last executing test programs: 14m39.837822319s ago: executing program 32 (id=8329): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) poll(&(0x7f0000002240)=[{r0, 0x2}], 0x1, 0x2103) write$FUSE_ATTR(r0, &(0x7f0000005000)={0x78, 0x0, r1, {0x2, 0x401, 0x0, {0x5, 0x5, 0x1f, 0x6, 0x3, 0xfffffffffffff8a8, 0x8, 0x6, 0x7f, 0x8000, 0x7, 0x0, 0x0, 0x7, 0x7}}}, 0x78) 9m51.986176574s ago: executing program 33 (id=10615): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc820, 0x5, 0x401, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x2, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x5, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0xd, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x3, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0xb, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x10080, 0x9, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x800, 0x200, 0xfffffffe, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x4, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x3, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x7, 0x8, 0x2, 0xfffffffc, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0xfffffffc, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x3ff, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 7m12.050578642s ago: executing program 34 (id=11677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffff4, 0x7, 0x109e9b, 0x3, 0x8000000000000001, 0x6, 0x0, 0x2, 0x8000000000000000, 0x48d6, 0x4, 0x6, 0x5, 0x20000001], 0xd5d5c004, 0x44341}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2af}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m22.554059934s ago: executing program 0 (id=11890): socket$alg(0x26, 0x5, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000380)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3, 0x12) 6m21.560961503s ago: executing program 0 (id=11894): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000007c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0300000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0, 0x4c}, {&(0x7f0000000080)=""/88, 0x58}], 0x2}, 0xffffffff}], 0x1, 0x0, 0x0) 6m21.006338943s ago: executing program 0 (id=11896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2834) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) 6m20.103662463s ago: executing program 0 (id=11898): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) 6m16.560976065s ago: executing program 0 (id=11913): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x10000000}) 6m14.342360744s ago: executing program 0 (id=11926): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5m58.19613994s ago: executing program 35 (id=11926): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0xa0}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 3m50.026140592s ago: executing program 8 (id=12653): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x12}], 0x1, 0x100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 3m49.6605387s ago: executing program 8 (id=12656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 3m49.518647664s ago: executing program 8 (id=12657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m49.02894286s ago: executing program 8 (id=12659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3m48.877034113s ago: executing program 8 (id=12660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 3m48.616813214s ago: executing program 8 (id=12661): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) openat$dsp(0xffffffffffffff9c, 0x0, 0x183100, 0x0) r1 = syz_io_uring_setup(0x6e92, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40040333}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m32.366272906s ago: executing program 36 (id=12661): socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) openat$dsp(0xffffffffffffff9c, 0x0, 0x183100, 0x0) r1 = syz_io_uring_setup(0x6e92, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40040333}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m47.715293732s ago: executing program 7 (id=12887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 2m45.254235351s ago: executing program 7 (id=12893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m44.311061109s ago: executing program 7 (id=12898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2m41.826238693s ago: executing program 7 (id=12906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m41.252484138s ago: executing program 7 (id=12909): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) 2m40.316167877s ago: executing program 7 (id=12912): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m39.40795351s ago: executing program 1 (id=12915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000580)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m38.567818969s ago: executing program 1 (id=12918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) write$tun(r0, 0x0, 0xfdef) timer_create(0x0, 0x0, 0x0) 2m38.455327329s ago: executing program 1 (id=12919): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) 2m37.30304005s ago: executing program 1 (id=12921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000020000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2m36.129002429s ago: executing program 1 (id=12925): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000580)=ANY=[], 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@random="c5bb36c76521", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x8f, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 2m35.649077586s ago: executing program 1 (id=12928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sync() connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$eventfd(r3, &(0x7f0000000100), 0x8) 2m24.563749364s ago: executing program 9 (id=12968): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2m24.076620715s ago: executing program 37 (id=12912): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m23.167837705s ago: executing program 9 (id=12975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) 2m21.517631431s ago: executing program 9 (id=12977): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m19.255094956s ago: executing program 38 (id=12928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sync() connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$eventfd(r3, &(0x7f0000000100), 0x8) 2m16.541803495s ago: executing program 9 (id=12986): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/90, 0x48}], 0x1) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x7f, 0x5, 0x8001, 0x0, 0xfffffffe, 0xffffffff}) 2m12.68034593s ago: executing program 9 (id=12990): fanotify_init(0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m5.106431491s ago: executing program 9 (id=13005): ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 1m48.95801661s ago: executing program 39 (id=13005): ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, 0x0) unshare(0x26020480) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 16.197729806s ago: executing program 6 (id=13234): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x110, 0x0, 0x0, 0x0, [0x0], [0x4, 0x0, 0xd], [0x2, 0xf733], [0xfffffffffffffffc, 0x0, 0x0, 0x9f1a]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r7}) 15.433246481s ago: executing program 6 (id=13236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 14.03638821s ago: executing program 6 (id=13237): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 13.46402345s ago: executing program 5 (id=13239): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 11.292961066s ago: executing program 2 (id=13241): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000640)) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x20a0, 0x20000000, 0x0, 0x0, 0x0) 10.496965657s ago: executing program 5 (id=13243): syz_io_uring_setup(0x839, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8], 0x1}}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2000, 0x1e9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x12, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) read$char_usb(r3, &(0x7f0000000180)=""/189, 0xbd) 9.401248109s ago: executing program 5 (id=13245): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) 9.030482135s ago: executing program 3 (id=13246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000003000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 8.318629075s ago: executing program 5 (id=13247): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_connect(0x7, 0x9dd, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 8.007679486s ago: executing program 2 (id=13249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 7.496148701s ago: executing program 3 (id=13250): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.489363081s ago: executing program 2 (id=13251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x4987, 0x0, 0x0, &(0x7f0000000140)) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 6.459154858s ago: executing program 4 (id=13252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="64f3a49a2aa20eeb7d00b8000000000f23d80f21f835400000400f23f8f466baf80cb876d28082ef66bafc0cb0b2c4c1f9fa933f490000c4e2b928bc765862e16af20fe6d4f3d973fc0f07670f35", 0x4e}], 0x1, 0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0, @ANYBLOB]) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.12783907s ago: executing program 3 (id=13253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0xb15, 0x4) sendmmsg$inet(r2, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x40000c0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.593151543s ago: executing program 6 (id=13254): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r0, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r3, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800}) 5.513983433s ago: executing program 4 (id=13255): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x35) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.830545257s ago: executing program 6 (id=13256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 4.830380838s ago: executing program 3 (id=13257): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) 4.830244521s ago: executing program 4 (id=13258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000009cd3000000000000000000850000002a00000085000000d000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.765234633s ago: executing program 5 (id=13259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0xf4) 3.673504725s ago: executing program 4 (id=13260): socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000141000/0x1000)=nil, 0x1000) 2.937138418s ago: executing program 4 (id=13261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 2.899640347s ago: executing program 3 (id=13262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1f) keyctl$set_timeout(0xf, 0x0, 0x6) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f0006ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x20042894}, 0x0) 2.220861526s ago: executing program 2 (id=13263): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x2f423f, 0xfffefffffffffffc, 0x0, 0x0, 0x10000000000009, 0x0, 0x0, 0x8, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x3, 0x3, 0x1, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}, 0x1, 0x0, 0x0, 0x30000050}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="d6f272beada48ef8a1c33818b639e6707c02f4bbd741ce9a70a2eabe8476a9cf7a271512161533471e83e2ace60f6f75f6431c171c6bf7d68489b25ee892a695c6f1ef641cf3738a7233f4ffd26d1874002092510456dedcb8f43004be35a44ecb0770fb524095aadbfd6809b516e6817e0b6be8c8e02f014543041da002997a9f9faa809e130b2a58dc8ab2be944ec2ee7b33f7e7877fb8234d054bc25dfed9e5148f8f8ee3b514bb09d23054e15e04dddb1b3c2d39702dea1a671333667c6d518ab0fe61c082eeaa86230be7bc8880391ab1cf430827b44941755969d5ed35a7b397df628f22d3d291fc7d0ae3612133ea1e683d516a97", @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC, @ANYRES8=r2, @ANYRES64], &(0x7f0000000b80)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, 0x0) 1.630825221s ago: executing program 6 (id=13264): fanotify_init(0x200, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x11, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) io_uring_enter(r1, 0x3516, 0x80, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.342629423s ago: executing program 3 (id=13265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x800}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000000)={&(0x7f0000001000)={[{&(0x7f0000000180)="86387b8313c21903ba45ff75b0d942515db8a67065e8d03c94ef709d16170c3d7788e18a5836ca35135bc1bb31458170a7d657418741945ff24206bf9b556f96d4fee24d543f433ab2589988f7c7f254dc3abefc5c873e6e79bdab88fedcc6c74b6f8bbe18eb44bd1a7aa45ab3cd732ffeaf93b8aaaaf672eba9942daf3f056fcbdf0af414b1c8b3227c1575e4220754474ba880e61b50cf543ea2bb2dd6203fd56e93a9e1d6ad2202f0c599", 0xac, 0x1}]}, 0x1, 0x1}, 0x1) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.257055807s ago: executing program 5 (id=13266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 838.649313ms ago: executing program 2 (id=13267): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a8da494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c841d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99ad4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a000000007dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d455bae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a950000000000000000000000003e64c8a48ae215673b928d238ac07b631e793d2bda33a80dfaaf53e6c2dea09fc29a42d2495c4192860e2866615008f74ea070c55f68", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x800, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 612.453392ms ago: executing program 4 (id=13268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r3, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r5, 0x7}, 0x8) 0s ago: executing program 2 (id=13269): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r5, 0x0) dup2(r4, r0) kernel console output (not intermixed with test programs): 0 has an invalid interface number: 1 but max is 0 [ 1268.220155][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1268.244983][ T5875] usb 4-1: config 0 has no interface number 0 [ 1268.269172][ T5875] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1268.317880][ T5875] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1268.334834][ T3421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1268.346778][ T5875] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1268.373834][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.430728][ T5875] usb 4-1: Product: syz [ 1268.434905][ T5875] usb 4-1: Manufacturer: syz [ 1268.439493][ T5875] usb 4-1: SerialNumber: syz [ 1268.510444][ T5875] usb 4-1: config 0 descriptor?? [ 1268.795355][ T5875] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1268.831988][ T5875] cx231xx 4-1:0.1: Failed to read PCB config [ 1268.843635][ T5875] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1268.863097][ T5875] usb 4-1: USB disconnect, device number 49 [ 1268.976991][ T1203] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1269.155163][ T1203] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1269.167343][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.182266][ T1203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.196474][ T1203] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1269.217279][ T1203] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1269.227766][ T1203] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1269.243032][ T1203] usb 3-1: Manufacturer: syz [ 1269.254452][ T1203] usb 3-1: config 0 descriptor?? [ 1269.328851][ T5875] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1269.500104][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 1269.552771][ T5875] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1269.574680][ T5875] usb 4-1: config 0 has no interface number 0 [ 1269.580794][ T5875] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1269.617523][ T5875] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1269.668040][ T5875] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1269.681882][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.690326][ T5875] usb 4-1: Product: syz [ 1269.696309][ T5875] usb 4-1: Manufacturer: syz [ 1269.700918][ T5875] usb 4-1: SerialNumber: syz [ 1269.720541][ T5875] usb 4-1: config 0 descriptor?? [ 1269.766651][ T1203] appleir 0003:05AC:8243.0075: unknown main item tag 0x0 [ 1269.819801][ T1203] appleir 0003:05AC:8243.0075: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1270.148178][ T5875] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1270.196265][ T5875] cx231xx 4-1:0.1: bad config in buspower!!!! [ 1270.196265][ T5875] config_info=40 [ 1270.224563][ T5875] cx231xx 4-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1270.353621][ T1203] usb 3-1: USB disconnect, device number 39 [ 1270.360286][ T5875] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1270.407858][ T5875] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1270.438516][ T5875] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1270.464684][ T3443] fido_id[3443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1270.483482][ T5875] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1270.511378][ T5875] cx231xx 4-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1270.536447][ T5875] cx231xx 4-1:0.1: Failed to set devmode to analog: error: -71 [ 1270.642251][ T5875] i2c i2c-2: Added multiplexed i2c bus 4 [ 1270.667638][ T5875] i2c i2c-2: Added multiplexed i2c bus 5 [ 1270.691452][ T5875] cx231xx 4-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1270.720829][ T5875] cx231xx 4-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1270.796133][ T5875] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 1270.818859][ T5875] usb 4-1: USB disconnect, device number 50 [ 1270.872616][ T30] kauditd_printk_skb: 600 callbacks suppressed [ 1270.872633][ T30] audit: type=1400 audit(3918740564.385:296426): avc: denied { module_request } for pid=3446 comm="syz.1.12921" kmod="netdev-pimreg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1270.959223][ T30] audit: type=1400 audit(3918740564.441:296427): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.092805][ T30] audit: type=1400 audit(3918740564.441:296428): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.248675][ T30] audit: type=1400 audit(3918740564.450:296429): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.386166][ T30] audit: type=1400 audit(3918740564.450:296430): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.409855][ C0] blk_print_req_error: 15 callbacks suppressed [ 1271.409870][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1271.428204][ C0] buffer_io_error: 40 callbacks suppressed [ 1271.428217][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1271.456338][T18671] Buffer I/O error on dev loop9, logical block 1, async page read [ 1271.495194][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1271.505855][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1271.517383][T18671] Buffer I/O error on dev loop9, logical block 1, async page read [ 1271.531095][ T30] audit: type=1400 audit(3918740564.450:296431): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.540813][T18671] Buffer I/O error on dev loop9, logical block 1, async page read [ 1271.564257][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1271.564286][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1271.626384][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1271.637036][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1271.669285][T18671] Buffer I/O error on dev loop9, logical block 1, async page read [ 1271.688705][ T30] audit: type=1400 audit(3918740564.450:296432): avc: denied { recv } for pid=3448 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.714452][ T30] audit: type=1400 audit(3918740564.450:296433): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1271.784128][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1271.794764][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1271.806204][T18671] Buffer I/O error on dev loop9, logical block 1, async page read [ 1271.829342][ T30] audit: type=1400 audit(3918740564.469:296434): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.914837][ T30] audit: type=1400 audit(3918740564.469:296435): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1272.067063][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1272.079213][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1272.095952][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1272.118037][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1272.130633][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1273.001505][ T758] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1273.011660][ T758] CPU: 1 UID: 0 PID: 758 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.011692][ T758] Tainted: [L]=SOFTLOCKUP [ 1273.011699][ T758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1273.011712][ T758] Workqueue: hci4 hci_rx_work [ 1273.011735][ T758] Call Trace: [ 1273.011742][ T758] [ 1273.011750][ T758] dump_stack_lvl+0x100/0x190 [ 1273.011782][ T758] sysfs_warn_dup.cold+0x1c/0x28 [ 1273.011807][ T758] sysfs_create_dir_ns+0x24b/0x2b0 [ 1273.011830][ T758] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1273.011851][ T758] ? find_held_lock+0x2b/0x80 [ 1273.011875][ T758] ? kobject_add_internal+0x25f/0x930 [ 1273.011904][ T758] ? kobject_add_internal+0x25f/0x930 [ 1273.011935][ T758] ? do_raw_spin_unlock+0x145/0x1e0 [ 1273.011959][ T758] kobject_add_internal+0x2c8/0x930 [ 1273.011988][ T758] kobject_add+0x16a/0x1e0 [ 1273.012014][ T758] ? __pfx_kobject_add+0x10/0x10 [ 1273.012038][ T758] ? class_to_subsys+0x10f/0x150 [ 1273.012062][ T758] ? kobject_put+0xb9/0x640 [ 1273.012085][ T758] ? _raw_spin_unlock+0x28/0x50 [ 1273.012112][ T758] device_add+0x294/0x1950 [ 1273.012131][ T758] ? __pfx_dev_set_name+0x10/0x10 [ 1273.012154][ T758] ? __pfx_device_add+0x10/0x10 [ 1273.012174][ T758] ? mgmt_send_event_skb+0x2fb/0x460 [ 1273.012202][ T758] hci_conn_add_sysfs+0x1a3/0x260 [ 1273.012228][ T758] le_conn_complete_evt+0x11cb/0x1f40 [ 1273.012255][ T758] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1273.012283][ T758] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1273.012304][ T758] ? skb_pull_data+0x15f/0x1e0 [ 1273.012335][ T758] hci_le_meta_evt+0x34a/0x5f0 [ 1273.012357][ T758] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1273.012382][ T758] hci_event_packet+0x682/0x11c0 [ 1273.012403][ T758] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1273.012426][ T758] ? __pfx_hci_event_packet+0x10/0x10 [ 1273.012449][ T758] ? kcov_remote_start+0x374/0x660 [ 1273.012472][ T758] ? lockdep_hardirqs_on+0x78/0x100 [ 1273.012502][ T758] hci_rx_work+0x451/0xfc0 [ 1273.012527][ T758] process_one_work+0x9d7/0x1920 [ 1273.012564][ T758] ? __pfx_process_one_work+0x10/0x10 [ 1273.012589][ T758] ? __pfx_hci_rx_work+0x10/0x10 [ 1273.012613][ T758] worker_thread+0x5da/0xe40 [ 1273.012638][ T758] ? __pfx_worker_thread+0x10/0x10 [ 1273.012658][ T758] ? kthread+0x13a/0x450 [ 1273.012675][ T758] ? __pfx_worker_thread+0x10/0x10 [ 1273.012694][ T758] kthread+0x370/0x450 [ 1273.012710][ T758] ? __pfx_kthread+0x10/0x10 [ 1273.012731][ T758] ret_from_fork+0x754/0xd80 [ 1273.012750][ T758] ? __pfx_ret_from_fork+0x10/0x10 [ 1273.012769][ T758] ? rcu_is_watching+0x12/0xc0 [ 1273.012790][ T758] ? __switch_to+0x7b4/0x1120 [ 1273.012813][ T758] ? __pfx_kthread+0x10/0x10 [ 1273.012832][ T758] ret_from_fork_asm+0x1a/0x30 [ 1273.012867][ T758] [ 1273.012889][ T758] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1273.248561][ T3484] Set syz1 is full, maxelem 1023 reached [ 1273.255562][ T758] Bluetooth: hci4: failed to register connection device [ 1274.147907][ T3489] netlink: 'syz.9.12934': attribute type 1 has an invalid length. [ 1274.228854][ T3489] bond1: entered promiscuous mode [ 1274.233950][ T3489] bond1: entered allmulticast mode [ 1274.240002][ T3489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1274.268132][ T3489] bridge0: entered promiscuous mode [ 1274.273500][ T3489] bridge0: entered allmulticast mode [ 1274.284648][ T3489] bond1: (slave bridge0): Enslaving as a backup interface with an up link [ 1274.353694][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1274.513667][T31074] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1275.950101][ T3518] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12944'. [ 1276.018971][ T3518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3518 comm=syz.3.12944 [ 1276.032984][ T3518] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12944'. [ 1276.065765][ T3518] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12944'. [ 1276.227923][ T30] kauditd_printk_skb: 364 callbacks suppressed [ 1276.227940][ T30] audit: type=1400 audit(3918740569.389:296800): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1276.310530][ T30] audit: type=1400 audit(3918740569.399:296801): avc: denied { recv } for pid=3513 comm="syz.2.12943" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.351535][ T30] audit: type=1400 audit(3918740569.399:296802): avc: denied { recv } for pid=3513 comm="syz.2.12943" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.379433][ T30] audit: type=1400 audit(3918740569.427:296803): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.438349][ T30] audit: type=1400 audit(3918740569.427:296804): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.473058][ T30] audit: type=1400 audit(3918740569.436:296805): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.578879][ T30] audit: type=1400 audit(3918740569.446:296806): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.630438][ T30] audit: type=1400 audit(3918740569.446:296807): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.697979][ T30] audit: type=1400 audit(3918740569.455:296808): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.797537][ T30] audit: type=1400 audit(3918740569.455:296809): avc: denied { recv } for pid=3521 comm="syz.9.12945" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1276.993953][ T5868] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1277.291770][ T5868] usb 10-1: config 0 has no interfaces? [ 1277.303846][ T5868] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1277.319647][ T5868] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.338169][ T5868] usb 10-1: config 0 descriptor?? [ 1277.646010][ T5868] usb 10-1: USB disconnect, device number 4 [ 1278.367998][ T3546] netlink: 'syz.2.12951': attribute type 1 has an invalid length. [ 1278.412557][T18002] buffer_io_error: 70 callbacks suppressed [ 1278.412572][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1278.427513][ C0] blk_print_req_error: 30 callbacks suppressed [ 1278.427529][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1278.429746][ T3546] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1278.433686][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1278.449309][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1278.462289][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1278.469654][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1278.476085][ T5868] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1278.484712][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1278.494131][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1278.511478][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1278.528291][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1278.539230][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1278.549856][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1278.560589][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1278.565875][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1278.578972][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1278.581736][ T3546] bond14: entered allmulticast mode [ 1278.622807][ T3550] bond14: (slave veth9): Enslaving as an active interface with a down link [ 1278.692553][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.713702][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.738007][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1278.752021][ T5868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1278.761519][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.783567][ T5868] usb 4-1: config 0 descriptor?? [ 1279.258763][ T5868] plantronics 0003:047F:FFFF.0076: reserved main item tag 0xd [ 1279.287438][ T5868] plantronics 0003:047F:FFFF.0076: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1279.503616][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1279.525602][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1279.541566][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1279.559150][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1279.579962][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1279.659139][ T1203] usb 4-1: USB disconnect, device number 51 [ 1280.106682][ T3561] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1280.190766][T23907] block