76160 R15: 00007ffcdbfe7028 [ 645.342679][T13404] [ 645.575113][T13407] netdevsim netdevsim1: Direct firmware load for ωτ failed with error -2 [ 645.583777][T13407] netdevsim netdevsim1: Falling back to sysfs fallback for: ωτ [ 645.660499][T13408] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 647.456967][T13425] IPv6: Can't replace route, no match found [ 648.530742][T13440] netlink: 'syz.3.2025': attribute type 29 has an invalid length. [ 648.622249][T13440] netlink: 548 bytes leftover after parsing attributes in process `syz.3.2025'. [ 648.640804][T13443] netlink: 1700 bytes leftover after parsing attributes in process `syz.2.2026'. [ 649.310528][T13440] orangefs_mount: mount request failed with -4 [ 650.464586][ T29] audit: type=1326 audit(1734060180.157:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz.3.2031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68f585d19 code=0x0 [ 651.562437][T13466] vivid-001: ================= START STATUS ================= [ 651.570221][T13466] vivid-001: Radio HW Seek Mode: Bounded [ 651.576252][T13466] vivid-001: Radio Programmable HW Seek: false [ 651.582606][T13466] vivid-001: RDS Rx I/O Mode: Block I/O [ 651.588618][T13466] vivid-001: Generate RBDS Instead of RDS: false [ 651.595258][T13466] vivid-001: RDS Reception: true [ 651.600704][T13466] vivid-001: RDS Program Type: 0 inactive [ 651.606772][T13466] vivid-001: RDS PS Name: inactive [ 651.612321][T13466] vivid-001: RDS Radio Text: inactive [ 651.618195][T13466] vivid-001: RDS Traffic Announcement: false inactive [ 651.625403][T13466] vivid-001: RDS Traffic Program: false inactive [ 651.633806][T13466] vivid-001: RDS Music: false inactive [ 651.639569][T13466] vivid-001: ================== END STATUS ================== [ 651.968682][T13478] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 653.902975][T13503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2039'. [ 656.248195][T13528] QAT: Device 7 not found [ 657.151803][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 657.714628][ T29] audit: type=1326 audit(1734060187.367:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.0.2050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe26c985d19 code=0x0 [ 657.806361][T13543] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 658.013765][T13548] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2053'. [ 658.529400][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 659.405286][T13561] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 659.413972][T13561] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 661.763708][T13566] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2057'. [ 661.833121][ T5817] libceph: connect (1)[c::]:6789 error -101 [ 662.258769][ T5817] libceph: mon0 (1)[c::]:6789 connect error [ 662.543360][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 662.555531][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 662.646905][T13594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2064'. [ 662.661744][T13592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 663.135070][ T5864] libceph: connect (1)[c::]:6789 error -101 [ 663.141130][ T5864] libceph: mon0 (1)[c::]:6789 connect error [ 663.193547][ T29] audit: type=1326 audit(1734060192.887:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.1.2065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x0 [ 663.296457][T13597] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 663.308218][T13567] ceph: No mds server is up or the cluster is laggy [ 663.317197][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 663.518482][T13604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.889692][ T29] audit: type=1400 audit(1734060193.577:467): avc: denied { connect } for pid=13611 comm="syz.0.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 663.909975][ T29] audit: type=1400 audit(1734060193.577:468): avc: denied { name_connect } for pid=13611 comm="syz.0.2071" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 663.986283][T13613] netdevsim netdevsim4: Direct firmware load for ωτ failed with error -2 [ 663.995348][T13613] netdevsim netdevsim4: Falling back to sysfs fallback for: ωτ [ 664.070233][T13614] netlink: 'syz.4.2069': attribute type 2 has an invalid length. [ 664.344404][ T29] audit: type=1400 audit(1734060193.987:469): avc: denied { listen } for pid=13611 comm="syz.0.2071" laddr=fe80::b lport=55296 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 664.431723][ T972] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 664.463206][T13617] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 664.471026][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.603453][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 664.627552][ T972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.644494][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 664.833272][ T972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 664.905416][ T972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 664.964126][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 665.089302][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2074'. [ 665.125955][ T972] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.135204][ T972] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.144462][ T972] usb 3-1: Manufacturer: syz [ 665.204523][ T972] usb 3-1: config 0 descriptor?? [ 666.219499][T13639] QAT: Device 7 not found [ 666.263928][ T29] audit: type=1400 audit(1734060195.937:470): avc: denied { getopt } for pid=13636 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 667.234098][T13643] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 667.241904][T13643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.282850][ T972] rc_core: IR keymap rc-hauppauge not found [ 667.288778][ T972] Registered IR keymap rc-empty [ 667.294028][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 667.324084][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 667.444242][ T972] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 667.456825][ T972] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 667.478252][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 667.529222][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 667.552609][T13650] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2080'. [ 667.832420][ T29] audit: type=1326 audit(1734060197.377:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x7ffc0000 [ 668.422357][ T29] audit: type=1326 audit(1734060197.387:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x7ffc0000 [ 668.453914][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 668.472419][ T29] audit: type=1326 audit(1734060197.397:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42f3f85d19 code=0x7ffc0000 [ 668.497785][ T25] libceph: connect (1)[c::]:6789 error -101 [ 668.504674][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 668.510693][ T5865] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 668.571091][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 668.901516][ T25] libceph: connect (1)[c::]:6789 error -101 [ 668.913923][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 668.923037][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 668.932998][ T29] audit: type=1326 audit(1734060197.397:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x7ffc0000 [ 669.022882][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 669.051579][T13673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2084'. [ 669.092994][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 669.286758][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.290090][ T29] audit: type=1326 audit(1734060197.397:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x7ffc0000 [ 669.297051][ T5865] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.320653][ T29] audit: type=1326 audit(1734060197.407:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42f3f84680 code=0x7ffc0000 [ 669.335881][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 669.353209][ T29] audit: type=1326 audit(1734060197.407:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f3f8591b code=0x7ffc0000 [ 669.353247][ T29] audit: type=1326 audit(1734060197.417:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f3f8591b code=0x7ffc0000 [ 669.353281][ T29] audit: type=1326 audit(1734060197.417:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f3f8591b code=0x7ffc0000 [ 669.353308][ T29] audit: type=1326 audit(1734060197.427:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f3f8591b code=0x7ffc0000 [ 669.353341][ T29] audit: type=1326 audit(1734060197.567:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.1.