last executing test programs: 1h39m57.606985286s ago: executing program 0 (id=354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) 1h39m11.974375511s ago: executing program 32 (id=354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) 1h32m25.434504893s ago: executing program 33 (id=656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000080)={0x81, 0x1, 0x4}, 0xc) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x60000, 0x4) 1h24m6.152956408s ago: executing program 1 (id=998): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) 1h24m5.440963555s ago: executing program 1 (id=999): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 1h24m4.461059771s ago: executing program 1 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001cff9000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1h24m3.775756306s ago: executing program 1 (id=1002): socket(0x10, 0x80002, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000001e1ffffff000000"], 0x24, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) 1h24m0.522194453s ago: executing program 1 (id=1004): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf250000000000000000000000000000000000000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000003000000000000000000000000200000000000000000000000000000000000000100000000000000440005000000000000000300000000000000000000000002320000000a000000fe8000000000000000000000000000aa0000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x8800) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast}}}], 0x20}, 0x20000080) 1h23m57.907836457s ago: executing program 1 (id=1005): getrusage(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1h23m12.955462505s ago: executing program 34 (id=1005): getrusage(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 1h19m39.715080353s ago: executing program 3 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}, 0x1, 0x0, 0x0, 0xc800}, 0x10) r1 = fanotify_init(0x8, 0x40000) fcntl$addseals(r1, 0x409, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffdb8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x0, &(0x7f00000008c0), &(0x7f0000000980)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000cc0)=[{0x4, 0x3, 0xc, 0x4}, {0x3, 0x4, 0xa, 0x4}, {0x4, 0x2, 0x7, 0x3}], 0x10, 0x7d92}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1h19m26.135830888s ago: executing program 3 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000180001002cbd7000ffdbdf251d0107000c000b00040000a00300008015000100030000a006000000bac45f9ce14233bd0000000008000900", @ANYRES32=r3, @ANYBLOB="0c000b00000000e0020000a015000200010000a0070300007f15f0386605000b0200000008000a00", @ANYRES64], 0x84}}, 0x0) 1h19m12.954533048s ago: executing program 3 (id=1108): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 1h19m1.694064938s ago: executing program 3 (id=1113): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) 1h18m59.033753005s ago: executing program 3 (id=1114): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) userfaultfd(0x801) 1h18m46.447285965s ago: executing program 3 (id=1117): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x188, &(0x7f00000001c0)={[{0x55, 0x4e00, "4b26ded45a9b9dbacc78be13835b74cb26e16077131d1093465011d098a3ee89500bbf301b136f98813928662006333214d01a667d92ee1a7ecb486b38a351b185133cfa1ecb8a27eab4fac1bd2880c1b28cc67f9f"}, {0x125, 0x4e00, "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"}]}) 1h18m0.832263447s ago: executing program 35 (id=1117): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0xe75001b60ea60cd8}, 0x6000c054) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x188, &(0x7f00000001c0)={[{0x55, 0x4e00, "4b26ded45a9b9dbacc78be13835b74cb26e16077131d1093465011d098a3ee89500bbf301b136f98813928662006333214d01a667d92ee1a7ecb486b38a351b185133cfa1ecb8a27eab4fac1bd2880c1b28cc67f9f"}, {0x125, 0x4e00, "9eb05543c3192f6b83720f1f89dce13b19d1906b713129003bc01b84584afe6fa8fcd407503ccd53a0b345adc771e4520c57454654609355724f4a067fb819f2a277a597beca23b10963748dcbba3526d0888096d442677757bde2d73f0bb6cdd6aae2323b541ef14072025125a8bbc0c24fb6551b15693da4fdd797803bf872beaa7576a010dedd8adf2adc1f49a522f8ee8005eeb250decb0b68543ccad74a3d326c0d175e34286ba0fe013dce87cae0bf64111b1063497bf1c7e84b4b8261e9c37a631d651169b36153b2b5f7d68aa9ba1f70699aa8956eda64a43cc0b6c0116cd87323f842a7e08617c1bf6d106162ea559906df0f3813b41adfcce6d46b62a697e1bfc217c4a15517248fd19a4a2d03fb72e10dcfb8441193ebbde587ff713eba3aee"}]}) 1h12m13.233796445s ago: executing program 4 (id=1231): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x20, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}}, 0x0) 1h12m12.356622115s ago: executing program 4 (id=1232): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfff, 0x0, 0x1}, 'syz1\x00', 0x3a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xd) ioctl$UI_DEV_CREATE(r0, 0x5501) 1h12m10.145462406s ago: executing program 4 (id=1234): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x3, 0x1}, {0x4, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}}], 0x7e) 1h12m9.34196967s ago: executing program 4 (id=1236): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x101000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000100)=""/105) 1h12m8.571938863s ago: executing program 4 (id=1237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008ac633887252f81fbf4dc74cff000000080004000cdb00"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1h12m5.723092987s ago: executing program 4 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f00006a4000/0x1000)=nil, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000100)=0x8, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) 