nbd0: Possible stuck request ffff888028458000: control (read@0,4096B). Runtime 690 seconds [ 1280.799342][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12958'. [ 1280.844142][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12959'. [ 1280.861268][ T36] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.862224][ T3572] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12959'. [ 1280.911460][ T36] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.942176][ T36] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1280.962782][ T36] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1281.615866][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 1281.615882][ T30] audit: type=1400 audit(3918740574.431:297140): avc: denied { recv } for pid=3576 comm="syz.3.12962" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1281.674261][ T30] audit: type=1400 audit(3918740574.431:297141): avc: denied { recv } for pid=3576 comm="syz.3.12962" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1282.017907][ T30] audit: type=1400 audit(3918740574.805:297142): avc: denied { recv } for pid=2791 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1282.044891][ T30] audit: type=1400 audit(3918740574.805:297143): avc: denied { recv } for pid=2791 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1282.080598][ T30] audit: type=1400 audit(3918740574.805:297144): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1282.108757][ T30] audit: type=1400 audit(3918740574.805:297145): avc: denied { read write } for pid=2791 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.146062][ T30] audit: type=1400 audit(3918740574.805:297146): avc: denied { read write open } for pid=2791 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.202472][ T30] audit: type=1400 audit(3918740574.805:297147): avc: denied { ioctl } for pid=2791 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.237790][ T30] audit: type=1400 audit(3918740574.899:297148): avc: denied { recv } for pid=2791 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1282.288682][ T30] audit: type=1800 audit(3918740575.058:297149): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.12963" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1284.077783][ T3604] cgroup: Unknown subsys name 'cpuset' [ 1284.211075][ T758] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1284.220402][ T758] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1284.230428][ T758] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1284.253348][ T758] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1284.273834][ T758] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1284.317555][ T3611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12972'. [ 1284.486622][ T3611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3611 comm=syz.2.12972 [ 1284.948705][ T387] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1284.990958][T29343] buffer_io_error: 50 callbacks suppressed [ 1284.990973][T29343] Buffer I/O error on dev loop9, logical block 1, async page read [ 1284.990986][ C0] blk_print_req_error: 20 callbacks suppressed [ 1284.991001][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1285.021297][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.190091][ T387] usb 3-1: Using ep0 maxpacket: 32 [ 1285.246929][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.264137][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.290027][ T387] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1285.299247][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.351791][ T387] usb 3-1: config 0 descriptor?? [ 1285.363052][T29343] Buffer I/O error on dev loop9, logical block 1, async page read [ 1285.398259][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1285.408911][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.430142][ T387] hub 3-1:0.0: USB hub found [ 1285.430209][T29343] Buffer I/O error on dev loop9, logical block 1, async page read [ 1285.435768][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1285.453134][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.469225][T29343] Buffer I/O error on dev loop9, logical block 1, async page read [ 1285.469257][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1285.487668][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.496999][T29343] Buffer I/O error on dev loop9, logical block 1, async page read [ 1285.506063][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1285.516670][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.772329][ T3606] chnl_net:caif_netlink_parms(): no params data found [ 1286.212701][ T387] hub 3-1:0.0: 1 port detected [ 1286.374267][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.392282][ T3606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.399432][ T3606] bridge_slave_0: entered allmulticast mode [ 1286.474845][ T3606] bridge_slave_0: entered promiscuous mode [ 1286.493245][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.508651][T31201] Bluetooth: hci5: command tx timeout [ 1286.531200][ T3606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.538434][ T3606] bridge_slave_1: entered allmulticast mode [ 1286.546508][ T3606] bridge_slave_1: entered promiscuous mode [ 1286.549799][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1286.583468][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1286.604090][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1286.623966][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1286.636658][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1286.691696][ T3606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1286.707707][ T3606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.785572][ T3606] team0: Port device team_slave_0 added [ 1286.802697][ T3606] team0: Port device team_slave_1 added [ 1286.838327][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.845354][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.904699][ T3606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.911519][ T387] hub 3-1:0.0: activate --> -90 [ 1286.923323][ T3606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.931458][ T3606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.968979][ T3606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.994115][ T30] kauditd_printk_skb: 192 callbacks suppressed [ 1286.994129][ T30] audit: type=1400 audit(3918740579.464:297342): avc: denied { create } for pid=3636 comm="syz.3.12978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1287.061924][ T3606] hsr_slave_0: entered promiscuous mode [ 1287.069354][ T3606] hsr_slave_1: entered promiscuous mode [ 1287.075662][ T3606] debugfs: 'hsr0' already exists in 'hsr' [ 1287.081726][ T3606] Cannot create hsr debugfs directory [ 1287.185108][ T30] audit: type=1400 audit(3918740579.464:297343): avc: denied { bind } for pid=3636 comm="syz.3.12978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1287.210560][ T30] audit: type=1400 audit(3918740579.464:297344): avc: denied { setopt } for pid=3636 comm="syz.3.12978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1287.237142][ T30] audit: type=1400 audit(3918740579.538:297345): avc: denied { setopt } for pid=3636 comm="syz.3.12978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1287.259156][ T30] audit: type=1400 audit(3918740579.585:297346): avc: denied { recv } for pid=3606 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1287.287732][ T30] audit: type=1400 audit(3918740579.641:297347): avc: denied { read } for pid=3614 comm="syz.2.12974" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1287.313932][ T30] audit: type=1400 audit(3918740579.641:297348): avc: denied { read open } for pid=3614 comm="syz.2.12974" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1287.348462][ T30] audit: type=1400 audit(3918740579.641:297349): avc: denied { ioctl } for pid=3614 comm="syz.2.12974" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1287.377251][ T30] audit: type=1400 audit(3918740579.641:297350): avc: denied { read } for pid=3614 comm="syz.2.12974" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1287.402087][ T30] audit: type=1400 audit(3918740579.641:297351): avc: denied { read open } for pid=3614 comm="syz.2.12974" path="net:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1287.455021][ T5868] usb 3-1: USB disconnect, device number 40 [ 1287.461853][ T387] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1288.732212][T31201] Bluetooth: hci5: command tx timeout [ 1289.305586][ T758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1289.326236][ T758] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1289.350632][ T758] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1289.374454][ T758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1289.391978][ T758] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1289.441869][ T3606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1289.487090][ T3606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1289.518083][ T3606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1289.596157][ T3606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1290.573598][ T3606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.685779][ T3606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.896522][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.903648][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.943780][T31077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.950863][T31077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.955873][T31201] Bluetooth: hci5: command tx timeout [ 1291.525244][ T3658] chnl_net:caif_netlink_parms(): no params data found [ 1291.644341][T31201] Bluetooth: hci1: command tx timeout [ 1291.861056][T18002] buffer_io_error: 10 callbacks suppressed [ 1291.861071][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1291.864436][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1291.885287][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1291.894995][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1291.905642][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1291.931026][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1291.943885][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1291.943992][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1291.962307][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1291.970189][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.971483][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1291.987809][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1291.988255][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.015122][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1292.028174][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1292.035344][ T3658] bridge_slave_0: entered allmulticast mode [ 1292.038803][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1292.052148][T18002] Buffer I/O error on dev loop9, logical block 1, async page read [ 1292.070153][ T3658] bridge_slave_0: entered promiscuous mode [ 1292.102518][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.160191][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.188848][ T3658] bridge_slave_1: entered allmulticast mode [ 1292.217542][ T3658] bridge_slave_1: entered promiscuous mode [ 1292.314759][ T3658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.348252][ T30] kauditd_printk_skb: 568 callbacks suppressed [ 1292.348263][ T30] audit: type=1400 audit(3918740584.477:297919): avc: denied { egress } for pid=31080 comm="kworker/u8:10" daddr=ff02::1:ff00:1c netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1292.411884][ T3658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.452515][ T30] audit: type=1400 audit(3918740584.477:297920): avc: denied { sendto } for pid=31080 comm="kworker/u8:10" daddr=ff02::1:ff00:1c netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1292.553339][ T3658] team0: Port device team_slave_0 added [ 1292.723405][ T3658] team0: Port device team_slave_1 added [ 1292.736697][ T30] audit: type=1400 audit(3918740584.674:297921): avc: denied { read write } for pid=3706 comm="syz.3.12988" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1292.811559][ T3658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.819003][ T30] audit: type=1400 audit(3918740584.674:297922): avc: denied { read write open } for pid=3706 comm="syz.3.12988" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1292.851068][ T3658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1292.903777][ T30] audit: type=1400 audit(3918740584.683:297923): avc: denied { mounton } for pid=3706 comm="syz.3.12988" path="/2644/file0" dev="tmpfs" ino=13470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1292.929000][ T3658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.949791][ T3658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.961773][ T30] audit: type=1400 audit(3918740584.683:297924): avc: denied { mount } for pid=3706 comm="syz.3.12988" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1292.989279][ T3658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.027415][ T30] audit: type=1400 audit(3918740584.739:297925): avc: denied { recv } for pid=3698 comm="syz.2.12987" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1293.061865][ T3658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.086513][ T30] audit: type=1400 audit(3918740584.842:297926): avc: denied { search } for pid=3705 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.135717][ T30] audit: type=1400 audit(3918740584.842:297927): avc: denied { search } for pid=3705 comm="rm" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.173458][ T3658] hsr_slave_0: entered promiscuous mode [ 1293.186069][T31201] Bluetooth: hci5: command tx timeout [ 1293.194403][ T30] audit: type=1400 audit(3918740584.842:297928): avc: denied { search } for pid=3705 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.217974][ T3658] hsr_slave_1: entered promiscuous mode [ 1293.224108][ T3658] debugfs: 'hsr0' already exists in 'hsr' [ 1293.229855][ T3658] Cannot create hsr debugfs directory [ 1293.865227][T31201] Bluetooth: hci1: command tx timeout [ 1293.941764][ T3606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.555180][ T3658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1294.595958][ T3658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1294.620855][ T3658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1294.658008][ T3658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1295.023147][ T3658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.074114][ T3658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.099908][T31074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.107035][T31074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.149702][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.156800][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.289997][ T3606] veth0_vlan: entered promiscuous mode [ 1295.387764][ T3606] veth1_vlan: entered promiscuous mode [ 1295.578259][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1295.602611][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1295.621329][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1295.646118][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1295.658226][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1295.719316][ T3606] veth0_macvtap: entered promiscuous mode [ 1295.827288][ T3606] veth1_macvtap: entered promiscuous mode [ 1295.945268][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.068536][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.101385][T31201] Bluetooth: hci1: command tx timeout [ 1296.221997][ T3747] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12992'. [ 1296.233547][T23275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.252718][T23275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.286908][T23275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.336820][T23275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.591592][ T1203] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1296.692404][T31074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.745651][T31074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.815459][ T1203] usb 4-1: Using ep0 maxpacket: 32 [ 1296.838829][ T1203] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1296.866598][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.885590][ T1203] usb 4-1: config 0 has no interface number 0 [ 1296.899537][ T1203] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1296.911186][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.933715][ T1203] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1296.959248][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.974682][ T1203] usb 4-1: Product: syz [ 1296.978841][ T1203] usb 4-1: Manufacturer: syz [ 1296.983505][ T1203] usb 4-1: SerialNumber: syz [ 1297.031988][ T1203] usb 4-1: config 0 descriptor?? [ 1297.059875][ T3749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1297.076381][ T3658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.383654][ T3749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1297.476568][ T3766] syz_tun: entered allmulticast mode [ 1297.534403][ T3766] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1297.543477][ T3766] mroute: pending queue full, dropping entries [ 1297.703430][ T30] kauditd_printk_skb: 806 callbacks suppressed [ 1297.703466][ T30] audit: type=1400 audit(3918740589.472:298735): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1297.788068][ T30] audit: type=1400 audit(3918740589.482:298736): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1297.842676][ T3765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1297.861960][ T30] audit: type=1400 audit(3918740589.482:298737): avc: denied { module_request } for pid=3658 comm="syz-executor" kmod="netdev-netdevsim5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1297.867023][ T3749] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1297.904886][ T3765] audit: audit_lost=5771 audit_rate_limit=0 audit_backlog_limit=64 [ 1297.912780][ T3765] audit: backlog limit exceeded [ 1297.936987][ T3749] audit: audit_lost=5772 audit_rate_limit=0 audit_backlog_limit=64 [ 1297.960021][ T3765] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1297.973874][ T30] audit: type=1400 audit(3918740589.482:298738): avc: denied { search } for pid=3765 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.334301][T31201] Bluetooth: hci1: command tx timeout [ 1299.197817][ T1203] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1299.219440][ T1203] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1299.262667][ T1203] usb 4-1: USB disconnect, device number 52 [ 1299.343440][ T3791] binder: 3786:3791 ioctl c0306201 2000000001c0 returned -14 [ 1299.482275][ T3658] veth0_vlan: entered promiscuous mode [ 1299.520981][ T3658] veth1_vlan: entered promiscuous mode [ 1299.613634][ T3658] veth0_macvtap: entered promiscuous mode [ 1299.647036][ T3658] veth1_macvtap: entered promiscuous mode [ 1299.730729][ T3658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.772797][ T3658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.811798][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.845586][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.567887][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.650615][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.332096][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.526768][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.617955][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1301.699510][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.059968][ T30] kauditd_printk_skb: 932 callbacks suppressed [ 1303.059983][ T30] audit: type=1400 audit(3918740594.496:299320): avc: denied { search } for pid=3759 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.165726][ T30] audit: type=1400 audit(3918740594.514:299321): avc: denied { read write } for pid=3658 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.257172][ T3818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13006'. [ 1303.291902][ T30] audit: type=1400 audit(3918740594.514:299322): avc: denied { read write open } for pid=3658 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.392700][ T30] audit: type=1400 audit(3918740594.514:299323): avc: denied { ioctl } for pid=3658 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1303.428278][ T3818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3818 comm=syz.2.13006 [ 1303.499098][ T30] audit: type=1400 audit(3918740594.524:299324): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1303.616339][ T387] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1303.680159][ T30] audit: type=1400 audit(3918740594.524:299325): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1303.697505][ T3826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1303.711706][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1303.718897][ C1] audit: audit_lost=5890 audit_rate_limit=0 audit_backlog_limit=64 [ 1303.726793][ C1] audit: backlog limit exceeded [ 1303.824825][ T387] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1303.870190][ T387] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1303.880368][ T387] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1303.956110][ T387] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1303.995014][ T387] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1304.048217][ T387] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1304.073273][ T387] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1304.093200][ T387] usb 5-1: Product: syz [ 1304.107729][ T387] usb 5-1: Manufacturer: syz [ 1304.177331][ T387] cdc_wdm 5-1:1.0: skipping garbage [ 1304.207292][ T387] cdc_wdm 5-1:1.0: skipping garbage [ 1304.259151][ T387] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1304.328014][ T387] cdc_wdm 5-1:1.0: Unknown control protocol [ 1304.642175][ T10] usb 5-1: USB disconnect, device number 111 [ 1306.958331][ T3851] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1306.966913][ T3851] mroute: pending queue full, dropping entries [ 1307.098998][ T3851] dvmrp1: entered allmulticast mode [ 1308.147267][ T3861] team0: Device macvlan0 failed to change mtu [ 1308.421443][ T30] kauditd_printk_skb: 1311 callbacks suppressed [ 1308.445929][ T30] audit: type=1400 audit(3918740599.509:300242): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1308.540263][ T30] audit: type=1400 audit(3918740599.528:300243): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1308.611895][ T30] audit: type=1400 audit(3918740599.528:300244): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1308.690749][ T30] audit: type=1400 audit(3918740599.528:300245): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1308.838716][ T30] audit: type=1400 audit(3918740599.528:300246): avc: denied { read write } for pid=3606 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1308.922516][ T30] audit: type=1400 audit(3918740599.528:300247): avc: denied { read write open } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.032904][ T30] audit: type=1400 audit(3918740599.528:300248): avc: denied { ioctl } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.061012][ T30] audit: type=1400 audit(3918740599.584:300249): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1309.554594][ T30] audit: type=1400 audit(3918740599.593:300250): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1309.634620][ T3817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1309.641361][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.845301][ T5868] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1312.040812][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 1312.071014][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1312.198121][ T5868] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1312.234361][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.257492][ T5868] usb 4-1: Product: syz [ 1312.261660][ T5868] usb 4-1: Manufacturer: syz [ 1312.290243][ T5868] usb 4-1: SerialNumber: syz [ 1312.321604][ T5868] usb 4-1: config 0 descriptor?? [ 1312.341178][T23907] block nbd0: Possible stuck request ffff888028458000: control (read@0,4096B). Runtime 720 seconds [ 1312.363582][ T5868] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1312.411918][ T5868] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1313.644867][ T5868] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1313.769783][ T30] kauditd_printk_skb: 559 callbacks suppressed [ 1313.769798][ T30] audit: type=1400 audit(3918740604.514:300805): avc: denied { recv } for pid=3606 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1313.866351][ T30] audit: type=1400 audit(3918740604.542:300806): avc: denied { read write } for pid=3606 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1313.939631][ T30] audit: type=1400 audit(3918740604.598:300807): avc: denied { read write open } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1314.034863][ T30] audit: type=1400 audit(3918740604.598:300808): avc: denied { ioctl } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1314.108369][ T30] audit: type=1400 audit(3918740604.626:300809): avc: denied { search } for pid=3927 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.227764][ T5868] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1314.240141][ T30] audit: type=1400 audit(3918740604.626:300810): avc: denied { search } for pid=3927 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.250969][ T5868] em28xx 4-1:0.0: board has no eeprom [ 1314.321945][ T30] audit: type=1400 audit(3918740604.626:300811): avc: denied { search } for pid=3927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.356773][ T3931] netlink: 'syz.4.13030': attribute type 3 has an invalid length. [ 1314.394269][ T3931] netlink: 'syz.4.13030': attribute type 3 has an invalid length. [ 1314.441579][ T30] audit: type=1400 audit(3918740604.626:300812): avc: denied { search } for pid=3927 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.574797][ T30] audit: type=1400 audit(3918740604.719:300813): avc: denied { ioctl } for pid=3907 comm="syz.3.13026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1314.665922][ T30] audit: type=1400 audit(3918740604.719:300814): avc: denied { ioctl } for pid=3907 comm="syz.3.13026" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1314.939802][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13031'. [ 1315.531900][ T3909] em28xx 4-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 1315.576675][ T5868] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1315.587011][ T5868] em28xx 4-1:0.0: dvb set to bulk mode. [ 1315.592590][ T386] em28xx 4-1:0.0: Binding DVB extension [ 1315.664739][ T5868] usb 4-1: USB disconnect, device number 53 [ 1315.694117][ T5868] em28xx 4-1:0.0: Disconnecting em28xx [ 1316.037597][ T386] em28xx 4-1:0.0: Registering input extension [ 1316.086799][ T5868] em28xx 4-1:0.0: Closing input extension [ 1316.142919][ T1212] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1316.160802][ T5868] em28xx 4-1:0.0: Freeing device [ 1316.486705][ T1212] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1316.581517][ T1212] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1316.591669][ T1212] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1316.626766][ T1212] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1316.640850][ T1212] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1316.773745][ T1212] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1316.870819][ T1212] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1317.212350][ T1212] usb 6-1: Product: syz [ 1317.224779][ T1212] usb 6-1: Manufacturer: syz [ 1317.298358][ T3960] netlink: 173 bytes leftover after parsing attributes in process `syz.2.13035'. [ 1317.322325][ T1212] cdc_wdm 6-1:1.0: skipping garbage [ 1317.336928][ T1212] cdc_wdm 6-1:1.0: skipping garbage [ 1317.354248][ T1212] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1317.369242][ T1212] cdc_wdm 6-1:1.0: Unknown control protocol [ 1318.578621][ C1] cdc_wdm 6-1:1.0: Unexpected error -71 [ 1318.579452][ T5868] usb 6-1: USB disconnect, device number 22 [ 1318.584254][ C1] wdm_int_callback: 44 callbacks suppressed [ 1318.584273][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1318.584288][ C1] wdm_int_callback: 44 callbacks suppressed [ 1318.584300][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1318.584315][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1319.159897][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 1319.159909][ T30] audit: type=1400 audit(3918740609.555:301135): avc: denied { execmem } for pid=3991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1319.330251][ T30] audit: type=1400 audit(3918740609.555:301136): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1319.462913][ T30] audit: type=1400 audit(3918740609.686:301137): avc: denied { read } for