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42f3f8591b code=0x7ffc0000 [ 669.391514][ T5865] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 669.496872][ T25] libceph: connect (1)[c::]:6789 error -101 [ 669.508033][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 669.514530][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 669.534811][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.567426][ T5865] usb 2-1: config 0 descriptor?? [ 669.618024][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 669.697037][ T972] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 669.698833][T13675] vivid-001: ================= START STATUS ================= [ 669.712862][T13675] vivid-001: Radio HW Seek Mode: Bounded [ 669.718851][T13675] vivid-001: Radio Programmable HW Seek: false [ 669.726618][T13675] vivid-001: RDS Rx I/O Mode: Block I/O [ 669.732322][T13675] vivid-001: Generate RBDS Instead of RDS: false [ 669.739239][T13675] vivid-001: RDS Reception: true [ 669.744782][T13675] vivid-001: RDS Program Type: 0 inactive [ 669.750834][T13675] vivid-001: RDS PS Name: inactive [ 669.763492][T13675] vivid-001: RDS Radio Text: inactive [ 669.769363][T13675] vivid-001: RDS Traffic Announcement: false inactive [ 669.787616][T13675] vivid-001: RDS Traffic Program: false inactive [ 669.788743][ T972] mceusb 3-1:0.0: Registered Π• with mce emulator interface version 1 [ 669.801339][T13675] vivid-001: RDS Music: [ 669.802438][ T972] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.805746][ T972] usb 3-1: USB disconnect, device number 18 [ 669.806929][T13675] false inactive [ 669.825308][T13675] vivid-001: ================== END STATUS ================== [ 669.938983][T13677] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2086'. [ 670.139248][ T5864] usb 2-1: USB disconnect, device number 16 [ 670.176689][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 670.182710][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 670.616654][T13650] ceph: No mds server is up or the cluster is laggy [ 670.633386][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 670.640685][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 670.784256][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 670.790348][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 670.813933][T13680] ceph: No mds server is up or the cluster is laggy [ 671.591314][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 671.598386][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 671.706547][T13700] vivid-004: ================= START STATUS ================= [ 671.724813][T13700] vivid-004: Radio HW Seek Mode: Bounded [ 671.730457][T13700] vivid-004: Radio Programmable HW Seek: false [ 671.736714][T13700] vivid-004: RDS Rx I/O Mode: Block I/O [ 671.742264][T13700] vivid-004: Generate RBDS Instead of RDS: false [ 671.928887][T13700] vivid-004: RDS Reception: true [ 671.941142][T13700] vivid-004: RDS Program Type: 0 inactive [ 671.961161][T13700] vivid-004: RDS PS Name: inactive [ 671.971274][T13700] vivid-004: RDS Radio Text: inactive [ 672.679061][T13700] vivid-004: RDS Traffic Announcement: false inactive [ 672.720832][T13700] vivid-004: RDS Traffic Program: false inactive [ 672.742932][T13700] vivid-004: RDS Music: false inactive [ 672.806169][T13700] vivid-004: ================== END STATUS ================== [ 673.726164][T13730] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2098'. [ 673.735369][T13730] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2098'. [ 673.744394][T13730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2098'. [ 674.181758][T13733] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 675.273769][T13739] input: syz1 as /devices/virtual/input/input18 [ 679.071303][T13769] netlink: 'syz.4.2105': attribute type 2 has an invalid length. [ 680.418977][T13771] vivid-003: ================= START STATUS ================= [ 680.426895][T13771] vivid-003: Radio HW Seek Mode: Bounded [ 680.432851][T13771] vivid-003: Radio Programmable HW Seek: false [ 680.439043][T13771] vivid-003: RDS Rx I/O Mode: Block I/O [ 680.444749][T13771] vivid-003: Generate RBDS Instead of RDS: false [ 680.451103][T13771] vivid-003: RDS Reception: true [ 680.456230][T13771] vivid-003: RDS Program Type: 0 inactive [ 680.461984][T13771] vivid-003: RDS PS Name: inactive [ 680.517509][T13771] vivid-003: RDS Radio Text: inactive [ 680.523790][T13771] vivid-003: RDS Traffic Announcement: false inactive [ 680.531358][T13771] vivid-003: RDS Traffic Program: false inactive [ 680.538341][T13771] vivid-003: RDS Music: false inactive [ 680.544607][T13771] vivid-003: ================== END STATUS ================== [ 681.321203][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2114'. [ 682.042908][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 682.042929][ T29] audit: type=1400 audit(1734060211.017:500): avc: denied { sqpoll } for pid=13786 comm="syz.0.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 683.103772][ T29] audit: type=1400 audit(1734060212.527:501): avc: denied { connect } for pid=13798 comm="syz.1.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 683.141701][T13805] IPv6: Can't replace route, no match found [ 683.222897][ T5864] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 684.546327][T13830] vivid-002: ================= START STATUS ================= [ 684.557423][T13830] vivid-002: Radio HW Seek Mode: Bounded [ 684.631310][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 685.123635][T13830] vivid-002: Radio Programmable HW Seek: false [ 685.231032][T13830] vivid-002: RDS Rx I/O Mode: Block I/O [ 685.298109][T13839] vivid-003: ================= START STATUS ================= [ 685.306225][T13839] vivid-003: Radio HW Seek Mode: Bounded [ 685.312190][T13839] vivid-003: Radio Programmable HW Seek: false [ 685.319016][T13839] vivid-003: RDS Rx I/O Mode: Block I/O [ 685.329507][T13839] vivid-003: Generate RBDS Instead of RDS: false [ 685.336694][T13839] vivid-003: RDS Reception: true [ 685.343742][T13839] vivid-003: RDS Program Type: 0 inactive [ 685.350083][T13839] vivid-003: RDS PS Name: inactive [ 685.354142][T13830] vivid-002: Generate RBDS Instead of RDS: [ 685.355716][T13839] vivid-003: RDS Radio Text: [ 685.360101][T13830] false [ 685.363379][T13839] inactive [ 685.378176][T13839] vivid-003: RDS Traffic Announcement: false inactive [ 685.385478][T13839] vivid-003: RDS Traffic Program: false inactive [ 685.393167][T13839] vivid-003: RDS Music: false inactive [ 685.398801][T13839] vivid-003: ================== END STATUS ================== [ 685.569819][T13830] [ 685.582467][T13830] vivid-002: RDS Reception: true [ 685.606521][T13830] vivid-002: RDS Program Type: 0 inactive [ 685.642893][T13830] vivid-002: RDS PS Name: inactive [ 685.648413][T13830] vivid-002: RDS Radio Text: inactive [ 685.701222][T13830] vivid-002: RDS Traffic Announcement: false inactive [ 685.724458][T13830] vivid-002: RDS Traffic Program: false inactive [ 685.746967][T13830] vivid-002: RDS Music: false inactive [ 685.752469][T13830] vivid-002: ================== END STATUS ================== [ 686.496945][T13864] IPv6: Can't replace route, no match found [ 687.581291][ T972] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 688.155830][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 688.532452][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 688.933918][ T972] usb 1-1: Using ep0 maxpacket: 32 [ 688.941742][ T972] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.962098][ T972] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 689.021890][ T972] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 689.031744][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.040260][ T972] usb 1-1: Product: syz [ 689.041697][T13892] vivid-002: ================= START STATUS ================= [ 689.044768][ T972] usb 1-1: Manufacturer: syz [ 689.057235][ T972] usb 1-1: SerialNumber: syz [ 689.062541][T13892] vivid-002: Radio HW Seek Mode: Bounded [ 689.068657][T13892] vivid-002: Radio Programmable HW Seek: false [ 689.075411][T13892] vivid-002: RDS Rx I/O Mode: Block I/O [ 689.082909][T13892] vivid-002: Generate RBDS Instead of RDS: false [ 689.089584][T13892] vivid-002: RDS Reception: true [ 689.095002][T13892] vivid-002: RDS Program Type: 0 inactive [ 689.101575][T13892] vivid-002: RDS PS Name: inactive [ 689.107997][T13892] vivid-002: RDS Radio Text: inactive [ 689.155924][T13892] vivid-002: RDS Traffic Announcement: false inactive [ 689.163535][T13892] vivid-002: RDS Traffic Program: false inactive [ 689.170781][T13892] vivid-002: RDS Music: false inactive [ 689.173101][ T5895] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 689.186016][T13892] vivid-002: ================== END STATUS ================== [ 689.352930][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 689.374115][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.402743][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.489941][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 689.584100][ T5895] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 689.638775][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.652362][ T5895] usb 2-1: config 0 descriptor?? [ 689.676419][ T972] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 689.705212][ T972] usb 1-1: USB disconnect, device number 19 [ 689.810540][ T972] usblp0: removed [ 690.071739][ T29] audit: type=1326 audit(1734060219.757:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13900 comm="syz.4.2142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x0 [ 690.299783][T13908] vivid-002: ================= START STATUS ================= [ 690.313071][ T5895] hid (null): unknown global tag 0xc [ 690.318618][T13908] vivid-002: Radio HW Seek Mode: Bounded [ 690.324997][ T5895] hid (null): invalid report_count -888556264 [ 690.660149][T13924] input: syz1 as /devices/virtual/input/input21 [ 690.998496][T13908] vivid-002: Radio Programmable HW Seek: false [ 691.004804][ T5895] hid (null): unknown global tag 0xc [ 691.017344][ T5895] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input22 [ 691.047717][T13908] vivid-002: RDS Rx I/O Mode: Block I/O [ 691.110285][T13908] vivid-002: Generate RBDS Instead of RDS: false [ 691.152120][T13908] vivid-002: RDS Reception: true [ 691.164120][ T5895] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000E/input/input23 [ 691.193236][T13908] vivid-002: RDS