1h11m19.751561013s ago: executing program 36 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f00006a4000/0x1000)=nil, 0x1000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000100)=0x8, 0x4) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x34}}, 0x0) 54m39.565826847s ago: executing program 5 (id=1709): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) 54m36.111477705s ago: executing program 5 (id=1713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast1, @broadcast}, &(0x7f0000000840)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd23, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0xa, 0x22000}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000de6b13140003054000803a00000025021803", @ANYRES32=r9, @ANYBLOB="080002007f000001"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 54m21.293078245s ago: executing program 5 (id=1715): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x40002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) 54m18.889210894s ago: executing program 5 (id=1716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0x922bac8552bdad9e) 54m16.660770981s ago: executing program 5 (id=1717): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x20, 0xf, 0x2, "5cf0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x20, 0x13, 0x4, "db8b6c67"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d40)={0x40, 0xb, 0x3, "b100e0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x1, 'Q'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 54m14.629297665s ago: executing program 5 (id=1718): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) 53m28.845873852s ago: executing program 37 (id=1718): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) 44m43.64729898s ago: executing program 6 (id=1887): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r0], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000113880)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000113a80)={0x9, [], 0x10, "1b65868c827e2f"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 44m42.123557821s ago: executing program 6 (id=1888): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="12010101020000102505a1a44000000001010902440001010080f209040007020202000005240f01"], 0x0) 44m40.351375917s ago: executing program 6 (id=1890): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007f8000/0x1000)=nil) gettimeofday(0x0, &(0x7f0000000080)) 44m39.300752567s ago: executing program 6 (id=1892): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 44m37.955581005s ago: executing program 6 (id=1894): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') syz_fuse_handle_req(r0, &(0x7f0000000cc0)="f773091228a43a58c864f1e0366b07de21fe64fbd0bf85a894f8d30ff6cc5256c4d3abd726c119dbebd0ddca6ad62fdbc55f46668ec0858ba96bf6733f0be147e9108ebf89278ca74e07fed107889459c0a5e30616db71c6973818d14e3571c410aef47e6e54ba02e48ec733ebc921795a1f431faeecbc65696ffb9e08760f45650f650d24af651d9986b956d8dd66017f17012f2358b5f69dd63f9aa5fad2ab7ee6df7c99f0b5601e1dab2ed5ca6aa237c52a838d7d51293628dde608fc4ec691b6e2023ff6a6813c505fc81bd0a0de800a5bd701a401ed07139dfa917e524c7d8fd47094122e9acb0382682d0b2adc54ab61c2d9aac6b5b0d50623187e31ca089585dab35411759db09bc44178011883cd0d5ab3fc6f8be3d0e71f083fb911a229995801eeab83581aa5bde0db85ff5c77aa311fdc9f9b4b4de0a96d371b6371ace3923e5557c7e911f522e132bae799ec6d11a43ff7420d4833d306f261ab6636b1f7d250829700456e3aa69bdfa28f24acd27b4df16cf417a7bbb852fe7b50e3841708110ab82af1e1145c542afb83cd7b542c6e310a86cdb76d492955312ae6665c95f36a0683bd12a394d6a45a0f38fcde7d665c4afbb329f3486e1b21af321b3f933d585d885485e6d9448b35e0f8d825365ce26af6cb8fb7466b66491e34b5313019beb3b2934b369daaa16b73734d3f787dcbe3115a3da3804aca82335ac9b20823728a6ee0d292dbcebb103ecdec0d27ae3a3ad5e0040cb78abfddfe16f98397c5f1f910372454722a612a0cc91ea8f709544f22c4e3bd70840745638d83b74197c0b22331e3b107af26097a37c8dd2b91e5156af1a33e06846eb15aa2fe95b6df98bfa7fe28693e0ed082aacb3181b657f81790d4556506f8f2a3753bfbd2949429dc3cd1e11291e82dc3db974a13d88d9cb4242165201f3d9b130c128d057bb9167f12859fbef6de8216d70eec7d3706b9013f9b8f61d8059ab50904b66a32376840d8c3e714bd6ae87640f352ca2b4fa2c1cd83f28d5de889f1454605fdd49c7a7cf1af226895ad6ce6612063d88ae60f5b8af22ef1306f55205152f0e72f2edee901bd89136eebed01475edd572f5a4da8b34bc6db8f29944cc720cf2b03cd2f768a34a81fdd58693fe859edfb2799b3f90cae32b6d2c577dfb9e03ab2bb25a41f53a42c11c89a615bf1c44f5c61084c70882a55fb3039792e9fff127b323c0783c506b6e4b7079cf27f67fdb191256b7c908e1e30a8f72072ac4323337062da5132369135408bf74e1b1f6c1bae332f75291d7a4f4aad4b9f70be298868305486c519434652da2535ff7924324472fb23c84558a5b1578ae94c8805becdb99eba47add535fcb7a72ad9b5d631b824a35d58807ea066bbe53859c50b5adb3508ccb3ae974ee187e40dbfc09a326b06a6004aa81c6c91eadf97ccc77cf9ccf4ed92199d95c2c8d5c965594e306d4e8b78d99d2ab0d282890c9d34639d719488b8d5fd3832a01f1a5f75449f460688e63825421aecef8a43a187739d8b1e14e54c658d57e4cf607430ea530720b3308609b57a9148ad5b921d94b6bb775880d492bb515bbd30caeb4ab8fc8b0c392a6c76dc63ca136d6e76e49a0878ea9577831e7bb3b4e3915b09222d3ccbec1b3dc4b1fd1515f302ba48d15adb9fd7aeb26fe553a60dcf82ff70b6c5d7389c54194e46bf7768584acbc18c7fd7fe0fdb11dd32a322f0ae97b481da34b47d0abc16c6d12f8e9d12db2dee5a1d66d5876bc6e100e02f3a921088947fc1d0a4d8e4e878e92cee18ceb78c7d9bf0204cc515eb8185b985e967134a1400b6a5b945b3ff86f62c2da8fe6dc8628ad36910b863a4b7cc519d853e6e3c6aff4d91862dc8c1364a8559f0c58f88a90ca4bc4a9d1aa2026229d46482819df72902a8d77615042340d758bb49153eb695823d43ef50e10e700a7303a4b798499464f39412a7b2cd7c460717364c595f3711d9ccb710075ae301100ce9f0c5d8b6ccf4f673112e2a7c2b29e56ab556d3e9dc0e777da840e1e304a24