pid=3992 comm="syz.3.13040" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1319.584285][ T30] audit: type=1400 audit(3918740609.686:301138): avc: denied { read open } for pid=3992 comm="syz.3.13040" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1319.639964][ T758] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1319.672581][ T3997] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1319.682987][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1319.685484][ T758] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1319.689483][ C1] audit: audit_lost=6025 audit_rate_limit=0 audit_backlog_limit=64 [ 1319.705458][ C1] audit: backlog limit exceeded [ 1319.720007][ T758] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1319.733725][ T3606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1319.734982][ T30] audit: type=1400 audit(3918740609.743:301139): avc: denied { read } for pid=3990 comm="syz.2.13038" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1319.810422][ T758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1319.844670][ T758] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1321.891019][ T3998] chnl_net:caif_netlink_parms(): no params data found [ 1322.098785][ T758] Bluetooth: hci6: command tx timeout [ 1322.284389][ T3998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.292123][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.299249][ T3998] bridge_slave_0: entered allmulticast mode [ 1322.311251][ T3998] bridge_slave_0: entered promiscuous mode [ 1322.324581][ T3998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.331715][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.656690][ T3998] bridge_slave_1: entered allmulticast mode [ 1322.904516][ T3998] bridge_slave_1: entered promiscuous mode [ 1323.048480][ T3998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1323.096901][ T3998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1323.355446][ T3998] team0: Port device team_slave_0 added [ 1323.385207][ T3998] team0: Port device team_slave_1 added [ 1323.523150][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.547115][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.631665][ T3998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.688956][ T3998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.718873][ T3998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1323.797517][ T3998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.883004][ T5868] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1324.080457][ T3998] hsr_slave_0: entered promiscuous mode [ 1324.122620][ T5868] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1324.123292][ T3998] hsr_slave_1: entered promiscuous mode [ 1324.145952][ T5868] usb 6-1: config 0 has no interface number 0 [ 1324.174882][ T3998] debugfs: 'hsr0' already exists in 'hsr' [ 1324.216359][ T3998] Cannot create hsr debugfs directory [ 1324.231189][ T5868] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1324.275757][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.310075][ T5868] usb 6-1: Product: syz [ 1324.314509][ T758] Bluetooth: hci6: command tx timeout [ 1324.347804][ T5868] usb 6-1: Manufacturer: syz [ 1324.357057][ T5868] usb 6-1: SerialNumber: syz [ 1324.368924][ T5868] usb 6-1: config 0 descriptor?? [ 1324.576871][ T30] kauditd_printk_skb: 718 callbacks suppressed [ 1324.576886][ T30] audit: type=1400 audit(3918740614.616:301599): avc: denied { create } for pid=4048 comm="syz.2.13048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1324.670554][ T30] audit: type=1400 audit(3918740614.710:301600): avc: denied { recv } for pid=3998 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1324.747352][ T30] audit: type=1400 audit(3918740614.738:301601): avc: denied { search } for pid=4049 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.115520][ T30] audit: type=1400 audit(3918740614.738:301602): avc: denied { search } for pid=4049 comm="rm" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.180170][ T5868] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1325.208571][ T30] audit: type=1400 audit(3918740614.738:301603): avc: denied { search } for pid=4049 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.241924][ T5868] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1325.279867][ T5868] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1325.326179][ T5868] usb 6-1: media controller created [ 1325.336284][ T30] audit: type=1400 audit(3918740614.756:301604): avc: denied { search } for pid=3989 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.383259][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.399324][ T4042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1325.410069][ T4057] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1325.422020][ T4058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1325.436808][ T4058] audit: audit_lost=6113 audit_rate_limit=0 audit_backlog_limit=64 [ 1326.536129][ T758] Bluetooth: hci6: command tx timeout [ 1326.622484][ T5868] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1326.968720][ T4070] syzkaller0: entered promiscuous mode [ 1327.113858][ T4070] syzkaller0: entered allmulticast mode [ 1327.201490][ T5868] usb 6-1: USB disconnect, device number 23 [ 1327.212227][ T3998] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1327.281479][ T3998] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1328.775996][ T758] Bluetooth: hci6: command tx timeout [ 1329.597531][ T4098] virtiofs: Unknown parameter 'always 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 18 nlmon0 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 20 batadv0 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 21 vxcan0 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 22 vxcan1 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 23 veth0 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 24 veth1 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 25 wg0 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 26 wg1 : 1 V3 [ 1329.597531][ T4098] 010000E0 1 0:00000000 0 [ 1329.597531][ T4098] 27 wg2 : 1 ' [ 1329.936040][ T30] kauditd_printk_skb: 753 callbacks suppressed [ 1329.936088][ T30] audit: type=1400 audit(3918740619.639:302353): avc: denied { read write } for pid=3606 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1329.981213][ T30] audit: type=1400 audit(3918740619.639:302354): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1330.011548][ T30] audit: type=1400 audit(3918740619.676:302355): avc: denied { read write open } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1330.044877][ T30] audit: type=1400 audit(3918740619.676:302356): avc: denied { ioctl } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1330.073262][ T30] audit: type=1400 audit(3918740619.733:302357): avc: denied { create } for pid=4106 comm="syz.5.13060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1330.106279][ T30] audit: type=1400 audit(3918740619.789:302358): avc: denied { execmem } for pid=4108 comm="syz.4.13061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1330.177808][ T30] audit: type=1400 audit(3918740619.854:302359): avc: denied { recv } for pid=145 comm="kworker/u8:6" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1330.306537][ T30] audit: type=1400 audit(3918740619.938:302360): avc: denied { bind } for pid=4106 comm="syz.5.13060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1330.352136][ T30] audit: type=1400 audit(3918740619.938:302361): avc: denied { allowed } for pid=4106 comm="syz.5.13060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1330.450780][ T30] audit: type=1400 audit(3918740619.938:302362): avc: denied { create } for pid=4106 comm="syz.5.13060" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1331.274605][ T386] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1331.449038][ T386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.460666][ T386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.557632][ T386] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1331.580201][ T386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1331.634845][ T386] usb 3-1: SerialNumber: syz [ 1331.989797][ T386] usb 3-1: 0:2 : does not exist [ 1331.994719][ T386] usb 3-1: unit 5: unexpected type 0x09 [ 1332.044843][ T386] usb 3-1: USB disconnect, device number 41 [ 1332.257315][T29343] udevd[29343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.328678][ T4123] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1333.153649][ T4131] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1334.973246][ T3998] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1335.321551][ T1203] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1335.343356][ T30] kauditd_printk_skb: 855 callbacks suppressed [ 1335.343371][ T30] audit: type=1400 audit(3918740624.681:302993): avc: denied { ioctl } for pid=4141 comm="syz.4.13070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1335.407084][ T30] audit: type=1400 audit(3918740624.681:302994): avc: denied { ioctl } for pid=4141 comm="syz.4.13070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1335.837632][ T30] audit: type=1400 audit(3918740624.681:302995): avc: denied { ioctl } for pid=4141 comm="syz.4.13070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1335.862986][ T1203] usb 5-1: Using ep0 maxpacket: 16 [ 1335.879332][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.898155][ T30] audit: type=1400 audit(3918740624.746:302996): avc: denied { ioctl } for pid=4141 comm="syz.4.13070" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1335.925603][ T1203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.942241][ T1203] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1335.976689][ T30] audit: type=1400 audit(3918740624.831:302997): avc: denied { prog_load } for pid=4143 comm="syz.5.13071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1335.995396][ T1203] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1336.005089][ T30] audit: type=1400 audit(3918740624.831:302998): avc: denied { bpf } for pid=4143 comm="syz.5.13071" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1336.031012][ T30] audit: type=1400 audit(3918740624.831:302999): avc: denied { perfmon } for pid=4143 comm="syz.5.13071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1336.055184][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.057932][ T30] audit: type=1400 audit(3918740624.849:303000): avc: denied { prog_load } for pid=4143 comm="syz.5.13071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1336.134388][ T30] audit: type=1400 audit(3918740624.849:303001): avc: denied { perfmon } for pid=4143 comm="syz.5.13071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1336.179986][ T1203] usb 5-1: config 0 descriptor?? [ 1336.316141][ T30] audit: type=1400 audit(3918740624.859:303002): avc: denied { perfmon } for pid=4143 comm="syz.5.13071" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1336.639544][ T1203] usbhid 5-1:0.0: can't add hid device: -71 [ 1336.659088][ T1203] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1336.749132][ T1203] usb 5-1: USB disconnect, device number 112 [ 1337.988247][ T4170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13077'. [ 1339.323561][ T3998] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1339.644434][T18002] udevd[18002]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1339.648671][ T4169] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.788843][T29343] udevd[29343]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1340.258159][ T4169] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.776055][ T30] kauditd_printk_skb: 385 callbacks suppressed [ 1340.776076][ T30] audit: type=1400 audit(3918740629.751:303388): avc: denied { accept } for pid=4178 comm="syz.2.13079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1340.949181][ T30] audit: type=1400 audit(3918740629.769:303389): avc: denied { search } for pid=4193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.987764][ T4193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1341.024604][ T4193] audit: audit_lost=6191 audit_rate_limit=0 audit_backlog_limit=64 [ 1341.044956][ T4193] audit: backlog limit exceeded [ 1341.060221][ T4169] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.086225][ T4193] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1341.096274][ T30] audit: type=1400 audit(3918740629.769:303390): avc: denied { search } for pid=4193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.141245][ T4193] audit: audit_lost=6192 audit_rate_limit=0 audit_backlog_limit=64 [ 1341.187829][ T4169] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.190599][ T4179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1341.204723][ T4193] audit: backlog limit exceeded [ 1341.439435][ T3998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.991209][ T3998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.050722][ T3998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1342.062225][ T3998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1342.082723][T31080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.089809][T31080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.233827][T31080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.240965][T31080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.058385][T31074] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.072670][T31074] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.149723][T31074] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.157921][T31074] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.503772][T23907] block nbd0: Possible stuck request ffff888028458000: control (read@0,4096B). Runtime 750 seconds [ 1345.177734][ T3998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.531279][ T4242] netlink: 'syz.3.13090': attribute type 10 has an invalid length. [ 1345.616568][ T4242] veth0_vlan: entered allmulticast mode [ 1345.737481][ T4242] team0: Device veth0_vlan failed to register rx_handler [ 1346.131928][ T30] kauditd_printk_skb: 644 callbacks suppressed [ 1346.131945][ T30] audit: type=1400 audit(3918740634.783:303991): avc: denied { write } for pid=4239 comm="syz.3.13090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1346.204114][ T30] audit: type=1400 audit(3918740634.783:303992): avc: denied { read write } for pid=3606 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.275991][ T30] audit: type=1400 audit(3918740634.783:303993): avc: denied { read write open } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.323402][ T30] audit: type=1400 audit(3918740634.783:303994): avc: denied { ioctl } for pid=3606 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1346.362335][ T4260] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.372434][ T4241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.380228][ T4257] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1346.386895][ T4260] audit: audit_lost=6208 audit_rate_limit=0 audit_backlog_limit=64 [ 1346.390980][ T4257] audit: audit_lost=6209 audit_rate_limit=0 audit_backlog_limit=64 [ 1346.408798][ T4241] audit: audit_lost=6210 audit_rate_limit=0 audit_backlog_limit=64 [ 1346.450901][ T5875] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1346.514514][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13094'. [ 1346.604189][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13094'. [ 1346.643280][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1346.686477][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.739530][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1346.766674][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1346.912539][ T5875] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1346.945562][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1347.049624][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1347.074886][ T5875] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1347.182815][ T5875] usb 3-1: Manufacturer: syz [ 1347.214779][ T5875] usb 3-1: config 0 descriptor?? [ 1347.383459][ T3998] veth0_vlan: entered promiscuous mode [ 1347.478936][ T3998] veth1_vlan: entered promiscuous mode [ 1347.698524][ T3998] veth0_macvtap: entered promiscuous mode [ 1347.772265][ T3998] veth1_macvtap: entered promiscuous mode [ 1347.906816][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1348.017763][ T3998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1348.068712][ T5875] rc_core: IR keymap rc-hauppauge not found [ 1348.074621][ T5875] Registered IR keymap rc-empty [ 1348.108711][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.139085][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.147883][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.162237][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.199140][ T5875] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1348.199174][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.304076][ T5875] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input158 [ 1348.341959][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.374422][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.427787][ C1] mceusb 3-1:0.0: long-range (0x11) receiver active [ 1348.482176][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.520300][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.569663][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.624341][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.645038][T31077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.652940][T31077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.666566][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.717290][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.775395][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.838386][ T3987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.838428][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.864392][ T3987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.931485][ T5875] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1348.954191][ T5875] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1349.002187][ T5875] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x11 active) [ 1349.125410][ T5875] usb 3-1: USB disconnect, device number 42 [ 1350.500049][ T4292] evm: overlay not supported [ 1351.489561][ T30] kauditd_printk_skb: 1816 callbacks suppressed [ 1351.489578][ T30] audit: type=1400 audit(3918740639.778:305787): avc: denied { search } for pid=4301 comm="sed" name="resolv.conf" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1351.633253][ T4296] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13100'. [ 1351.650860][ T4300] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.657560][ T30] audit: type=1400 audit(3918740639.778:305788): avc: denied { read } for pid=4301 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1883 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1351.683733][ T4300] audit: audit_lost=6218 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.692444][ T4286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.701478][ T4286] audit: audit_lost=6219 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.703750][ T4262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1351.723020][ T4300] audit: backlog limit exceeded [ 1351.731540][ T4262] audit: audit_lost=6220 audit_rate_limit=0 audit_backlog_limit=64 [ 1351.743634][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1356.650628][ T1212] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1356.843601][ T30] kauditd_printk_skb: 1363 callbacks suppressed [ 1356.843666][ T30] audit: type=1400 audit(3918740644.801:307109): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1356.895830][ T1212] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1356.927745][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.960939][ T1212] usb 3-1: config 0 descriptor?? [ 1357.003725][ T1212] cp210x 3-1:0.0: cp210x converter detected [ 1357.026441][ T30] audit: type=1400 audit(3918740644.839:307110): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.152570][ T30] audit: type=1400 audit(3918740644.839:307111): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.261640][ T30] audit: type=1400 audit(3918740644.848:307112): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.439168][ T30] audit: type=1400 audit(3918740644.848:307113): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.989755][ T30] audit: type=1400 audit(3918740644.876:307114): avc: denied { ioctl } for pid=4362 comm="syz.2.13113" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.015770][ T30] audit: type=1400 audit(3918740644.886:307115): avc: denied { execute } for pid=4365 comm="syz.3.13115" path="/2674/pids.current" dev="tmpfs" ino=13633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1358.079029][ T1212] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1358.087135][ T4328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1358.093697][ T4363] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1358.094526][ T4328] audit: audit_lost=6235 audit_rate_limit=0 audit_backlog_limit=64 [ 1358.334361][ T1212] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1358.852182][ T388] usb 3-1: USB disconnect, device number 43 [ 1358.898968][ T388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1359.053193][ T388] cp210x 3-1:0.0: device disconnected [ 1362.233081][ T30] kauditd_printk_skb: 809 callbacks suppressed [ 1362.233094][ T30] audit: type=1400 audit(3918740649.843:307907): avc: denied { read } for pid=4419 comm="syz.6.13128" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1362.358427][ T30] audit: type=1400 audit(3918740649.843:307908): avc: denied { read open } for pid=4419 comm="syz.6.13128" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1362.596145][ T30] audit: type=1400 audit(3918740649.862:307909): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1362.738299][ T30] audit: type=1400 audit(3918740649.862:307910): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1362.766006][ T30] audit: type=1400 audit(3918740649.862:307911): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1362.922960][ T4431] virtio-fs: tag not found [ 1363.281696][ T30] audit: type=1400 audit(3918740649.871:307912): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1363.545143][ T30] audit: type=1400 audit(3918740649.871:307913): avc: denied { recv } for pid=48 comm="kworker/u8:3" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1363.635672][ T4430] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1363.660560][ T4430] audit: audit_lost=6242 audit_rate_limit=0 audit_backlog_limit=64 [ 1363.668791][ T30] audit: type=1400 audit(3918740649.899:307914): avc: denied { egress } for pid=1212 comm="kworker/1:3" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1367.586474][ T30] kauditd_printk_skb: 665 callbacks suppressed [ 1367.586490][ T30] audit: type=1400 audit(3918740654.848:308330): avc: denied { search } for pid=4479 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1367.676068][ T30] audit: type=1400 audit(3918740654.848:308331): avc: denied { search } for pid=4479 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1367.740580][ T30] audit: type=1400 audit(3918740654.848:308332): avc: denied { search } for pid=4479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1367.859082][ T4479] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.868132][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.874657][ C1] audit: audit_lost=6326 audit_rate_limit=0 audit_backlog_limit=64 [ 1367.882595][ C1] audit: backlog limit exceeded [ 1367.888409][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1367.894880][ C1] audit: audit_lost=6327 audit_rate_limit=0 audit_backlog_limit=64 [ 1367.902749][ C1] audit: backlog limit exceeded [ 1369.232529][ T388] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1369.447977][ T388] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.469086][ T388] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1369.495203][ T388] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1369.529791][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.560306][ T388] usb 4-1: config 0 descriptor?? [ 1369.601008][ T388] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1369.628966][ T388] dvb-usb: bulk message failed: -22 (3/0) [ 1369.675659][ T388] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1369.715092][ T388] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1369.760973][ T388] usb 4-1: media controller created [ 1369.782243][ T388] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1369.891021][ T388] dvb-usb: bulk message failed: -22 (6/0) [ 1369.913049][ T4501] dvb-usb: bulk message failed: -22 (2/0) [ 1369.923092][ T388] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1369.971168][ T4501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=4501 comm=syz.3.13146 [ 1370.148710][ T388] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input159 [ 1370.756969][ T388] dvb-usb: schedule remote query interval to 150 msecs. [ 1370.830810][ T388] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1370.969325][ T388] usb 4-1: USB disconnect, device number 54 [ 1371.035049][ T386] dvb-usb: bulk message failed: -22 (1/0) [ 1371.048101][ T386] dvb-usb: error while querying for an remote control event. [ 1371.332963][ T388] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1372.065637][ T5875] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 1372.360017][ T5875] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1372.383258][ T5875] usb 6-1: config 0 has no interface number 0 [ 1372.410177][ T5875] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1372.799093][ T5875] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1372.856024][ T5875] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1372.916775][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.963684][ T30] kauditd_printk_skb: 727 callbacks suppressed [ 1372.963698][ T30] audit: type=1400 audit(3918740659.871:309004): avc: denied { write } for pid=4525 comm="syz.4.13153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1372.993136][ T5875] usb 6-1: config 0 descriptor?? [ 1373.030470][ T4534] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1373.104224][ T5875] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1373.145469][ T30] audit: type=1400 audit(3918740659.871:309005): avc: denied { write } for pid=4525 comm="syz.4.13153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1373.467398][ T30] audit: type=1400 audit(3918740659.871:309006): avc: denied { write } for pid=4525 comm="syz.4.13153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1373.492024][ T4549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.503183][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1373.509711][ C1] audit: audit_lost=6347 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.517591][ C1] audit: backlog limit exceeded [ 1373.526686][ T4535] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1373.552834][ T4535] audit: audit_lost=6348 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.560761][ T4549] audit: audit_lost=6349 audit_rate_limit=0 audit_backlog_limit=64 [ 1373.677217][ T5875] usb 6-1: USB disconnect, device number 24 [ 1373.677277][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1375.228626][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13160'. [ 1375.254273][ T4565] ip6gre3: entered promiscuous mode [ 1375.259458][ T4565] ip6gre3: entered allmulticast mode [ 1375.295749][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.036130][ T4565] netlink: 'syz.2.13160': attribute type 6 has an invalid length. [ 1376.142039][ T4565] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13160'. [ 1376.663870][T23907] block nbd0: Possible stuck request ffff888028458000: control (read@0,4096B). Runtime 780 seconds [ 1377.883656][ T4587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13165'. [ 1378.108210][ T4590] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 1378.320160][ T30] kauditd_printk_skb: 1267 callbacks suppressed [ 1378.320177][ T30] audit: type=1400 audit(3918740664.875:310191): avc: denied { recv } for pid=4573 comm="syz.5.13163" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1378.362796][ T4590] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 1378.518606][ T30] audit: type=1400 audit(3918740664.987:310192): avc: denied { write } for pid=4525 comm="syz.4.13153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1378.616342][ T4535] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1378.622959][ T30] audit: type=1400 audit(3918740665.006:310193): avc: denied { search } for pid=4591 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1378.623001][ T30] audit: type=1400 audit(3918740665.006:310194): avc: denied { read } for pid=4591 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1378.623039][ T30] audit: type=1400 audit(3918740665.015:310195): avc: denied { recv } for pid=4591 