Program Type: 0 inactive [ 691.862901][T13908] vivid-002: RDS PS Name: inactive [ 691.868124][T13908] vivid-002: RDS Radio Text: inactive [ 691.876688][T13908] vivid-002: RDS Traffic Announcement: false inactive [ 691.886811][T13908] vivid-002: RDS Traffic Program: false inactive [ 691.896931][T13908] vivid-002: RDS Music: false inactive [ 691.902398][T13908] vivid-002: ================== END STATUS ================== [ 692.466161][ T5895] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 692.481778][ T5895] usb 2-1: USB disconnect, device number 17 [ 692.588829][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2149'. [ 693.334539][T13954] vivid-000: ================= START STATUS ================= [ 693.342707][T13954] vivid-000: Radio HW Seek Mode: Bounded [ 693.348780][T13954] vivid-000: Radio Programmable HW Seek: false [ 693.356227][T13954] vivid-000: RDS Rx I/O Mode: Block I/O [ 693.361917][T13954] vivid-000: Generate RBDS Instead of RDS: false [ 693.368726][T13954] vivid-000: RDS Reception: true [ 693.374221][T13954] vivid-000: RDS Program Type: 0 inactive [ 693.380830][T13954] vivid-000: RDS PS Name: inactive [ 693.386677][T13954] vivid-000: RDS Radio Text: inactive [ 693.392836][T13954] vivid-000: RDS Traffic Announcement: false inactive [ 693.401858][T13954] vivid-000: RDS Traffic Program: false inactive [ 693.408560][T13954] vivid-000: RDS Music: false inactive [ 693.414413][T13954] vivid-000: ================== END STATUS ================== [ 694.975970][T13973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2159'. [ 696.433596][T13982] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 696.442220][T13982] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 696.473864][T13978] vivid-002: ================= START STATUS ================= [ 696.524686][T13978] vivid-002: Radio HW Seek Mode: Bounded [ 696.539588][T13978] vivid-002: Radio Programmable HW Seek: false [ 696.568204][T13978] vivid-002: RDS Rx I/O Mode: Block I/O [ 696.595014][T13978] vivid-002: Generate RBDS Instead of RDS: false [ 696.603713][T13978] vivid-002: RDS Reception: true [ 696.635157][T13978] vivid-002: RDS Program Type: 0 inactive [ 696.676477][T13978] vivid-002: RDS PS Name: inactive [ 696.684763][T13978] vivid-002: RDS Radio Text: inactive [ 696.700902][T13978] vivid-002: RDS Traffic Announcement: false inactive [ 696.911913][T13978] vivid-002: RDS Traffic Program: false inactive [ 696.919786][T13978] vivid-002: RDS Music: false inactive [ 696.925527][T13978] vivid-002: ================== END STATUS ================== [ 696.997831][T13999] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 697.201005][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2166'. [ 697.793053][T14008] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 698.903950][T14015] vivid-003: ================= START STATUS ================= [ 698.913515][T14015] vivid-003: Radio HW Seek Mode: Bounded [ 698.919487][T14015] vivid-003: Radio Programmable HW Seek: false [ 698.927513][T14015] vivid-003: RDS Rx I/O Mode: Block I/O [ 698.934185][T14015] vivid-003: Generate RBDS Instead of RDS: false [ 698.940794][T14015] vivid-003: RDS Reception: true [ 698.948813][T14015] vivid-003: RDS Program Type: 0 inactive [ 699.128059][T14020] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2174'. [ 699.132991][T14015] vivid-003: RDS PS Name: inactive [ 699.193447][T14015] vivid-003: RDS Radio Text: inactive [ 699.360398][T14015] vivid-003: RDS Traffic Announcement: false inactive [ 699.367766][T14015] vivid-003: RDS Traffic Program: false inactive [ 699.374717][T14015] vivid-003: RDS Music: false inactive [ 699.500797][T14015] vivid-003: ================== END STATUS ================== [ 699.633069][T14026] netdevsim netdevsim4: Direct firmware load for ωτ failed with error -2 [ 699.641746][T14026] netdevsim netdevsim4: Falling back to sysfs fallback for: ωτ [ 699.718335][T14027] netlink: 'syz.4.2172': attribute type 2 has an invalid length. [ 700.459916][T14028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2173'. [ 701.013917][T14040] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2171'. [ 701.177385][T14043] vivid-001: ================= START STATUS ================= [ 701.187217][T14045] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 701.196057][T14043] vivid-001: Radio HW Seek Mode: Bounded [ 701.201836][T14043] vivid-001: Radio Programmable HW Seek: false [ 701.212521][T14043] vivid-001: RDS Rx I/O Mode: Block I/O [ 701.221547][T14043] vivid-001: Generate RBDS Instead of RDS: false [ 701.846043][T14043] vivid-001: RDS Reception: true [ 701.925448][T14043] vivid-001: RDS Program Type: 0 inactive [ 701.961787][T14043] vivid-001: RDS PS Name: inactive [ 702.000047][T14043] vivid-001: RDS Radio Text: inactive [ 702.021406][T14043] vivid-001: RDS Traffic Announcement: false inactive [ 702.028828][T14055] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 702.052916][T14043] vivid-001: RDS Traffic Program: false inactive [ 703.148062][T14043] vivid-001: RDS Music: false inactive [ 703.167236][T14062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 703.193485][T14043] vivid-001: ================== END STATUS ================== [ 704.258434][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2182'. [ 704.851177][T14077] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2185'. [ 706.043777][ T5864] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 706.274517][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.422897][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.440503][ T5864] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 706.452969][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.564375][T14095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2190'. [ 706.574321][ T5864] usb 3-1: config 0 descriptor?? [ 706.811350][T14100] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 707.634778][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.651761][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.659660][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.669069][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.693003][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.703239][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.712212][ T5864] pyra 0003:1E7D:2CF6.000F: unknown main item tag 0x0 [ 707.736196][ T5864] pyra 0003:1E7D:2CF6.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 707.764848][ T5864] pyra 0003:1E7D:2CF6.000F: couldn't init struct pyra_device [ 707.790509][ T5864] pyra 0003:1E7D:2CF6.000F: couldn't install mouse [ 707.813281][ T5864] pyra 0003:1E7D:2CF6.000F: probe with driver pyra failed with error -5 [ 707.861939][T14111] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 708.503050][ T5864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 708.673141][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 708.679696][ T5864] usb 2-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 708.702897][ T5864] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 708.754339][ T5864] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 255 [ 708.808694][ T5864] usb 2-1: config 1 interface 0 has no altsetting 0 [ 708.825676][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 708.838044][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.925688][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2194'. [ 709.383191][ T5864] usb 2-1: Product: syz [ 709.387397][ T5864] usb 2-1: Manufacturer: syz [ 709.392009][ T5864] usb 2-1: SerialNumber: syz [ 709.581087][ T5817] usb 3-1: USB disconnect, device number 19 [ 710.843652][ T5864] usb 2-1: can't set config #1, error -71 [ 710.850713][ T5864] usb 2-1: USB disconnect, device number 18 [ 711.998971][T14151] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 713.879843][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 718.137672][T14205] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 718.245338][T14205] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 718.261931][T14208] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 720.278283][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 721.702024][ T29] audit: type=1326 audit(1734060250.677:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.3.2225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68f585d19 code=0x0 [ 722.416164][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2227'. [ 724.888799][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'. [ 725.519698][ T5895] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 726.043397][ T5895] usb 3-1: device not accepting address 20, error -71 [ 726.252417][T14288] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.2238'. [ 726.540146][T14296] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 726.548909][T14296] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 726.624077][T14297] netlink: 'syz.2.2239': attribute type 2 has an invalid length. [ 727.250368][T14303] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 729.605152][T14318] IPv6: Can't replace route, no match found [ 729.904370][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2247'. [ 730.874032][T14312] vivid-003: ================= START STATUS ================= [ 730.881684][T14312] vivid-003: Radio HW Seek Mode: Bounded [ 730.887390][T14312] vivid-003: Radio Programmable HW Seek: false [ 730.893602][T14312] vivid-003: RDS Rx I/O Mode: Block I/O [ 730.899133][T14312] vivid-003: Generate RBDS Instead of RDS: false [ 730.905518][T14312] vivid-003: RDS Reception: true [ 