227bc9d1ba3c31f2bfc39b6ffe06e7dfc08ffbb799f56c5e9b4ce9120d10bc52d4d105167b30be7d4afa0007c59c3324121568fd4f48778d7b17a1ef117036520d25367253d763dd2f1369ef6562afeaa89dcbdd433ef80f92c41143cfeaf46325f2191b1b29b6a457e0a88e7a54dfede8e186ad4fd4d3eab77136d9e403dda03ddfb24708d648840427087481424d21b25a52922a359129ce109fec903fd33f03ea6176cb7cb64567d08204902acd1f1d0146c7c8ef5ca24d04209f2b55974ed7e11eb081beed06eb03ddb5ae80e3424d52741a5e7c8c89006a62f6ba37a7e39b75566b8d57cb11fd23ff73f7f251bfcfb74336760296a801488f77a8f0a830eb4ca2987be3ce42e2aad2f4a975d95eaf0834fbab05a7e97837c0d49ba31c93b2cd3ea05319ce1d223df3a08fc35d6d99bbc863602bc84d26926241ff70d7715d27d60b201315264f2ee3ed0ee2d1959228d9b388019151580a4a68449fd37cd2c894d749a0a281c4e458f5bfc76189e7c2ae21e318a99792090e7bb8bc73ead76439a4408b2ca49678ed93ececfdaedde0bea7f8df33910ab08518829435e642bad3aa9e373fdeb80c981e8f6f11602a8cb23b25dd718296c698aa602889638041b286c3234ae10d7d0c8ff1fe301735a467475db85fe88d155f4a8ac86937392129141f2784ff559c7dc79f0fc6a43c940fe735d91c74e3975415969548a9d7e996b5d6a0801e09519ab3852e8c5cc23f380be09fb7fd37e0cbc9f540a613aa289cce31fa3ee913e364a8a8fc1490087863222160b6899e32a391e090d41bfc961943d03f7b2f8e49750a04a20f2e2ca2951498e0fa8cf0d33d022d490704015c0a83ffb9f44114e37a386f2c7f940cce802edca5ff4ddeae0666167c2a466aecd919629185f491a210d407ebd09600406178ecc818a7cc4867ff14234efad41453027f6cbc62b4649fea7b227ede841e9816d98636c2a2c950680983d2375233a7dd64dc71c9733f5502ff4016724506ff026ba71df2623446f083df9e6df6e7fb701da63c640f8599e09cd7ea1b818bc34349a051430fe5791df7724eda9eae0adb53ec1e844565abe44063a465bb2ea15fa53342cd1229f0b6092c7d544dd0ffb9cadda6930115a66a5ae892f3661e32eb3ace734f4386da1ed040dfb0155ee3f079ec72a3bd8da69b943250a3d33fdc8f4666d77c680db12e0aacd2ea7adf4b00f86733ed27d3c7d677f6a7b60c3657a599a7a36c88e5c805eb7bc022613b6ed3489ac3217bc25e862973d9b3f2235049452aeeac96f3e40044df6d2dbde64b819bf1ee67c6a03566e1e5c8d123adc7eb0410be047cfecce48a5eaf41a718f5d1b78c17fbb6fbcf003f6b1dba0a00558ae60e6413c271bb0dbf733aedd68eab4f8d884bb46b5fd833dd718e6c4ea58ff44f4137372494ae1c74d2ce3cd66526518a798f095fa804088d18d2695740e930b8d57eb55ade001c1cc9c734b77da57482e024503a1ea9e2a43943a308b5285d622ab623b860603122b41fcc249f224212cfbdc8dbc15e791ea6f51c44154619c98661664b11a34d20ecec388d69f5b32fc674d0ddf2b1365c8709a529b2eb3ba0a0547bdde3adcd272e0a41de9904999fd890b75fed8e60f1f00bc8aac46d8043ff2451541f644f270d9fc65a0b772078b05a6ce60c0df8b2540d89d052fae472867edf3b03a252bfe8e9ca3d2e31c7950851d2e7e7273c0109f2ac002747d277b6c9e6a9bd51d57c59b178a6e329c81c7bf2f5c5d345b2e990093b2e47f79807a62017fcd34efc671c7c6270a1a80f60fba3fbabb48f294ee3b1425b6e8c0fe7b14c31c2b0100d8c5f50349cff1e4e0d3aaee1f4afe10f5c234c1c4ba670111ba0d29694811f3dc242a73a9b042535f3ae8ec5b94240fd091cdfa157e7d27bf26412cdbe54ef55eb5d7183ca5ef0a9f5e81aa6dbf705e3a0d542a7573ec99ae67293970aceb8ca52c9eb5786196cb61947436581745df8a5ca11706001844f581317d43e29fc6eb1d1b011278eb4d77cc6a2e1defabaf87177a162f6269abd97503cc26aa73a18a5954e88692b63e34ba673a6b302ea2a59679ef60094c3db6f3874dab8affd12a7d12c53e77efa807d3ad845b908438b59461da39c072c6ef2fb1889f9a9e39a9256bdc71179c98399e60df6b8224a30e22ffd9010488cbc101ef020ea78a90977fe35586b4140339bffbcf32d81b04f789a195a44f289f44c714e6163afada072871122aaf6f60da967554de66cc4ecbf50aef5d02af874873ae5a36a576eb5dfd749b6168e395ce5817d6275b25d6c6ecdc6d8c4a39fa98f749d6584ec0312bd781a0a14fca35c8b0ac2cdb5a4b15d03966ce40cae66ded0cf7afbc5f1a580bcc596360f9253a70f05ebf3a58ca30b05b6edf4367d988e6dde2cedf37237ebd56da02edcebd9ba841c210ab52bdd869fbf3a783b44670483a012419a50c0114863a97d9f152e63a3ffffc4c83710ef02a3a9c718450f4e8f918c2c551d477a88e91c67bf1337a52f4d680e9607a295feafe09e1a0c5e3c1a18c5390a6a84fa19dbfa2abe421021b471f1e80811a4ba036a9a457fa323b7fa65e666a08f673ca92a02c03d6eba96604f770444b96297307bc23f6a928f0da3d97f522125592c092bb32f97882a59603b268167e970bda981299524929e111e31b3301285cfd9bbbf0263d7e2e19cd42e56920565eb5f45f99455b0851dcefd6d91575ec4e273afaad0f7e831d46a8d5f95244e06febe9d9c76fe2de20e561b11d39a4884d29e68773aa85327279e667884f8d4f965e8b12815076da686c02d17a32bc97de630508b06b091a7fa705bd705a3b5e85975db69d4198f23547686cbd42dfeb495d2c0c2c4c155dd1c8c0522836b271015c8f23a5c129e49c0def56c0fd2a5d010583b4d2849b97dffa9d28dbf783be484de51b8c1facf821d8f6a295caa97f5245c8b3fbe71b47a3390f2c2ab9f6ee41ab082c6ddaed769ddbd9188c970be2843f4fdfe32d3b9242628e3a1d037746b564b4bf6cbc37824444a78605c010a00f2f8abded984e664c63a10cb24e0c1d2d53873d519475651d73e1e228fba31b3165de6572c3f4ca692b73652bb77c423a191d45e90b122e0a66b956302ff7bacccce85e7428d8c574ef3d78884495c95f1416c3f500f5be2c0a70303ee19d4e81c1360db322a0400f311caffe568d07adaf9d6bd6f136f0886db4fc6c2cb956b79064b61afe3abd2ca638c62bf89ba91cfab89aeb6fb4eee6b8a6a321076ed5efbeb369259390e780454eb1666c4fe8366b00765b5639e20827349f4df49c90bf5dd320b36510fedf5c18f59ee14e1a8e436f02506d6c6c3c8c3328eff00bcb66ea3a99f2e9cb20f0efcfb09876f7860ce4294de8c5ce007604031a8dadaa20955701736218a159845f8cc7a485412bebaf653462459380a2cb0900721d570391f8e62869546a610e8478d9536d473945a46d9a89686d1dba43690a5a4dcad2d4fbacd877e38495d4a1696bbf46ae8fc6a764faf7c67101a785d259ac8a6df1c7fbd006e9327e24d8fa4c569a5e37fc047521cf520e2bf11dff07f6c47442db2fe7a94a7b557454363043ad4fb00d2842a16a2b25fcdd5aa38d585600cf81e9d202822c4571a12668cc202ef3af5704337bd134b99c6df8538316c9e423032e4c3b73b1e26571b9890ee5a5f9885321281c1371614b57464647c8d5387dcc9878ba4f9c4f65cb3d34fcde5b5fa1610c28f50ddf5a1ccd682ddf4590adc3d3f98b8f98fcd1845dadfb142dde12116bf36d7b738d930e10c3317a0222914e059370b463611c7e8d37bab1f834ba690c98af9924540256cb073ce89d05715e50cb79948451c8c4fbb07f497e860ed293803689ba1895af65c8d97c276e2cd0e7bdbe50655293462dbe64499184a7b8a89a454e38219b5e979