comm="cmp" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1378.623081][ T30] audit: type=1400 audit(3918740665.015:310196): avc: denied { recv } for pid=4591 comm="cmp" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1378.623119][ T30] audit: type=1400 audit(3918740665.015:310197): avc: denied { recv } for pid=4591 comm="cmp" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1378.623156][ T30] audit: type=1400 audit(3918740665.015:310198): avc: denied { recv } for pid=4591 comm="cmp" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1378.623194][ T30] audit: type=1400 audit(3918740665.015:310199): avc: denied { recv } for pid=4591 comm="cmp" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1380.491497][ T4608] virtio-fs: tag not found [ 1380.781869][ T5922] kworker/0:5 (5922) used greatest stack depth: 18104 bytes left [ 1382.537512][ T4628] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1382.544770][ T4628] IPv6: NLM_F_CREATE should be set when creating new route [ 1383.052243][ T4636] bond_slave_0: left promiscuous mode [ 1383.244224][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.276048][ T4636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.570198][ T4636] veth1_vlan: left allmulticast mode [ 1383.676170][ T30] kauditd_printk_skb: 591 callbacks suppressed [ 1383.676182][ T30] audit: type=1400 audit(3918740669.898:310789): avc: denied { write } for pid=4632 comm="syz.6.13175" path="socket:[136668]" dev="sockfs" ino=136668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1383.794912][ T30] audit: type=1400 audit(3918740669.898:310790): avc: denied { write } for pid=4632 comm="syz.6.13175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1383.857874][ T30] audit: type=1400 audit(3918740669.898:310791): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1383.918711][ T30] audit: type=1400 audit(3918740669.936:310792): avc: denied { read write } for pid=3658 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1384.053934][ T30] audit: type=1400 audit(3918740669.936:310793): avc: denied { read write open } for pid=3658 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1384.117478][ T4636] batman_adv: batadv0: Interface deactivated: gretap2 [ 1384.140103][T23275] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.150090][ T1203] syz1: Port: 1 Link DOWN [ 1384.178247][T23275] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.188920][ T30] audit: type=1400 audit(3918740669.936:310794): avc: denied { ioctl } for pid=3658 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1384.224186][T23275] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.242158][T23275] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.251124][T23275] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.260136][ T30] audit: type=1400 audit(3918740669.936:310795): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1384.287287][T23275] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.303135][T23275] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1384.314857][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1384.321383][ C1] audit: audit_lost=6378 audit_rate_limit=0 audit_backlog_limit=64 [ 1384.329319][ C1] audit: backlog limit exceeded [ 1384.359674][T23275] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.659056][T32150] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1384.927738][T32150] usb 3-1: Using ep0 maxpacket: 8 [ 1385.007034][T32150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1385.021269][T32150] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1385.059862][T32150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.215634][T32150] usb 3-1: config 0 descriptor?? [ 1385.775456][T32150] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1386.070196][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1386.403248][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1386.426489][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.459008][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.497920][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1386.704520][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1386.720584][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1386.755389][ T10] usb 4-1: Manufacturer: syz [ 1386.851168][ T10] usb 4-1: config 0 descriptor?? [ 1387.499664][ T10] appleir 0003:05AC:8243.0077: unknown main item tag 0x0 [ 1387.708749][ T388] usb 3-1: USB disconnect, device number 44 [ 1388.168719][ T10] appleir 0003:05AC:8243.0077: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1388.216162][ T10] usb 4-1: USB disconnect, device number 55 [ 1388.743338][ T4686] fido_id[4686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1389.179682][ T30] kauditd_printk_skb: 635 callbacks suppressed [ 1389.179724][ T30] audit: type=1400 audit(3918740675.043:311392): avc: denied { create } for pid=4691 comm="syz.3.13189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1389.327188][ T30] audit: type=1400 audit(3918740675.062:311393): avc: denied { search } for pid=4695 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.432869][ T30] audit: type=1400 audit(3918740675.062:311394): avc: denied { search } for pid=4695 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.512076][ T30] audit: type=1400 audit(3918740675.062:311395): avc: denied { search } for pid=4695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1389.555469][ T4699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.566448][ T4699] audit: audit_lost=6392 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.574348][ T4699] audit: backlog limit exceeded [ 1389.580385][ T4699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1389.586909][ T4699] audit: audit_lost=6393 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.605588][ T4699] audit: backlog limit exceeded [ 1390.378609][T32150] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1390.572874][T32150] usb 3-1: Using ep0 maxpacket: 16 [ 1390.923812][T32150] usb 3-1: config 0 has no interfaces? [ 1390.933449][T32150] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1390.944804][T32150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.956773][ T4716] kAFS: unable to lookup cell '(' [ 1391.076602][T32150] usb 3-1: config 0 descriptor?? [ 1391.588066][ T386] usb 3-1: USB disconnect, device number 45 [ 1392.090218][T32150] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1392.345888][T32150] usb 5-1: Using ep0 maxpacket: 16 [ 1392.518146][T32150] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1392.602165][T32150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1392.684209][T32150] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1392.722036][T32150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.762636][T32150] usb 5-1: Product: syz [ 1392.780832][T32150] usb 5-1: Manufacturer: syz [ 1392.791323][T32150] usb 5-1: SerialNumber: syz [ 1393.404103][ T1203] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1393.557033][ T4726] smc: net device bond0 applied user defined pnetid SYZ2 [ 1393.572160][ T4726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13197'. [ 1393.609520][ T4726] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1393.628603][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 1393.646449][ T4726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.692416][ T1203] usb 3-1: config 0 has no interfaces? [ 1393.718347][ T1203] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1393.728838][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1393.766834][ T4747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.783756][ T1203] usb 3-1: Product: syz [ 1393.815770][ T1203] usb 3-1: Manufacturer: syz [ 1393.842777][ T1203] usb 3-1: SerialNumber: syz [ 1393.848615][ T4726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.902914][ T4747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.903793][ T1203] usb 3-1: config 0 descriptor?? [ 1393.936790][ T4726] bond0 (unregistering): Released all slaves [ 1394.007057][ T4744] syzkaller0: entered promiscuous mode [ 1394.024983][ T4744] syzkaller0: entered allmulticast mode [ 1394.155479][T32150] usb 5-1: 0:2 : does not exist [ 1394.187720][T32150] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1394.250361][T32150] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1394.290249][T32150] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1394.527396][ T4753] audit_log_start: 2137 callbacks suppressed [ 1394.527411][ T4753] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.540072][ T4699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.547407][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.547417][ C1] audit: audit_lost=6741 audit_rate_limit=0 audit_backlog_limit=64 [ 1394.547426][ C1] audit: backlog limit exceeded [ 1394.558847][ T4753] audit: audit_lost=6742 audit_rate_limit=0 audit_backlog_limit=64 [ 1394.574633][ T4753] audit: backlog limit exceeded [ 1394.579475][ T4753] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1394.585986][ T4753] audit: audit_lost=6743 audit_rate_limit=0 audit_backlog_limit=64 [ 1394.588247][ T30] audit: type=1400 audit(3918740679.869:312492): avc: denied { recv } for pid=3998 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1394.619838][ T1203] usb 3-1: USB disconnect, device number 46 [ 1394.656261][T32150] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1395.193392][T32150] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1395.269880][T32150] usb 5-1: USB disconnect, device number 113 [ 1395.475503][T29343] udevd[29343]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.828389][ T4775] ptrace attach of "./syz-executor exec"[3998] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ [ 1400.064602][ T30] kauditd_printk_skb: 717 callbacks suppressed [ 1400.064634][ T30] audit: type=1400 audit(3918740685.136:312796): avc: denied { read } for pid=4795 comm="syz.2.13211" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1400.296753][ T30] audit: type=1400 audit(3918740685.136:312797): avc: denied { read open } for pid=4795 comm="syz.2.13211" path="net:[4026532810]" dev="nsfs" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1400.324229][ T30] audit: type=1400 audit(3918740685.145:312798): avc: denied { create } for pid=4795 comm="syz.2.13211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1400.348710][ T30] audit: type=1400 audit(3918740685.192:312799): avc: denied { bind } for pid=4795 comm="syz.2.13211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1400.503195][ T30] audit: type=1400 audit(3918740685.211:312800): avc: denied { ioctl } for pid=4795 comm="syz.2.13211" path="socket:[136960]" dev="sockfs" ino=136960 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1400.660175][ T30] audit: type=1400 audit(3918740685.416:312801): avc: denied { allowed } for pid=4801 comm="syz.5.13213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1400.704358][ T30] audit: type=1400 audit(3918740685.416:312802): avc: denied { create } for pid=4801 comm="syz.5.13213" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1400.742505][ T4806] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1400.744269][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1400.755516][ C1] audit: audit_lost=6882 audit_rate_limit=0 audit_backlog_limit=64 [ 1403.164581][ T5875] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1403.385484][ T5875] usb 4-1: config index 0 descriptor too short (expected 65293, got 45) [ 1403.820529][ T5875] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1403.886056][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.031611][ T5875] usb 4-1: Product: syz [ 1404.035759][ T5875] usb 4-1: Manufacturer: syz [ 1404.040317][ T5875] usb 4-1: SerialNumber: syz [ 1405.087844][ T5875] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1405.195210][ T5875] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1405.449743][ T30] kauditd_printk_skb: 760 callbacks suppressed [ 1405.449759][ T30] audit: type=1400 audit(3918740690.262:313554): avc: denied { ioctl } for pid=4824 comm="syz.3.13218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1405.618974][ T30] audit: type=1400 audit(3918740690.327:313555): avc: denied { ioctl } for pid=4824 comm="syz.3.13218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1405.782945][ T4818] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.797361][ T4818] audit: audit_lost=6886 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.817117][ T4826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.843002][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.849528][ C1] audit: audit_lost=6887 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.857405][ C1] audit: backlog limit exceeded [ 1405.891921][ T4852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.898414][ T4852] audit: audit_lost=6888 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.300960][ T5875] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1406.553648][ T5875] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1406.590064][ T5875] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1406.635836][ T5875] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1408.197008][ T386] usb 4-1: USB disconnect, device number 56 [ 1408.907478][T23907] block nbd0: Possible stuck request ffff888028458000: control (read@0,4096B). Runtime 810 seconds [ 1410.840350][ T30] kauditd_printk_skb: 1002 callbacks suppressed [ 1410.840366][ T30] audit: type=1400 audit(3918740695.304:314554): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1411.091810][ T30] audit: type=1400 audit(3918740695.304:314555): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1411.195376][ T30] audit: type=1400 audit(3918740695.304:314556): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1411.277473][ T4895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1411.288932][ T4894] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1411.342696][ T4895] audit: audit_lost=6890 audit_rate_limit=0 audit_backlog_limit=64 [ 1411.351535][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1411.351547][ C1] audit: audit_lost=6891 audit_rate_limit=0 audit_backlog_limit=64 [ 1411.351556][ C1] audit: backlog limit exceeded [ 1411.379007][ T4897] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1411.547309][T32150] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1411.674245][ T5875] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1411.717215][T32150] usb 5-1: Using ep0 maxpacket: 32 [ 1411.782857][T32150] usb 5-1: config 0 has no