730.910438][T14312] vivid-003: RDS Program Type: 0 inactive [ 730.916238][T14312] vivid-003: RDS PS Name: inactive [ 730.921431][T14312] vivid-003: RDS Radio Text: inactive [ 730.926922][T14312] vivid-003: RDS Traffic Announcement: false inactive [ 730.933730][T14312] vivid-003: RDS Traffic Program: false inactive [ 730.940054][T14312] vivid-003: RDS Music: false inactive [ 730.945830][T14312] vivid-003: ================== END STATUS ================== [ 731.081598][T14330] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.2251'. [ 731.742725][T14339] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 731.751400][T14339] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 731.859376][T14340] netlink: 'syz.3.2249': attribute type 2 has an invalid length. [ 739.733965][T14403] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 739.793185][ T5895] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 740.663816][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.663890][ T5864] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 740.678952][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.707747][ T5895] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 740.717935][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.736748][ T5895] usb 2-1: config 0 descriptor?? [ 741.918066][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.925220][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.932200][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.939606][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.946720][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.953656][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 741.962236][ T5895] pyra 0003:1E7D:2CF6.0010: unknown main item tag 0x0 [ 742.560895][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 742.570357][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.646737][ T5895] pyra 0003:1E7D:2CF6.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 742.659483][ T5895] pyra 0003:1E7D:2CF6.0010: couldn't init struct pyra_device [ 742.665294][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.667707][ T5895] pyra 0003:1E7D:2CF6.0010: couldn't install mouse [ 742.753937][T14422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2270'. [ 742.834047][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 742.855091][ T5864] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 742.867279][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.903988][ T5895] pyra 0003:1E7D:2CF6.0010: probe with driver pyra failed with error -5 [ 743.101937][ T5864] usb 3-1: config 0 descriptor?? [ 743.148254][ T5817] usb 2-1: USB disconnect, device number 19 [ 743.196311][ T5864] usb 3-1: can't set config #0, error -71 [ 743.224429][ T5864] usb 3-1: USB disconnect, device number 22 [ 743.909006][T14438] vivid-001: ================= START STATUS ================= [ 743.917427][ T29] audit: type=1400 audit(1734060273.607:504): avc: denied { setattr } for pid=14428 comm="syz.2.2274" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 743.939283][T14438] vivid-001: Radio HW Seek Mode: Bounded [ 743.945415][T14438] vivid-001: Radio Programmable HW Seek: false [ 743.996444][T14438] vivid-001: RDS Rx I/O Mode: Block I/O [ 744.012771][T14438] vivid-001: Generate RBDS Instead of RDS: false [ 744.019804][T14438] vivid-001: RDS Reception: true [ 744.025634][T14438] vivid-001: RDS Program Type: 0 inactive [ 744.032153][T14438] vivid-001: RDS PS Name: inactive [ 744.038212][T14438] vivid-001: RDS Radio Text: inactive [ 744.056868][T14438] vivid-001: RDS Traffic Announcement: false inactive [ 744.072315][T14438] vivid-001: RDS Traffic Program: false inactive [ 744.079221][T14438] vivid-001: RDS Music: false inactive [ 744.089313][T14438] vivid-001: ================== END STATUS ================== [ 744.993210][ T29] audit: type=1400 audit(1734060274.047:505): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 745.151414][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'. [ 746.305139][T14456] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2279'. [ 746.314268][T14456] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2279'. [ 746.323836][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2279'. [ 747.402891][ T5895] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 747.499287][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 747.603706][T14482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2283'. [ 747.766095][ T5895] usb 5-1: device descriptor read/64, error -32 [ 748.068601][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 748.211583][T14493] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2286'. [ 748.220861][T14493] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2286'. [ 748.229883][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2286'. [ 748.892825][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 748.904403][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.915602][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.153481][T14506] netdevsim netdevsim3: Direct firmware load for ωτ failed with error -2 [ 749.162291][T14506] netdevsim netdevsim3: Falling back to sysfs fallback for: ωτ [ 749.555969][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 749.569072][ T5895] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 749.578319][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.592847][ T5895] usb 5-1: config 0 descriptor?? [ 749.771783][T14517] QAT: Device 7 not found [ 749.856412][T14521] input: syz1 as /devices/virtual/input/input26 [ 749.945573][T14522] netdevsim netdevsim1: Direct firmware load for ωτ failed with error -2 [ 749.954406][T14522] netdevsim netdevsim1: Falling back to sysfs fallback for: ωτ [ 751.043126][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 751.217046][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.249358][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.342306][ T5895] usbhid 5-1:0.0: can't add hid device: -71 [ 751.348873][ T5895] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 751.353272][ T5864] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 751.358614][ T5895] usb 5-1: USB disconnect, device number 23 [ 751.569400][T14548] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2299'. [ 751.578526][T14548] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2299'. [ 751.587496][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2299'. [ 751.843909][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.854396][ T5864] usb 2-1: config 0 descriptor?? [ 752.298309][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.317915][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.335606][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.367122][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.386973][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.412904][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.430040][ T5864] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x0 [ 752.454174][ T5864] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 753.936433][T14565] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2304'. [ 753.945550][T14565] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2304'. [ 753.954541][T14565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2304'. [ 754.692662][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'. [ 755.236637][ T5864] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 755.246116][ T5864] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 755.795970][T14589] input: syz1 as /devices/virtual/input/input27 [ 755.804087][ T5864] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 755.815025][ T5864] usb 2-1: USB disconnect, device number 20 [ 755.900356][T14592] QAT: Device 7 not found [ 755.971478][ T29] audit: type=1326 audit(1734060285.647:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14593 comm="syz.4.2310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x0 [ 756.021918][T14598] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 756.038750][T14598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2310'. [ 757.193153][T14611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2313'. [ 758.623007][ T29] audit: type=1326 audit(1734060287.687:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14617 comm="syz.4.2317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x0 [ 759.074103][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 761.046110][T14642] IPv6: Can't replace route, no match found [ 762.893025][ T5864] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 762.962977][ T5862] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 763.032864][ T5864] usb 5-1: device descriptor read/64, error -71 [ 763.154294][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.165811][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.224720][ T5862] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 763.238730][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.249040][ T5862] usb 3-1: config 0 descriptor?? [ 763.330677][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 763.971058][ T5864] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 764.102905][ T5864] usb 5-1: device descriptor read/64, error -71 [ 764.381451][ T5862] zydacron 0003:13EC:0006.0012: unknown main item tag 0x0 [ 764.388874][ T5862] zydacron 0003:13EC:0006.0012: unknown main item tag 0x0 [ 764.396576][ T5862] zydacron 0003:13EC:0006.0012: unknown main item tag 0x0 [ 764.403907][ T5862] zydacron 0003:13EC:0006.0012: unknown main