c98badc75513d7a6862e2db939347d9941d906432ae41b67df54c2c92568d847fbaef8773dd466bdaf52bffde53fdc2514ae006e19a9599e0fde9c5772c3b30ce30d8fd5e0f91fdd8c66a8884575adc7d2970321520722ab1ddeaa64aa21855f9263d0b51d2b2df0ab28cd32d709c0984ed7f0ef4ced427e99230553a0b0453b1f6daa0ff63cd7750cbdb5f3373ea044ead7c91acfcfdac09648c06f4520a6766d530b37ad2aea22b50419b26f3a40df01f4970a104df6893d6e0b6b3cf88eac9c3edd9e724c5357283e933173dce77bbf70c99367b68e55cb0a3e16d1696c571b483640c33b9f229d837fd1d303608ea286643ccf46dfbd26d2484c79827c6cf896e4904a1febc39932c76a17606c0a62010932fe29877c00dcf7d65fb006594d8869bbe7f78138a78a125a475da225920235b47ba8bd631815926f7a5c4ff69d61c39b26b078760dbceefaea9aa5f08c97d2e97bd478d014ee739db93824bfa7d3167f789624e5a98873422a0176c8b2a69eb5a01dfdb22ac1cb7f9294df6ac1245d50ec44fbdfaeb145c9bacad2abc7e160993afbad2abcb9c1019cfe0e358d1c44676cf002cf844d83de959c3c3f074bad5ac0326d0ca4864b2fd724beb5338e81fa81fd178e14e267c06189ac51fc6a248398986d25d6791c98d330b37a59b3d9c46f94e6170ec499fb3f27443c185e261761d9fac5fa44bc4912c41f93a642b89d51afa016c87d086a145255e808082a2036ead976bd2b78079f8410dfd8fbd15048e3264f15491204529f6b0e5dd560caa9113f9491433b9ba54dba2fcd648928717a1499582e6acba3dd28364b368a1e16b13a2cdaf13ef8b0d4046f8c2a5f280d538b0efe3297bcc226c17688be16315383fe043a7c51a8bb02497277bb1dcc9a16db9d04dabfb0bf6eb9f408d18266fa45d2fbbe3b18b89d6dc7c5b947b741925ac93991554216773ac5e0dc903d966e8fab10ae2eb22e002aebdea2d800ba75fe33082561b9222997bcfd8d246dcee7c46ba0a12a361880b6c4bbcf966a2ac0600d69d39c6c43c783859e5212dea9944a658c6fcf33df2be59da18f1385d3425bfcafda04071b83539311884d4cc8db5838dd84c3d8355292fee226e5a69c6c9a31f1b5406cebd486ffd050928f3916d748f159436fe37dbef68656842624063833cd1811151e9f05dc5ca63191587f51274b6ba07ad44e104a20dd2fc6d43e0274c35f926b56591cee7670856d5d5194df8bdbf608f77cd8701f0ef26a0e38e4cca58e4cc699065d27eb74bd6f89755779f3b2a73a3a0d0f655755dc7cb91772bbe0b89d360353335e545d8c3133260b2ade1814e2fb4e9bea7db3e30fb62c936544a91170ec2f86e3ae75319da0d873a05dc9f0e14bc709028e11da854a03d3941a51e6f3e0d363528c9d203fa5166d9aba23a49df941d5c902aaa68a3b99a709e9d9e3adc96b581494fd2c7e4605af5891261533ee403218c6901a37dec5e2d65dcfec9449cefef4eb4c4b793f34c9b0187ac1e9302c880149843a66feddfcfe47c5e33eaf1ab1eb0ed48cab980df0fe3e11c46a27d2be9972af5ecef3081f77ffb8640a8f3694085228f7400dbf177931fed7a9fada79fcb76251e5b64087e3e4d4fe0a5b86d7e6ddf47fcd131f68796de8c9e86bd6b08cf54ffdd5e10389e0d2122d72de173535a09defea837a519f96e1e795e6e767a2ea7ebcb44e96a11a2910bfc1b5221012732bca14534a2a97afb0faca2bee78f96b59930e27b7b410b53889a190ba70fd1b5fa4418f8fe6df52457a9f814eab291bd45471c20fdf973c0f75bb052417b69592e83cf8cb34b7b8189c01ade45736c77cfde6f44448b78e02ef376d75fd2f95fb0dd91f9321837777f5f514f083bab481b66639af323383a4d715a0c3a216536c52d3fb3933895e1709b25a84a8637a125a5fede40a90d84218efed8b65c021bffc279a4b30fd0cb390a95d1225862f37df93bc97f1192e725bc38e81ca4a4d59f18afc9d89793d3834e1781a8d5e4d521aa3c34b4335817f0dd88771a31d3336e14645323ad54c728cf1b0fe515602c064b41885ff14ff394d4deef3c5de136fec1a05e3662cf61f29a74e9da23f116585d85d3806d015fc8783c08916546e18c92c737f31a7d35c72b3bea01fd852e7dc6d68f24bc787ef7b7df2c4acff86981597a7dd2aadbf40e26109a10e856a78929e698c308960d999783134d7f5abf90a9ecf67e496818ee42afe66888b41707047ecf3374be56e6be6d878531057d4b16b7ca749ec672842c057868ca4c0f9e69e6d92432d6331c4c32db2a93d50a690a0659d4c9bc6fd75f7201f943c603bf7caed8d218ebcf947ea685c0710c26aa11ec886480983e06b9be0168313de87b0e068f98bd14f2066e3fc3a058c32ca0da2a1b449814755e935ab360b15bc91f5d44e54ba2a8db07d1c3854f6b38efa006263300f2113c6d3481868e08d406545a25a8dc75b01e429853e26747023913298e7b5b174c8dfd4e36a81061ba46beeaa200d6003b9f0cf50caf3d5b06632d25fe7ba91d2a97f7562555a67876e334c642e48e753ce6f12a78329c381a1349cf5d89413d04a6b93c566aa2e335f4f0732567388a9df0b3084d57f6393eaf5c20fd7c3c29981500dfd3573a16ee4bc56836b5c3e75ebdce347e46f3d1247a936df69a259fb35ff4372b774f960aa4e8d84e4ae54caaea634d37d2d4f3a276e15176e1f00a906b2fe6ceaec16cba278d0eacdfac9dbbe5af60c5f923ce670315bbc29ac72e9f848d2c168949d7fae8d19fb86ac5511c36035c6c101063cd5b8b9902f8f51b6de2e59da3e5ddb25eb6e9dcd0a64492da36f8a61c9e2b33dd731f0423fd407048346d5a19fbb84c1d23e34f5e43afb32f3c6b85c550dae394285b233ec5ae2ac8646e2804f2c59e870caf6fae5d6df810bf6bd64562b288af75a5d42478475dd72e81651453558e4f7370cea3def6439ccc1ff644e7d0e9c5c286b8aa1881b5bf641ceef24f557b68bb7532af2139b5a890cddf0b1e26328070a43fe509609fdc6de4dfcf8f2f4a79ada37a05b9a2bcac4df7774a79f6aa569b4dd4cfcd944d64982c13349f5a880baa7b5f20aa55af6077299c6d53e0c6ea063d45d8217d72104012b5d82ec46fde056dfc94e6cc9d61bbd1bf08401d1ee163f3d7f88d3481c0f395765e6653d6678dd73a71d411e0ea02608b226357ead909c8d5643527dcd1e0f0b7a785cf691b59812593bcba54624fa2ad1db9547b78bdfe0d6ba2dbc3298dd0c539260235adb385a00989685705cf3631ae545dfd8e2813d5a2ae507f357ef3ed5dd46a868e04cfca7d01edf77c19c6d4477b9a57c7629dff4afef542d19a1b559e55488a3083ad29b98019bc54cc59299e30aa5cdf96e073ae593f644ca0e7f334b1979d16b436e624747e9c86cd985d126bc7495dc27d010347f7a76266894de2ec5d2c9e460e723b0857313e17a17a6a2ad9983867cb78dc5dd3eec56056fcf4a76acf11af6e74fa9c08dc30df7590fccc00e8e972736397ba8680fd56f2fd3758d628c3c93c4222ded9de6b2341cd49325af64d48de4e1c62dea24b19e82f3ae3cf1212671774b510d2e2c18141b5b0ca54376d311443bf5bea59d9f07cb83767904e644a5cb77830f4f7f92de93dd6498ad091384d8899fea4d539ea6dd9178b07bcb47704e37ce6412ab52e24108c890848f9ae08f3c7bd72362cea73dfd0ffc8b77baab1fb43f9b2247f3c20e1a67839ddb28ba7ebef67abe121c3f55d1b63cf32698e068ed11b514f23b8762d55e6394613bb895b5f6bd256ca0732acb067f916bdce9120dffa8a9473815ccd35b3d622ee25ffb98bbdbd17955a0694cac0a64254ae997a9a15137b7f923f611a1adaea3fb6ef547d5a3be44a14be44202b1679968ded791d3a7632cdf4cd3c762d022cc3109e0