interfaces? [ 1411.843068][T32150] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1411.867618][T32150] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1411.875799][T32150] usb 5-1: Product: syz [ 1411.880094][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1411.925335][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1411.963286][T32150] usb 5-1: Manufacturer: syz [ 1411.980762][T32150] usb 5-1: SerialNumber: syz [ 1412.005808][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1412.047523][T32150] usb 5-1: config 0 descriptor?? [ 1412.112617][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1412.122396][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.184500][ T5875] usb 3-1: Product: syz [ 1412.191388][ T5875] usb 3-1: Manufacturer: syz [ 1412.206735][ T5875] usb 3-1: SerialNumber: syz [ 1412.248161][ T5875] usb 3-1: config 0 descriptor?? [ 1412.268467][ T5875] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1412.293848][ T5875] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1413.095022][ T5875] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1413.500370][ T5875] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1413.648994][ T386] usb 5-1: USB disconnect, device number 114 [ 1414.389685][ T5875] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1415.670075][ T5875] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1415.676816][ T5875] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1415.716012][ T5875] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1415.755769][ T5875] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1415.812043][ T5875] usb 3-1: USB disconnect, device number 47 [ 1415.844264][T31201] Bluetooth: hci5: command 0x0406 tx timeout [ 1416.315219][ T30] kauditd_printk_skb: 545 callbacks suppressed [ 1416.315235][ T30] audit: type=1400 audit(3918740700.439:315052): avc: denied { search } for pid=4941 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.388762][ T30] audit: type=1400 audit(3918740700.439:315053): avc: denied { search } for pid=4941 comm="rm" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.411648][ T30] audit: type=1400 audit(3918740700.439:315054): avc: denied { search } for pid=4941 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.433917][ T30] audit: type=1400 audit(3918740700.439:315055): avc: denied { getattr } for pid=4941 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth7.dhcp" dev="tmpfs" ino=17645 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1416.460949][ T30] audit: type=1400 audit(3918740700.439:315056): avc: denied { search } for pid=4941 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.519310][ T30] audit: type=1400 audit(3918740700.439:315057): avc: denied { search } for pid=4941 comm="rm" name="dhcpcd" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.752314][ T30] audit: type=1400 audit(3918740700.439:315058): avc: denied { search } for pid=4941 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.837785][ T30] audit: type=1400 audit(3918740700.439:315059): avc: denied { search } for pid=4941 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.925283][ T30] audit: type=1400 audit(3918740700.439:315060): avc: denied { remove_name search } for pid=4941 comm="rm" name="resolv.conf.eth7.dhcp" dev="tmpfs" ino=17645 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1417.183160][ T30] audit: type=1400 audit(3918740700.439:315061): avc: denied { unlink } for pid=4941 comm="rm" name="resolv.conf.eth7.dhcp" dev="tmpfs" ino=17645 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1420.645599][ T4979] random: crng reseeded on system resumption [ 1421.392131][ T758] Bluetooth: hci1: command 0x0406 tx timeout [ 1421.523155][ T4987] fuse: Bad value for 'fd' [ 1421.674549][ T30] kauditd_printk_skb: 1734 callbacks suppressed [ 1421.674566][ T30] audit: type=1400 audit(3918740705.443:315989): avc: denied { create } for pid=4984 comm="syz.3.13250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1421.714305][ T30] audit: type=1400 audit(3918740705.443:315990): avc: denied { create } for pid=4984 comm="syz.3.13250" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1421.740112][ T30] audit: type=1400 audit(3918740705.481:315991): avc: denied { getopt } for pid=4984 comm="syz.3.13250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1421.804130][ T30] audit: type=1400 audit(3918740705.546:315992): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1421.926709][ T30] audit: type=1400 audit(3918740705.565:315993): avc: denied { recv } for pid=4975 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1422.083140][ T4991] fuse: Invalid rootmode [ 1422.104822][T31201] Bluetooth: hci5: Malformed LE Event: 0x1b [ 1422.124604][ T30] audit: type=1400 audit(3918740705.565:315994): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1422.223071][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1422.229602][ C1] audit: audit_lost=7178 audit_rate_limit=0 audit_backlog_limit=64 [ 1422.237509][ C1] audit: backlog limit exceeded [ 1422.251564][ T4994] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1427.050187][ T30] kauditd_printk_skb: 624 callbacks suppressed [ 1427.050198][ T30] audit: type=1400 audit(3918740710.466:316597): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1427.218457][ T30] audit: type=1400 audit(3918740710.466:316598): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1427.404770][ T30] audit: type=1400 audit(3918740710.466:316599): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1427.463862][ T30] audit: type=1400 audit(3918740710.476:316600): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1427.932219][ T30] audit: type=1400 audit(3918740710.457:316596): avc: denied { lock } for pid=5031 comm="syz.4.13261" path="socket:[137977]" dev="sockfs" ino=137977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1427.984476][ T31] INFO: task syz.1.12928:3467 blocked for more than 143 seconds. [ 1428.020179][ T31] Tainted: G L syzkaller #0 [ 1428.052195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1428.092782][ T31] task:syz.1.12928 state:D stack:28136 pid:3467 tgid:3464 ppid:5805 task_flags:0x400040 flags:0x00080002 [ 1428.141554][ T31] Call Trace: [ 1428.150117][ T31] [ 1428.156790][ T31] __schedule+0xfee/0x60e0 [ 1428.165446][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1428.180474][ T31] ? __pfx_do_writepages+0x10/0x10 [ 1428.185648][ T31] ? __pfx___schedule+0x10/0x10 [ 1428.190501][ T31] ? find_held_lock+0x2b/0x80 [ 1428.224784][ T31] ? schedule+0x2bf/0x390 [ 1428.229127][ T31] schedule+0xdd/0x390 [ 1428.233277][ T30] audit: type=1400 audit(3918740710.504:316601): avc: denied { recv } for pid=5790 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.92 dest=56462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1428.290650][ T31] schedule_preempt_disabled+0x13/0x30 [ 1428.322860][ T31] __mutex_lock+0xc9a/0x1b90 [ 1428.338376][ T31] ? sync_bdevs+0x153/0x480 [ 1428.346682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1428.362206][ T31] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1428.367890][ T31] ? iput.part.0+0x1a0/0xf50 [ 1428.372457][ T31] ? sync_bdevs+0x153/0x480 [ 1428.387051][ T5067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1428.409765][ T31] sync_bdevs+0x153/0x480 [ 1428.414101][ T31] ksys_sync+0xb0/0xf0 [ 1428.418368][ T5067] audit: audit_lost=7187 audit_rate_limit=0 audit_backlog_limit=64 [ 1428.445449][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1428.454727][ T5067] audit: backlog limit exceeded [ 1428.459701][ T31] ? do_syscall_64+0x95/0xf80 [ 1428.474961][ T31] __do_sys_sync+0xe/0x20 [ 1428.495508][ T30] audit: type=1400 audit(3918740710.504:316602): avc: denied { create } for pid=5044 comm="syz.6.13264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1428.498883][ T31] do_syscall_64+0x106/0xf80 [ 1428.639000][ T31] ? clear_bhb_loop+0x40/0x90 [ 1428.654959][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.682431][ T31] RIP: 0033:0x7f8dad39bf79 [ 1428.697242][ T31] RSP: 002b:00007f8dae319028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1428.708038][ T31] RAX: ffffffffffffffda RBX: 00007f8dad615fa0 RCX: 00007f8dad39bf79 [ 1428.718964][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1428.728072][ T31] RBP: 00007f8dad615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.736116][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.746394][ T31] R13: 00007f8dad616038 R14: 00007f8dad615fa0 R15: 00007ffc66ae4428 [ 1428.758685][ T31] [ 1428.762934][ T31] [ 1428.762934][ T31] Showing all locks held in the system: [ 1428.771705][ T31] 1 lock held by pool_workqueue_/3: [ 1428.780300][ T31] 2 locks held by ksoftirqd/1/23: [ 1428.785908][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1428.796469][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 1428.805868][ T31] 1 lock held by khungtaskd/31: [ 1428.812335][ T31] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1428.824588][ T31] 1 lock held by udevd/17497: [ 1428.829844][ T31] #0: ffff888027ff9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1428.840605][ T31] 5 locks held by kworker/u8:10/31080: [ 1428.847250][ T31] 2 locks held by getty/1907: [ 1428.853698][ T31] #0: ffff888039b080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1428.866758][ T31] #1: ffffc90000bb22f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1428.881261][ T31] 1 lock held by syz.1.12928/3467: [ 1428.890024][ T31] #0: ffff888027ff9358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1428.903054][ T31] 1 lock held by syz.6.13264/5046: [ 1428.917728][ T31] #0: ffff88806906c0e0 (&type->s_umount_key#105/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1428.930955][ T31] 1 lock held by syz.3.13265/5053: [ 1428.938803][ T31] 1 lock held by syz.5.13266/5051: [ 1428.949845][ T31] 2 locks held by syz.2.13269/5065: [ 1428.967374][ T31] #0: ffff888088162420 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x1f8/0x250 [ 1428.988144][ T31] #1: ffff8880547fd548 (&sb->s_type->i_mutex_key#46){+.+.}-{4:4}, at: fuse_file_write_iter+0x2ea/0x990 [ 1429.009912][ T31] [ 1429.083803][ T31] ============================================= [ 1429.083803][ T31] [ 1429.127656][ T31] NMI backtrace for cpu 0 [ 1429.127674][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.127699][ T31] Tainted: [L]=SOFTLOCKUP [ 1429.127705][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.127715][ T31] Call Trace: [ 1429.127721][ T31] [ 1429.127728][ T31] dump_stack_lvl+0x100/0x190 [ 1429.127759][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1429.127779][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1429.127807][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1429.127839][ T31] sys_info+0x141/0x190 [ 1429.127863][ T31] watchdog+0xd25/0x1050 [ 1429.127893][ T31] ? __pfx_watchdog+0x10/0x10 [ 1429.127916][ T31] ? __kthread_parkme+0x18c/0x230 [ 1429.127942][ T31] ? kthread+0x13a/0x450 [ 1429.127957][ T31] ? __pfx_watchdog+0x10/0x10 [ 1429.127977][ T31] kthread+0x370/0x450 [ 1429.127991][ T31] ? __pfx_kthread+0x10/0x10 [ 1429.128008][ T31] ret_from_fork+0x754/0xd80 [ 1429.128027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.128045][ T31] ? __switch_to+0x7b4/0x1120 [ 1429.128067][ T31] ? __pfx_kthread+0x10/0x10 [ 1429.128084][ T31] ret_from_fork_asm+0x1a/0x30 [ 1429.128117][ T31] [ 1429.128124][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1429.257397][ C1] NMI backtrace for cpu 1 [ 1429.257413][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.257432][ C1] Tainted: [L]=SOFTLOCKUP [ 1429.257438][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.257446][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1429.257466][ C1] Code: 98 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 2c 1d 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1429.257479][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1429.257491][ C1] RAX: 0000000000d8806b RBX: ffff88801e6aa480 RCX: ffffffff8b8e5c75 [ 1429.257501][ C1] RDX: 0000000000000000 RSI: ffffffff8de6cf89 RDI: ffffffff8c1adf20 [ 1429.257510][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 1429.257518][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd5490 [ 1429.257527][ C1] R13: 0000000000000001 R14: ffffffff90d92f10 R15: 0000000000000000 [ 1429.257536][ C1] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 1429.257549][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1429.257558][ C1] CR2: 00007f4fc1be9358 CR3: 000000005b6ec000 CR4: 00000000003526f0 [ 1429.257567][ C1] Call Trace: [ 1429.257571][ C1] [ 1429.257576][ C1] default_idle+0x9/0x10 [ 1429.257593][ C1] default_idle_call+0x6c/0xb0 [ 1429.257610][ C1] do_idle+0x35b/0x4b0 [ 1429.257627][ C1] ? __pfx_do_idle+0x10/0x10 [ 1429.257644][ C1] cpu_startup_entry+0x4f/0x60 [ 1429.257659][ C1] start_secondary+0x21d/0x2d0 [ 1429.257678][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1429.257699][ C1] common_startup_64+0x13e/0x148 [ 1429.257718][ C1] [ 1429.570319][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1429.577189][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.587858][ T31] Tainted: [L]=SOFTLOCKUP [ 1429.592172][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.602220][ T31] Call Trace: [ 1429.605489][ T31] [ 1429.608425][ T31] dump_stack_lvl+0x100/0x190 [ 1429.613106][ T31] vpanic+0x552/0x970 [ 1429.617082][ T31] ? __pfx_vpanic+0x10/0x10 [ 1429.621581][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1429.627744][ T31] panic+0xd1/0xe0 [ 1429.631460][ T31] ? __pfx_panic+0x10/0x10 [ 1429.635878][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1429.642034][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1429.648197][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1429.654353][ T31] ? watchdog.cold+0x198/0x1ca [ 1429.659120][ T31] ? watchdog+0xd35/0x1050 [ 1429.663536][ T31] watchdog.cold+0x1a9/0x1ca [ 1429.668131][ T31] ? __pfx_watchdog+0x10/0x10 [ 1429.672806][ T31] ? __kthread_parkme+0x18c/0x230 [ 1429.677834][ T31] ? kthread+0x13a/0x450 [ 1429.682067][ T31] ? __pfx_watchdog+0x10/0x10 [ 1429.686740][ T31] kthread+0x370/0x450 [ 1429.690805][ T31] ? __pfx_kthread+0x10/0x10 [ 1429.695387][ T31] ret_from_fork+0x754/0xd80 [ 1429.699975][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1429.705084][ T31] ? __switch_to+0x7b4/0x1120 [ 1429.709763][ T31] ? __pfx_kthread+0x10/0x10 [ 1429.714351][ T31] ret_from_fork_asm+0x1a/0x30 [ 1429.719125][ T31] [ 1429.722388][ T31] Kernel Offset: disabled [ 1429.726686][ T31] Rebooting in 86400 seconds..