item tag 0x0 [ 764.411131][ T5862] zydacron 0003:13EC:0006.0012: unknown main item tag 0x0 [ 764.419700][ T5864] usb usb5-port1: attempt power cycle [ 764.426184][ T5862] zydacron 0003:13EC:0006.0012: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 764.523233][ T29] audit: type=1326 audit(1734060294.177:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14669 comm="syz.1.2331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x0 [ 764.623068][T14654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.761346][T14654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.922175][ T972] usb 3-1: USB disconnect, device number 23 [ 765.320478][T14684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2333'. [ 765.375543][ T5864] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 765.533968][ T5864] usb 5-1: device descriptor read/8, error -71 [ 765.656199][T14686] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 765.680169][T14686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.691311][ T29] audit: type=1400 audit(1734060295.387:509): avc: denied { create } for pid=14687 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 766.002671][T14701] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 767.957134][T14719] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 768.045522][ T29] audit: type=1326 audit(1734060297.737:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14715 comm="syz.3.2343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68f585d19 code=0x0 [ 768.803118][ T972] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 768.825399][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2347'. [ 769.347779][T14735] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2346'. [ 769.382793][T14737] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.2349'. [ 769.676565][ T972] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 769.685132][ T972] usb 3-1: config 0 has no interface number 0 [ 769.693468][ T972] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 769.705723][ T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.733046][ T972] usb 3-1: Product: syz [ 769.737242][ T972] usb 3-1: Manufacturer: syz [ 769.741847][ T972] usb 3-1: SerialNumber: syz [ 769.780773][ T972] usb 3-1: config 0 descriptor?? [ 769.856650][T14746] QAT: Device 7 not found [ 771.093583][T14750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'. [ 771.482337][ T972] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 771.490829][ T972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 771.498750][ T972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 771.506556][ T972] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 771.515903][ T972] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 771.533056][ T972] usb 3-1: USB disconnect, device number 24 [ 771.720114][ T972] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 771.731115][ T972] keyspan 3-1:0.133: device disconnected [ 771.764040][T14756] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 771.863310][T14763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2358'. [ 771.877214][ T29] audit: type=1400 audit(1734060301.537:511): avc: denied { connect } for pid=14754 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 771.897130][ T29] audit: type=1400 audit(1734060301.547:512): avc: denied { watch watch_reads } for pid=14762 comm="syz.4.2358" path="/465/file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 771.908963][T14759] vivid-000: ================= START STATUS ================= [ 771.939085][ T29] audit: type=1400 audit(1734060301.617:513): avc: denied { write } for pid=14754 comm="syz.1.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 771.952887][T14759] vivid-000: Radio HW Seek Mode: Bounded [ 771.988323][T14759] vivid-000: Radio Programmable HW Seek: false [ 772.016301][T14759] vivid-000: RDS Rx I/O Mode: Block I/O [ 772.023054][T14759] vivid-000: Generate RBDS Instead of RDS: false [ 772.030232][T14759] vivid-000: RDS Reception: true [ 772.039685][T14759] vivid-000: RDS Program Type: 0 inactive [ 772.053837][ T5895] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 772.069605][T14759] vivid-000: RDS PS Name: inactive [ 772.089006][T14759] vivid-000: RDS Radio Text: inactive [ 772.102306][T14759] vivid-000: RDS Traffic Announcement: false inactive [ 772.114616][T14759] vivid-000: RDS Traffic Program: false inactive [ 772.121374][T14759] vivid-000: RDS Music: false inactive [ 772.127745][T13894] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 772.140947][T14759] vivid-000: ================== END STATUS ================== [ 772.206843][ T5895] usb 4-1: device descriptor read/64, error -71 [ 772.284367][T13894] usb 5-1: Using ep0 maxpacket: 8 [ 772.312933][T13894] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 772.438480][T13894] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 772.456958][T13894] usb 5-1: config 0 has no interface number 0 [ 772.472843][ T5895] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 772.490826][T13894] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 772.502760][T13894] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 772.513861][T13894] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 772.532708][T13894] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 772.543646][T13894] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 772.557174][T13894] usb 5-1: Product: syz [ 772.570796][T13894] usb 5-1: Manufacturer: syz [ 772.590064][T13894] usb 5-1: config 0 descriptor?? [ 772.603738][T14763] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 772.624731][ T5895] usb 4-1: device descriptor read/64, error -71 [ 773.738714][ T5895] usb usb4-port1: attempt power cycle [ 775.860397][T13894] usb 5-1: USB disconnect, device number 28 [ 778.001288][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 779.799286][T14839] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 779.808287][T14839] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 779.850870][T14840] netlink: 'syz.0.2377': attribute type 2 has an invalid length. [ 780.210733][ T29] audit: type=1326 audit(1734060309.897:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.4.2378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff78cd85d19 code=0x0 [ 780.339533][ T29] audit: type=1400 audit(1734060310.027:515): avc: denied { prog_load } for pid=14847 comm="syz.2.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 780.359482][T14848] FAULT_INJECTION: forcing a failure. [ 780.359482][T14848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.370853][ T29] audit: type=1400 audit(1734060310.027:516): avc: denied { bpf } for pid=14847 comm="syz.2.2380" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.395425][T14848] CPU: 0 UID: 0 PID: 14848 Comm: syz.2.2380 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 780.406219][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 780.408516][ T29] audit: type=1400 audit(1734060310.027:517): avc: denied { perfmon } for pid=14847 comm="syz.2.2380" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.416262][T14848] Call Trace: [ 780.416271][T14848] [ 780.416280][T14848] dump_stack_lvl+0x16c/0x1f0 [ 780.416309][T14848] should_fail_ex+0x497/0x5b0 [ 780.416338][T14848] strncpy_from_user+0x3b/0x2d0 [ 780.438079][ T29] audit: type=1400 audit(1734060310.027:518): avc: denied { prog_run } for pid=14847 comm="syz.2.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 780.440408][T14848] getname_flags.part.0+0x8f/0x550 [ 780.481526][T14848] getname_flags+0x93/0xf0 [ 780.485965][T14848] __x64_sys_renameat2+0xc7/0x130 [ 780.491007][T14848] do_syscall_64+0xcd/0x250 [ 780.495522][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.501433][T14848] RIP: 0033:0x7fee66985d19 [ 780.505856][T14848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.510390][ T29] audit: type=1400 audit(1734060310.197:519): avc: denied { create } for pid=14850 comm="syz.1.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.525453][T14848] RSP: 002b:00007fee647f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 780.525476][T14848] RAX: ffffffffffffffda RBX: 00007fee66b75fa0 RCX: 00007fee66985d19 [ 780.525489][T14848] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 780.525501][T14848] RBP: 00007fee647f6090 R08: 0000000000000002 R09: 0000000000000000 [ 780.525514][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.525526][T14848] R13: 0000000000000000 R14: 00007fee66b75fa0 R15: 00007ffc160a4a88 [ 780.525551][T14848] [ 780.705815][ T29] audit: type=1400 audit(1734060310.317:520): avc: denied { execmem } for pid=14850 comm="syz.1.