b10b62b3e779836756ca3bb65a1c8a7fff871113f1975b556831aaaba1850acf0953383e223d3371ae4753a323dda2ea9298cf94c15abb084f8548672b257225544adb2b5eb8fa348a32a20f15d6873bf5dabde8fd89a76903d6f75e0c57c4d6918a3c3120ba5e5cb955cf224a17bd49bb08212d585ce979199247a40757ab81d9e1fbddbb14f015908a9aee690382cb07557beb1b157f5a3b279615d5b7c64a83d229a87cd16a6d401c06dc84ae286075c4d634e6f91dc7a284bbfc1795acedb1fd43c5c2e8ed6fa237e3d06a69b4fb83aa47a12e4ef83a5c5741d85d8342247d4d979601b66867313b1b8f19f769d13c9fbf6c1b2e272d0b0e875743c138ef0c014e1d8985642b029d35aa073d283da1367e869561913a1a0463cf3cc6c41835dcb60d69f6f71aafeede9bc6987c4a68c9e0fb3c1986433e6e45d23a5b03ec664b00cf6a207a8e7dccf7d493bee9a44331e8c1ed92d5cec7afd206d3a3cb78f213b4d2aa8c1c9b0730d818747ddf1027aeb8684944c5b9696ea935f55b5be94f69bdcecc50186cff82a73de8bd231314d9217b6089b8cd8a292793f1fdec1c5af1a2df89c1e300d2fb93516d56060e08f7e4c50b5f227325d0908677653d64dc5cf838f39e271ad79f0033b6b2a5611d5d1f9bb984e6f7d735c5bf0924d873e20e5869bd6d94d9f0994a78614dec3f36325299d189293dc5a4df8cbad29d1fd7f9b51c1c9e48e2238aaff3243cd346deb4ba8545af524776300f648c6728b0f97d17f7ec45daddd62478890a166e7db997047df69ded08cc4d9d8297259dc4100c88359c880dc855ffd5ef3b0922a5b00dae3daeb70441e15dffb415adafaaafb5f5c03b610a3c9903662c236e23baf01337a669f5e174cca1ec79ad7f3cd8635fdcea958cb67400bd01dd03a845fe820f0e7f19776867f247e9c2536ad2776de00480246ace33002c284d7a8929d1e708da9059212ae6d7da49afb9222c97983529158f69bbdbd8f502daae24aef87d0d8a4085dd0740ad1f33178b52447f43192acab0b9aa777262142ec29befefc95de9637f3cb7dff186af2020378870015feadf7b4bf66959cc81543ae33312e4ae3e9c152a65eb76df86b788d11a8534227a8d7e330ef48f5a1069ce4152bc6b311e4636d480272527fcc60c5c3aebbb513d06246ef52e33e7cca789f106ca53df689353c3a518c6dd4719a073f83ea70e1b37c312d216ef26f806f13ddb40e12e3c8b31ccab1440fcd2a2f2f7766997a610a1ad51108163ab4da30219c9a5a2545b19041bdff4e2569f3c281784ac3982de68af9405d634ea1c8d814d0f15b946a1e2130a2995e2d2330be135f21bf5abeb851c65cc3227aff2ce2d88325436409d725a5523253a722af8360a0dee622adc4690ae49f6c3445d2bc4ae75595874849b54798724a0a9f6161caeb83ad17c2d7325524d9acb94e80c7626458167e624f62e9dbf2c49ea52f8c978481f6fdce7222a4c353d8a77034d7a3e3237d253ce3402553ae63a4519298e96b534bab3aadba3dbae70c07fa06e03f89b711e1deb0e9f4dacbad30374777a2710dec408fb8531acb5d89376c07b5673cac6e361935", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44m35.239384635s ago: executing program 6 (id=1896): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xff31}, 0xdb30}], 0x1, 0x40002142, 0x0) 44m35.193749978s ago: executing program 38 (id=1896): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xff31}, 0xdb30}], 0x1, 0x40002142, 0x0) 32m45.466479409s ago: executing program 7 (id=2259): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x5}]}}}], 0x18}, 0x0) 32m44.375391262s ago: executing program 7 (id=2260): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000002100000000000000000000010500001a"], 0x0, 0x4e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 32m25.804617229s ago: executing program 7 (id=2265): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x4, 0x4, 0xff, 0x200}, 0x50) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 32m22.34451251s ago: executing program 7 (id=2268): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x24004000) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x800000000000) 32m20.430745828s ago: executing program 7 (id=2271): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 32m18.817936135s ago: executing program 7 (id=2273): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) 31m28.353485388s ago: executing program 39 (id=2273): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) 27m48.343876721s ago: executing program 9 (id=2280): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 27m46.897841488s ago: executing program 9 (id=2335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) 27m45.087463719s ago: executing program 9 (id=2336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="2f00000018000000040000", @ANYRES32=r1, @ANYBLOB='J\r'], 0x20) 27m42.773353513s ago: executing program 9 (id=2337): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x0, 0x0, 0x2a25}]) 27m41.096499215s ago: executing program 9 (id=2338): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x85, 0xe3, 0xd1, 0x20, 0x31e3, 0x2be7, 0x8d2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x72, 0x7, 0x2, 0xff, 0x5d, 0x1, 0x80, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfc, 0x1, 0x10}}]}}]}}]}}, 0x0) 27m38.696156105s ago: executing program 9 (id=2339): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x1, 0xffffed05}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79b2, 0x600, 0xfffffffb, 0x232, 0x0, r4}, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) 26m53.168860849s ago: executing program 40 (id=2339): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x1, 0xffffed05}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79b2, 0x600, 0xfffffffb, 0x232, 0x0, r4}, 0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) 23m5.315294625s ago: executing program 0 (id=2356): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) get_mempolicy(0x0, &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4) 23m3.378642043s ago: executing program 0 (id=2405): syz_usb_connect$uac1(0x5, 0x97, &(0x7f00000048c0)={{0x12, 0x1, 0xf7fa9394a4340302, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x80, 0x50, 0xa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@extension_unit={0x7, 0x24, 0x8, 0x1, 0xa, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x5, 0x81, 0xe, 