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 780.739889][ T29] audit: type=1400 audit(1734060310.427:521): avc: denied { module_request } for pid=14852 comm="syz.2.2382" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 781.075677][ T29] audit: type=1400 audit(1734060310.677:522): avc: denied { read } for pid=14850 comm="syz.1.2381" dev="nsfs" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 781.875232][ T29] audit: type=1400 audit(1734060310.677:523): avc: denied { open } for pid=14850 comm="syz.1.2381" path="net:[4026532812]" dev="nsfs" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 782.825501][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2385'. [ 782.902654][T14877] FAULT_INJECTION: forcing a failure. [ 782.902654][T14877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.532832][T14877] CPU: 1 UID: 0 PID: 14877 Comm: syz.1.2386 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 783.543599][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 783.553638][T14877] Call Trace: [ 783.556897][T14877] [ 783.559807][T14877] dump_stack_lvl+0x16c/0x1f0 [ 783.564472][T14877] should_fail_ex+0x497/0x5b0 [ 783.569137][T14877] _copy_to_user+0x32/0xd0 [ 783.573558][T14877] simple_read_from_buffer+0xd0/0x160 [ 783.578948][T14877] proc_fail_nth_read+0x198/0x270 [ 783.583974][T14877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.589519][T14877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 783.595067][T14877] vfs_read+0x1df/0xbe0 [ 783.599219][T14877] ? __fget_files+0x1fc/0x3a0 [ 783.603887][T14877] ? __pfx___mutex_lock+0x10/0x10 [ 783.608907][T14877] ? __pfx_vfs_read+0x10/0x10 [ 783.613583][T14877] ? __fget_files+0x206/0x3a0 [ 783.618256][T14877] ksys_read+0x12b/0x250 [ 783.622491][T14877] ? __pfx_ksys_read+0x10/0x10 [ 783.627247][T14877] ? rcu_is_watching+0x12/0xc0 [ 783.632008][T14877] do_syscall_64+0xcd/0x250 [ 783.636511][T14877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.642398][T14877] RIP: 0033:0x7f42f3f8472c [ 783.646802][T14877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 783.666405][T14877] RSP: 002b:00007f42f4d03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 783.674811][T14877] RAX: ffffffffffffffda RBX: 00007f42f4175fa0 RCX: 00007f42f3f8472c [ 783.682771][T14877] RDX: 000000000000000f RSI: 00007f42f4d030a0 RDI: 0000000000000005 [ 783.690823][T14877] RBP: 00007f42f4d03090 R08: 0000000000000000 R09: 0000000000000000 [ 783.698784][T14877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.706745][T14877] R13: 0000000000000000 R14: 00007f42f4175fa0 R15: 00007ffc930ac658 [ 783.714725][T14877] [ 784.060783][T14885] netdevsim netdevsim2: Direct firmware load for ωτ failed with error -2 [ 784.069497][T14885] netdevsim netdevsim2: Falling back to sysfs fallback for: ωτ [ 785.421197][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 785.421218][ T29] audit: type=1400 audit(1734060314.567:549): avc: denied { write } for pid=14892 comm="syz.1.2391" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 785.587765][ T29] audit: type=1400 audit(1734060315.197:550): avc: denied { create } for pid=14896 comm="syz.3.2392" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 785.742970][ T29] audit: type=1400 audit(1734060315.377:551): avc: denied { read } for pid=14899 comm="syz.1.2394" name="v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 785.774353][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2392'. [ 785.851401][ T29] audit: type=1400 audit(1734060315.377:552): avc: denied { open } for pid=14899 comm="syz.1.2394" path="/dev/v4l-subdev3" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.089966][ T29] audit: type=1326 audit(1734060315.587:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14899 comm="syz.1.2394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42f3f85d19 code=0x0 [ 786.123951][ T29] audit: type=1400 audit(1734060315.777:554): avc: denied { write } for pid=14874 comm="syz.4.2388" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 786.442995][ T29] audit: type=1400 audit(1734060316.117:555): avc: denied { write } for pid=14902 comm="syz.2.2395" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.479600][ T29] audit: type=1400 audit(1734060316.117:556): avc: denied { ioctl } for pid=14902 comm="syz.2.2395" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 786.575821][ T29] audit: type=1400 audit(1734060316.117:557): avc: denied { mounton } for pid=14902 comm="syz.2.2395" path="/490/file0" dev="tmpfs" ino=2768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 786.613546][ T29] audit: type=1400 audit(1734060316.127:558): avc: denied { create } for pid=14914 comm="syz.3.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 787.236177][T14922] vivid-002: ================= START STATUS ================= [ 787.252161][T14922] vivid-002: Radio HW Seek Mode: Bounded [ 788.039064][T14922] vivid-002: Radio Programmable HW Seek: false [ 788.057928][T14922] vivid-002: RDS Rx I/O Mode: Block I/O [ 788.176678][T14922] vivid-002: Generate RBDS Instead of RDS: false [ 788.224701][T14922] vivid-002: RDS Reception: true [ 788.248476][T14922] vivid-002: RDS Program Type: 0 inactive [ 788.348136][T14941] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2403'. [ 788.421123][T14922] vivid-002: RDS PS Name: inactive [ 788.426726][T14922] vivid-002: RDS Radio Text: inactive [ 788.432219][T14922] vivid-002: RDS Traffic Announcement: false inactive [ 788.439288][T14922] vivid-002: RDS Traffic Program: false inactive [ 788.457992][T14922] vivid-002: RDS Music: false inactive [ 788.689154][T14922] vivid-002: ================== END STATUS ================== [ 792.832851][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 792.832868][ T29] audit: type=1400 audit(1868278050.494:576): avc: denied { ioctl } for pid=14973 comm="syz.3.2413" path="socket:[52751]" dev="sockfs" ino=52751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 792.932865][ T29] audit: type=1400 audit(1868278050.504:577): avc: denied { ioctl } for pid=14973 comm="syz.3.2413" path="socket:[52752]" dev="sockfs" ino=52752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 792.984544][ T29] audit: type=1400 audit(1868278050.514:578): avc: denied { read } for pid=14973 comm="syz.3.2413" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 792.987538][T14985] overlayfs: failed to resolve './file1': -2 [ 793.029969][ T29] audit: type=1400 audit(1868278050.514:579): avc: denied { open } for pid=14973 comm="syz.3.2413" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 793.070143][T14989] netdevsim netdevsim0: Direct firmware load for ωτ failed with error -2 [ 793.078933][T14989] netdevsim netdevsim0: Falling back to sysfs fallback for: ωτ [ 793.150095][T14992] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 793.198077][ T29] audit: type=1400 audit(1868278050.514:580): avc: denied { ioctl } for pid=14973 comm="syz.3.2413" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 793.293085][ T29] audit: type=1400 audit(1868278050.674:581): avc: denied { mounton } for pid=14984 comm="syz.1.2415" path="/475/bus" dev="tmpfs" ino=2599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 793.320824][ T29] audit: type=1400 audit(1868278050.714:582): avc: denied { getopt } for pid=14986 comm="syz.2.2416" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.361432][ T29] audit: type=1400 audit(1868278050.924:583): avc: denied { create } for pid=14986 comm="syz.2.2416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 793.401193][ T29] audit: type=1400 audit(1868278050.934:584): avc: denied { ioctl } for pid=14986 comm="syz.2.2416" path="socket:[52772]" dev="sockfs" ino=52772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 793.623588][ T5864] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 793.791479][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2419'. [ 794.041571][ T29] audit: type=1400 audit(1868278051.574:585): avc: denied { ioctl } for pid=15001 comm="syz.0.2420" path="socket:[52791]" dev="sockfs" ino=52791 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 794.124191][ T5864] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 794.134080][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.151339][ T5864] usb 4-1: config 0 descriptor?? [ 794.155511][T15003] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2420'. [ 794.170694][ T5864] pwc: Creative Labs Webcam 5 detected. [ 794.235633][T15006] IPv6: Can't replace route, no match found [ 794.248206][T15008] binder: 15007:15008 ioctl c0306201 0 returned -14 [ 794.374418][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.384533][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.393547][ T5864] pwc: Failed to set LED on/off time (-71) [ 794.400081][ T5864] pwc: send_video_command error -71 [ 794.405356][ T5864] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 794.413050][ T5864] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 794.423792][ T5864] usb 4-1: USB disconnect, device number 35 [ 796.577061][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2429'. [ 796.900818][T15051] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 797.263176][T15057] ebtables: ebtables: counters copy to user failed while replacing table [ 797.363203][ T5817] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 797.493015][ T5817] usb 5-1: device descriptor read/64, error -71 [ 797.752864][ T5817] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 797.843191][ T5864] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 797.918333][ T5817] usb 5-1: device descriptor read/64, error -71 [ 797.955922][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 797.955939][ T29] audit: type=1400 audit(1868278055.644:619): avc: denied { read write } for pid=15071 comm="syz.0.2436" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 798.034993][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 798.055483][ T5817] usb usb5-port1: attempt power cycle [ 798.070626][ T29] audit: type=1400 audit(1868278055.674:620): avc: denied { open } for pid=15071 comm="syz.0.2436" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 798.072913][ T5864] usb 2-1: config 1 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 798.182325][ T29] audit: type=1400 audit(1868278055.734:621): avc: denied { mount } for pid=15071 comm="syz.0.2436" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 798.217828][ T5864] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x82 has invalid maxpacket 1023 [ 798.247242][ T5864] usb 2-1: config 1 interface 0 altsetting 235 bulk endpoint 0x3 has invalid maxpacket 255 [ 798.271275][ T5864] usb 2-1: config 1 interface 0 has no altsetting 0 [ 798.291920][ T5864] usb 2-1: New USB device found, idVendor=0525, idProduct=0800, bcdDevice= 0.00 [ 798.316326][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.338229][ T5864] usb 2-1: Product: syz [ 798.362816][ T5895] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 798.369146][ T5864] usb 2-1: Manufacturer: syz [ 798.389690][ T5864] usb 2-1: SerialNumber: syz [ 798.429209][T15062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.472868][ T5817] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 798.495087][ T5817] usb 5-1: device descriptor read/8, error -71 [ 798.506108][T15062] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.841702][T15076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2437'. [ 798.977540][ T5817] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 799.034726][ T5817] usb 5-1: device descriptor read/8, error -71 [ 799.212941][ T5817] usb usb5-port1: unable to enumerate USB device [ 799.240945][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 799.263023][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 799.308533][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 799.366740][ T5895] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 799.380885][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.398558][ T5895] usb 1-1: Product: syz [ 799.417316][ T5895] usb 1-1: Manufacturer: syz [ 799.460485][ T5895] usb 1-1: SerialNumber: syz [ 799.474797][ T5895] usb 1-1: config 0 descriptor?? [ 799.623060][ T5895] rc_core: IR keymap rc-streamzap not found [ 799.628958][ T5895] Registered IR keymap rc-empty [ 799.652834][ T29] audit: type=1400 audit(1868278057.334:622): avc: denied { read write } for pid=15084 comm="syz.3.2440" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 799.679551][ T5895] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 799.738670][T15087] input: syz1 as /devices/virtual/input/input32 [ 799.739643][ T5895] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 799.758788][ T29] audit: type=1400 audit(1868278057.334:623): avc: denied { open } for pid=15084 comm="syz.3.2440" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 799.783475][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2440'. [ 799.832531][ T29] audit: type=1400 audit(1868278057.364:624): avc: denied { ioctl } for pid=15084 comm="syz.3.2440" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 799.887428][T15085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2440'. [ 799.919036][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 799.931275][ T5895] usb 1-1: USB disconnect, device number 20 [ 799.945130][ T29] audit: type=1400 audit(1868278057.424:625): avc: denied { create } for pid=15084 comm="syz.3.2440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 800.002137][T15085] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 56152 - 0 [ 800.048330][ T29] audit: type=1400 audit(1868278057.444:626): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.111549][ T29] audit: type=1400 audit(1868278057.444:627): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.152599][T15085] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 56152 - 0 [ 800.173756][ T29] audit: type=1400 audit(1868278057.444:628): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2977 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 800.178658][T15085] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 56152 - 0 [ 800.221594][T15085] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 56152 - 0 [ 800.756107][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 801.002935][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 801.078421][ T5895] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 801.207828][ T5895] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 801.283708][ T5895] usb 4-1: config 0 has no interface number 0 [ 801.290395][ T5895] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x1 has invalid maxpacket 1088, setting to 1024 [ 801.301620][ T5895] usb 4-1: config 0 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 801.321045][ T5895] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c5.ab [ 801.330307][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.399448][ T5864] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 801.409882][ T5895] usb 4-1: Product: syz [ 801.414905][ T5864] usb 2-1: USB disconnect, device number 21 [ 801.432802][ T5895] usb 4-1: Manufacturer: syz [ 801.437431][ T5895] usb 4-1: SerialNumber: syz [ 801.615803][T15113] vivid-001: ================= START STATUS ================= [ 801.625464][T15113] vivid-001: Radio HW Seek Mode: Bounded [ 801.631489][T15113] vivid-001: Radio Programmable HW Seek: false [ 801.638826][T15113] vivid-001: RDS Rx I/O Mode: Block I/O [ 801.640034][ T5895] usb 4-1: config 0 descriptor?? [ 801.650008][T15113] vivid-001: Generate RBDS Instead of RDS: false [ 801.656804][T15113] vivid-001: RDS Reception: true [ 801.663340][T15113] vivid-001: RDS Program Type: 0 inactive [ 801.678516][T15100] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 801.695322][ T5895] usb 4-1: Error in usbnet_get_endpoints (-22) [ 802.112916][T15117] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2450'. [ 802.173051][T15113] vivid-001: RDS PS Name: inactive [ 802.184826][T15113] vivid-001: RDS Radio Text: inactive [ 802.190960][T15113] vivid-001: RDS Traffic Announcement: false inactive [ 802.198125][T15113] vivid-001: RDS Traffic Program: false inactive [ 802.205673][T15113] vivid-001: RDS Music: false inactive [ 802.211462][T15113] vivid-001: ================== END STATUS ================== [ 803.581927][ T5895] usb 4-1: USB disconnect, device number 36 [ 804.970516][T13894] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 805.505712][T13894] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 805.531230][T13894] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.549891][T13894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.579142][T13894] usb 5-1: Product: syz [ 805.597395][T13894] usb 5-1: Manufacturer: syz [ 805.617870][T13894] usb 5-1: SerialNumber: syz [ 805.655181][T15161] overlayfs: failed to resolve './file1': -2 [ 806.372765][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 806.372783][ T29] audit: type=1326 audit(1868278064.054:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15162 comm="syz.3.2461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd68f585d19 code=0x0 [ 806.852523][T15173] vivid-001: ================= START STATUS ================= [ 806.860772][T15173] vivid-001: Radio HW Seek Mode: Bounded [ 806.866972][T15173] vivid-001: Radio Programmable HW Seek: false [ 806.873632][T15173] vivid-001: RDS Rx I/O Mode: Block I/O [ 806.881718][T15173] vivid-001: Generate RBDS Instead of RDS: false [ 806.888967][T15173] vivid-001: RDS Reception: true [ 806.895256][T15173] vivid-001: RDS Program Type: 0 inactive [ 806.901674][T15173] vivid-001: RDS PS Name: inactive [ 806.907793][T15173] vivid-001: RDS Radio Text: inactive [ 806.913646][T15173] vivid-001: RDS Traffic Announcement: false inactive [ 806.921186][T15173] vivid-001: RDS Traffic Program: false inactive [ 806.928004][T15173] vivid-001: RDS Music: false inactive [ 806.933852][T15173] vivid-001: ================== END STATUS ================== [ 807.033814][ T5864] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 807.352871][ T5864] usb 4-1: Using ep0 maxpacket: 8 [ 807.863272][T13894] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 807.869960][T13894] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 807.878756][T13894] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 807.978791][ T5864] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 807.999202][ T5864] usb 4-1: config 0 has an invalid interface number: 7 but max is 0 [ 808.011113][T15184] binder: 15183:15184 ioctl c0306201 20000080 returned -11 [ 808.029333][ T5864] usb 4-1: config 0 has no interface number 0 [ 808.045062][ T5864] usb 4-1: config 0 interface 7 altsetting 0 endpoint 0x1 has invalid maxpacket 1088, setting to 1024 [ 808.082983][ T5864] usb 4-1: config 0 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 808.110189][ T5864] usb 4-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c5.ab [ 808.133613][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.540707][T15192] QAT: Device 7 not found [ 808.662366][ T5864] usb 4-1: Product: syz [ 808.666626][ T5864] usb 4-1: Manufacturer: syz [ 808.671245][ T5864] usb 4-1: SerialNumber: syz [ 808.677826][ T5864] usb 4-1: config 0 descriptor?? [ 808.683836][T15176] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 808.692218][ T5864] usb 4-1: Error in usbnet_get_endpoints (-22) [ 808.913591][T13894] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 808.933670][T13894] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 809.211677][T13894] usb 5-1: USB disconnect, device number 33 [ 809.275138][T13894] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 809.694258][T13894] ------------[ cut here ]------------ [ 809.699789][T13894] ODEBUG: free active (active state 0) object: ffff888035f6d260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90 [ 809.760440][T13894] WARNING: CPU: 1 PID: 13894 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 809.770478][T13894] Modules linked in: [ 809.774503][T13894] CPU: 1 UID: 0 PID: 13894 Comm: kworker/1:1 