0x2, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x7, "f9920d75"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x6, 0x2, {0x7, 0x25, 0x1, 0x81, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x4, 0x9, {0x7, 0x25, 0x1, 0x3, 0x1, 0x2}}}}}}}]}}, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0}) 22m57.914678533s ago: executing program 0 (id=2407): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x41, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000480)="cb3b88304ee12075cef636d5364c7506cc36ee8e26343ee24f3ab1963105f225d7470ff3acd56153987c62e3a3fe4a8da9381c7425460527b980df2f3280ceca26ddecd21de0a78ccde16b9d2c14048a5c7ad5dde5f7f8cc653f349d2092edad7a7de1bd2eefb29ea110e124f8b51ea78edc17a9343798b016c4fa8dd44c26838bb7a06fb03d3724011bb6a1bae0420b37729073037ff503175f22528d501728dbef9a71823e011e0913fcc71aa4aa4b8ae75338d24aa23517301b8a717c17785da4064aaa27acd043d7f0e1e12f3ad8de0d387c3b6848cf6559e5b7d808140340aa116ddec5", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 22m53.021019705s ago: executing program 0 (id=2410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 22m49.799680087s ago: executing program 0 (id=2413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x28, 0x8001, 0x4, 0x5, 0x3, 0xfffffe0200000001, 0x6, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(0x0, 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82df", 0x66, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000240)={0x2d, 0x26, 0x17, 0x6, 0x0, 0xfffffffe, 0x3, 0x8e}) ptrace$cont(0x1f, r4, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffc, 0x68, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x8, 0xa}}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x31, r7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000480)=0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TCSETSF2(r8, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000402f17340000000000000109022400010000000809040000010300070009210100060122"], 0x0) 22m3.643361595s ago: executing program 41 (id=2413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x28, 0x8001, 0x4, 0x5, 0x3, 0xfffffe0200000001, 0x6, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(0x0, 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82df", 0x66, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000240)={0x2d, 0x26, 0x17, 0x6, 0x0, 0xfffffffe, 0x3, 0x8e}) ptrace$cont(0x1f, r4, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffc, 0x68, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x8, 0xa}}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x31, r7}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000480)=0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$TCSETSF2(r8, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000402f17340000000000000109022400010000000809040000010300070009210100060122"], 0x0) 19.547964453s ago: executing program 2 (id=3266): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf25010009000000000005000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000fe7d265e008005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 18.479558062s ago: executing program 2 (id=3268): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$xdp(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="eab9", 0x2}], 0x1, 0x0, 0x0, 0xc000}, 0x10) 17.614236939s ago: executing program 2 (id=3269): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 14.351603622s ago: executing program 8 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) sendmsg$xdp(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="eab9", 0x2}], 0x1, 0x0, 0x0, 0xc000}, 0x10) 12.984915442s ago: executing program 8 (id=3274): unshare(0x22020400) r0 = socket(0x2d, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 11.422027914s ago: executing program 8 (id=3275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x44005) 10.289003998s ago: executing program 2 (id=3276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0", 0x60}], 0x1}}], 0x1, 0x4e891) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 7.999066978s ago: executing program 8 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) socket$inet(0x2, 0x3, 0x2) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000000880)={0x27, r6, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r4, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) 6.686490493s ago: executing program 2 (id=3278): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x7, 0x4) socket(0x1e, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) listen(r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r4, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x56}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x4048001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000a500df251a0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="d9512550947b3bd4ad9255ac0867d5dca95a1a4ba7c0577458aad4ab051dc481436086002434762fa243c0537c48fbcea174d64574b152cbb026259dda5a581cfe7435f8e6b33c5c7d76a6ddcdd5e666d776cd81", @ANYRES16=r8, @ANYBLOB="00012abd7000fedbdf25890000000c009900fcffffff1b000000a0001d809c00008005000c00010000000c000300000200000000000005000700f80000000400040078000d80440001800500060000000000200002002e0f3449404f0c244c0f3b3009334d11104b511f44253f5501052f350b00010033090c30366c01000b0002001e18530414285100300000801a0002004835371921464119132a40340b4f434a0f2a1c475120000005000100000000000500070002000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x70bd24, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0x54, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044095) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r12, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000fd076a30556eef1c5da7139a712776efba7f8756b0f2df3e4773f5bd0c389e3b765e50dab2f56b1c63da3de642d9a13be8683cf0f00e8a0d7769145874c6eef76bfce5f1e2a7d5f370e228edef3df0e02afd55d8771b157c062d0961cc870bece6e44c3b591930a12be48e6dda1e853a2eeddfb25fbda45face84e6fd3380bbdcdef3eb1086f7c6dcc9166335b701658", @ANYRES16=r12, @ANYBLOB="a12b2bbd7000fcdbdf252d0000000c0005000201aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) 