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 809.785441][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 809.795622][T13894] Workqueue: usb_hub_wq hub_event [ 809.800696][T13894] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 809.807005][T13894] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 20 e4 d1 8b 41 56 4c 89 e6 48 c7 c7 a0 d8 d1 8b e8 4f 34 b5 fc 90 <0f> 0b 90 90 58 83 05 26 2e ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 809.827158][T13894] RSP: 0018:ffffc90002fb7458 EFLAGS: 00010282 [ 809.833381][T13894] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001aaba000 [ 809.841376][T13894] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 809.849435][T13894] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 809.857518][T13894] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1df40 [ 809.865603][T13894] R13: ffffffff8b6bede0 R14: ffffffff86d18160 R15: ffffc90002fb7568 [ 809.873642][T13894] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 809.882601][T13894] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.889341][T13894] CR2: 0000000000000000 CR3: 000000002d266000 CR4: 00000000003526f0 [ 809.897398][T13894] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 809.905451][T13894] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 809.913839][T13894] Call Trace: [ 809.917138][T13894] [ 809.920085][T13894] ? __warn+0xea/0x3c0 [ 809.924421][T13894] ? preempt_schedule_notrace+0x62/0xe0 [ 809.929998][T13894] ? debug_print_object+0x1a2/0x2b0 [ 809.935252][T13894] ? report_bug+0x3c0/0x580 [ 809.939775][T13894] ? handle_bug+0x54/0xa0 [ 809.944167][T13894] ? exc_invalid_op+0x17/0x50 [ 809.948867][T13894] ? asm_exc_invalid_op+0x1a/0x20 [ 809.954024][T13894] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 809.959963][T13894] ? __warn_printk+0x1a6/0x350 [ 809.964803][T13894] ? debug_print_object+0x1a2/0x2b0 [ 809.970022][T13894] ? debug_print_object+0x1a1/0x2b0 [ 809.975264][T13894] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 809.981183][T13894] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 809.987092][T13894] debug_check_no_obj_freed+0x4b7/0x600 [ 809.991366][ T29] audit: type=1400 audit(1868278067.674:632): avc: denied { setopt } for pid=15175 comm="syz.3.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 809.992636][T13894] ? __pfx_mark_lock+0x10/0x10 [ 809.992676][T13894] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 810.017232][ T29] audit: type=1400 audit(1868278067.674:633): avc: denied { ioctl } for pid=15175 comm="syz.3.2466" path="socket:[53510]" dev="sockfs" ino=53510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 810.017673][T13894] kfree+0x2b3/0x4b0 [ 810.052623][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.057451][T13894] ? kvfree+0x47/0x50 [ 810.061460][T13894] kvfree+0x47/0x50 [ 810.065330][T13894] ? __pfx_netdev_release+0x10/0x10 [ 810.070546][T13894] device_release+0xa1/0x240 [ 810.075208][T13894] kobject_put+0x1e4/0x5a0 [ 810.079675][T13894] put_device+0x1f/0x30 [ 810.083920][T13894] free_netdev+0x4f1/0x6c0 [ 810.088367][T13894] usbnet_disconnect+0x25c/0x500 [ 810.093379][T13894] usb_unbind_interface+0x1e2/0x960 [ 810.098591][T13894] ? kernfs_find_ns+0x2ee/0x3f0 [ 810.103507][T13894] ? __pfx_usb_unbind_interface+0x10/0x10 [ 810.109254][T13894] device_remove+0x122/0x170 [ 810.114227][T13894] device_release_driver_internal+0x44a/0x610 [ 810.120338][T13894] bus_remove_device+0x22f/0x420 [ 810.125598][T13894] device_del+0x396/0x9f0 [ 810.129955][T13894] ? __pfx_device_del+0x10/0x10 [ 810.134878][T13894] ? kobject_put+0x210/0x5a0 [ 810.139498][T13894] usb_disable_device+0x36c/0x7f0 [ 810.144598][T13894] usb_disconnect+0x2e1/0x920 [ 810.149292][T13894] hub_event+0x1da5/0x4e10 [ 810.153780][T13894] ? lock_acquire+0x2f/0xb0 [ 810.158307][T13894] ? __pfx_hub_event+0x10/0x10 [ 810.163141][T13894] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 810.168784][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.173660][T13894] ? trace_lock_acquire+0x14e/0x1f0 [ 810.178876][T13894] ? process_one_work+0x921/0x1ba0 [ 810.184037][T13894] ? lock_acquire+0x2f/0xb0 [ 810.188557][T13894] ? process_one_work+0x921/0x1ba0 [ 810.193771][T13894] process_one_work+0x9c5/0x1ba0 [ 810.198720][T13894] ? __pfx_hub_event+0x10/0x10 [ 810.203544][T13894] ? __pfx_process_one_work+0x10/0x10 [ 810.208931][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.213760][T13894] ? assign_work+0x1a0/0x250 [ 810.218678][T13894] worker_thread+0x6c8/0xf00 [ 810.223560][T13894] ? __kthread_parkme+0x148/0x220 [ 810.228615][T13894] ? __pfx_worker_thread+0x10/0x10 [ 810.233761][T13894] kthread+0x2c1/0x3a0 [ 810.237836][T13894] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.243085][T13894] ? __pfx_kthread+0x10/0x10 [ 810.247693][T13894] ret_from_fork+0x45/0x80 [ 810.252106][T13894] ? __pfx_kthread+0x10/0x10 [ 810.256729][T13894] ret_from_fork_asm+0x1a/0x30 [ 810.261524][T13894] [ 810.264621][T13894] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 810.271894][T13894] CPU: 1 UID: 0 PID: 13894 Comm: kworker/1:1 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 810.282739][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 810.292801][T13894] Workqueue: usb_hub_wq hub_event [ 810.297842][T13894] Call Trace: [ 810.301109][T13894] [ 810.304033][T13894] dump_stack_lvl+0x3d/0x1f0 [ 810.308629][T13894] panic+0x71d/0x800 [ 810.312514][T13894] ? __pfx_panic+0x10/0x10 [ 810.316930][T13894] ? show_trace_log_lvl+0x29d/0x3d0 [ 810.322124][T13894] ? debug_print_object+0x1a2/0x2b0 [ 810.327322][T13894] check_panic_on_warn+0xab/0xb0 [ 810.332270][T13894] __warn+0xf6/0x3c0 [ 810.336162][T13894] ? preempt_schedule_notrace+0x62/0xe0 [ 810.341708][T13894] ? debug_print_object+0x1a2/0x2b0 [ 810.346902][T13894] report_bug+0x3c0/0x580 [ 810.351230][T13894] handle_bug+0x54/0xa0 [ 810.355383][T13894] exc_invalid_op+0x17/0x50 [ 810.359883][T13894] asm_exc_invalid_op+0x1a/0x20 [ 810.364734][T13894] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 810.370532][T13894] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 20 e4 d1 8b 41 56 4c 89 e6 48 c7 c7 a0 d8 d1 8b e8 4f 34 b5 fc 90 <0f> 0b 90 90 58 83 05 26 2e ba 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 810.390134][T13894] RSP: 0018:ffffc90002fb7458 EFLAGS: 00010282 [ 810.396197][T13894] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001aaba000 [ 810.404159][T13894] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 810.412122][T13894] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 810.420082][T13894] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bd1df40 [ 810.428047][T13894] R13: ffffffff8b6bede0 R14: ffffffff86d18160 R15: ffffc90002fb7568 [ 810.436012][T13894] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 810.441911][T13894] ? __warn_printk+0x1a6/0x350 [ 810.446679][T13894] ? debug_print_object+0x1a1/0x2b0 [ 810.451866][T13894] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 810.457754][T13894] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 810.463557][T13894] debug_check_no_obj_freed+0x4b7/0x600 [ 810.469095][T13894] ? __pfx_mark_lock+0x10/0x10 [ 810.473858][T13894] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 810.479932][T13894] kfree+0x2b3/0x4b0 [ 810.483818][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.488580][T13894] ? kvfree+0x47/0x50 [ 810.492561][T13894] kvfree+0x47/0x50 [ 810.496361][T13894] ? __pfx_netdev_release+0x10/0x10 [ 810.501549][T13894] device_release+0xa1/0x240 [ 810.506139][T13894] kobject_put+0x1e4/0x5a0 [ 810.510552][T13894] put_device+0x1f/0x30 [ 810.514706][T13894] free_netdev+0x4f1/0x6c0 [ 810.519122][T13894] usbnet_disconnect+0x25c/0x500 [ 810.524064][T13894] usb_unbind_interface+0x1e2/0x960 [ 810.529258][T13894] ? kernfs_find_ns+0x2ee/0x3f0 [ 810.534116][T13894] ? __pfx_usb_unbind_interface+0x10/0x10 [ 810.539826][T13894] device_remove+0x122/0x170 [ 810.544409][T13894] device_release_driver_internal+0x44a/0x610 [ 810.550478][T13894] bus_remove_device+0x22f/0x420 [ 810.555412][T13894] device_del+0x396/0x9f0 [ 810.559735][T13894] ? __pfx_device_del+0x10/0x10 [ 810.564577][T13894] ? kobject_put+0x210/0x5a0 [ 810.569169][T13894] usb_disable_device+0x36c/0x7f0 [ 810.574198][T13894] usb_disconnect+0x2e1/0x920 [ 810.578879][T13894] hub_event+0x1da5/0x4e10 [ 810.583316][T13894] ? lock_acquire+0x2f/0xb0 [ 810.587815][T13894] ? __pfx_hub_event+0x10/0x10 [ 810.592578][T13894] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 810.598203][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.602965][T13894] ? trace_lock_acquire+0x14e/0x1f0 [ 810.608162][T13894] ? process_one_work+0x921/0x1ba0 [ 810.613267][T13894] ? lock_acquire+0x2f/0xb0 [ 810.617772][T13894] ? process_one_work+0x921/0x1ba0 [ 810.622879][T13894] process_one_work+0x9c5/0x1ba0 [ 810.627820][T13894] ? __pfx_hub_event+0x10/0x10 [ 810.632584][T13894] ? __pfx_process_one_work+0x10/0x10 [ 810.637949][T13894] ? rcu_is_watching+0x12/0xc0 [ 810.642715][T13894] ? assign_work+0x1a0/0x250 [ 810.647311][T13894] worker_thread+0x6c8/0xf00 [ 810.651905][T13894] ? __kthread_parkme+0x148/0x220 [ 810.656926][T13894] ? __pfx_worker_thread+0x10/0x10 [ 810.662031][T13894] kthread+0x2c1/0x3a0 [ 810.666099][T13894] ? _raw_spin_unlock_irq+0x23/0x50 [ 810.671293][T13894] ? __pfx_kthread+0x10/0x10 [ 810.675882][T13894] ret_from_fork+0x45/0x80 [ 810.680293][T13894] ? __pfx_kthread+0x10/0x10 [ 810.684879][T13894] ret_from_fork_asm+0x1a/0x30 [ 810.689651][T13894] [ 810.692883][T13894] Kernel Offset: disabled [ 810.697235][T13894] Rebooting in 86400 seconds..