3.468056204s ago: executing program 8 (id=3279): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 886.688253ms ago: executing program 8 (id=3280): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 0s ago: executing program 2 (id=3281): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4073, 0xfe9}], 0x1}, 0x8000}], 0x2, 0x10002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0xc, 0x0, &(0x7f0000000100)="ff412f66b0833efc88649687", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.5.1400'. [ 2858.913763][ T7941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2858.926381][ T7941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2861.122189][ T30] audit: type=1400 audit(2860.440:391): avc: denied { connect } for pid=7933 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2874.626245][ T7965] lo: entered promiscuous mode [ 2874.626730][ T7965] lo: entered allmulticast mode [ 2882.105838][ T7975] ======================================================= [ 2882.105838][ T7975] WARNING: The mand mount option has been deprecated and [ 2882.105838][ T7975] and is ignored by this kernel. Remove the mand [ 2882.105838][ T7975] option from the mount to silence this warning. [ 2882.105838][ T7975] ======================================================= [ 2892.267181][ T30] audit: type=1400 audit(2891.580:392): avc: denied { watch_mount } for pid=7979 comm="syz.6.1417" path="/74" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2897.245179][ T30] audit: type=1400 audit(2896.550:393): avc: denied { read } for pid=7991 comm="syz.6.1421" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2897.254299][ T30] audit: type=1400 audit(2896.570:394): avc: denied { open } for pid=7991 comm="syz.6.1421" path="/77/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2906.195438][ T30] audit: type=1400 audit(2905.510:395): avc: denied { setopt } for pid=8008 comm="syz.6.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2906.227948][ T30] audit: type=1400 audit(2905.550:396): avc: denied { bind } for pid=8008 comm="syz.6.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2906.307401][ T30] audit: type=1400 audit(2905.580:397): avc: denied { listen } for pid=8008 comm="syz.6.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2906.367469][ T30] audit: type=1400 audit(2905.690:398): avc: denied { write } for pid=8008 comm="syz.6.1428" path="socket:[19392]" dev="sockfs" ino=19392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2911.427685][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2911.508992][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2915.604445][ T30] audit: type=1400 audit(2914.910:399): avc: denied { sqpoll } for pid=8028 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2918.673509][ T8040] input: syz1 as /devices/virtual/input/input4 [ 2919.359266][ T8042] binder: 8041:8042 got reply transaction with no transaction stack [ 2919.371302][ T8042] binder: 8041:8042 transaction reply to 0:0 failed 18/29201/-71, code 0 size 0-0 line 3139 [ 2919.385396][ T6843] binder: undelivered TRANSACTION_ERROR: 29201 [ 2921.473836][ T30] audit: type=1400 audit(2920.760:400): avc: denied { read } for pid=8045 comm="syz.5.1443" path="socket:[19548]" dev="sockfs" ino=19548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2930.397911][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2930.518612][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2931.537486][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1453'. [ 2931.604779][ T8075] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1453'. [ 2932.763806][ T8077] loop5: detected capacity change from 0 to 7 [ 2933.370094][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2933.414624][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2950.663662][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.666728][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2951.587285][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2951.665039][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2971.063009][ T8137] lo: left promiscuous mode [ 2971.064015][ T8137] lo: left allmulticast mode [ 2976.554390][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2976.589148][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2984.076437][ T30] audit: type=1400 audit(2983.350:401): avc: denied { mount } for pid=8153 comm="syz.6.1485" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2993.907334][ T30] audit: type=1400 audit(2993.190:402): avc: denied { unmount } for pid=7372 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2996.284533][ T30] audit: type=1400 audit(2995.610:403): avc: denied { create } for pid=8166 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2996.336739][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2996.367758][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.975953][ T30] audit: type=1400 audit(3002.300:404): avc: denied { create } for pid=8179 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 3003.024585][ T30] audit: type=1400 audit(3002.350:405): avc: denied { create } for pid=8179 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 3003.075925][ T30] audit: type=1400 audit(3002.400:406): avc: denied { connect } for pid=8179 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 3003.167405][ T30] audit: type=1400 audit(3002.480:407): avc: denied { connectto } for pid=8179 comm="syz.6.1493" path=2F3131382FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 3017.183898][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3017.274268][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3018.889547][ T8212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.958630][ T8212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3019.367419][ T30] audit: type=1400 audit(3018.690:408): avc: denied { mounton } for pid=8213 comm="syz.6.1507" path="/proc/300/task" dev="proc" ino=19838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 3021.923332][ T30] audit: type=1400 audit(3021.180:409): avc: denied { append } for pid=8219 comm="syz.5.1510" name="loop8" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3024.323672][ T30] audit: type=1400 audit(3023.590:410): avc: denied { mount } for pid=8222 comm="syz.5.1511" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 3024.801348][ T30] audit: type=1400 audit(3024.110:411): avc: denied { unmount } for pid=6855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 3038.678710][ T8241] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3043.273123][ T8243] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 3044.934753][ T30] audit: type=1400 audit(3044.260:412): avc: denied { read } for pid=8246 comm="syz.6.1519" dev="nsfs" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3044.957935][ T30] audit: type=1400 audit(3044.280:413): avc: denied { open } for pid=8246 comm="syz.6.1519" path="net:[4026532614]" dev="nsfs" ino=4026532614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 3060.685446][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3060.827574][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3088.034030][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3088.052369][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3116.393693][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3116.399084][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3158.398471][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3158.463154][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.409196][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3169.423520][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3169.473269][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3169.479658][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3171.838647][ T30] audit: type=1400 audit(3171.150:414): avc: denied { load_policy } for pid=8372 comm="syz.6.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3171.857912][ T8377] SELinux: unknown common r [ 3171.986471][ T8377] SELinux: failed to load policy [ 3172.218736][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.257524][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3173.887932][ T8381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3173.979776][ T8381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3175.637335][ T8388] netlink: 45349 bytes leftover after parsing attributes in process `syz.6.1571'. [ 3175.723257][ T8388] .00ªX¹¦Dö»: renamed from gretap0 (while UP) [ 3175.918829][ T8388] .00ªX¹¦Dö»: entered allmulticast mode [ 3177.474368][ T8392] tap0: tun_chr_ioctl cmd 1074025677 [ 3177.476255][ T8392] tap0: Linktype set failed because interface is up [ 3199.571578][ T30] audit: type=1400 audit(3198.880:415): avc: denied { read } for pid=8423 comm="syz.6.1585" name="snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3199.608190][ T30] audit: type=1400 audit(3198.890:416): avc: denied { open } for pid=8423 comm="syz.6.1585" path="/dev/snapshot" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 3211.869214][ T30] audit: type=1400 audit(3210.780:417): avc: denied { write } for pid=8432 comm="syz.6.1589" name="loop-control" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3212.333710][ T30] audit: type=1400 audit(3210.840:418): avc: denied { ioctl } for pid=8432 comm="syz.6.1589" path="/dev/loop-control" dev="devtmpfs" ino=637 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 3227.986326][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3228.087811][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3228.836082][ T8454] binder: 8452:8454 ioctl 4018620d 0 returned -22 [ 3228.877885][ T8454] binder: 8452:8454 ioctl c00c620f 200004c0 returned -22 [ 3229.609844][ T8455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3229.658910][ T8455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3230.737634][ T8459] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3231.486198][ T30] audit: type=1400 audit(3230.810:419): avc: denied { append } for pid=8460 comm="syz.5.1600" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3234.625443][ T8471] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3245.028153][ T8487] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3245.777548][ T8489] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1612'. [ 3246.834159][ T8493] xt_hashlimit: Unknown mode mask E32642C7, kernel too old? [ 3250.062923][ T30] audit: type=1400 audit(3249.360:420): avc: denied { create } for pid=8497 comm="syz.6.1616" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3250.216211][ T30] audit: type=1400 audit(3249.540:421): avc: denied { read } for pid=8497 comm="syz.6.1616" name="file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3250.254372][ T30] audit: type=1400 audit(3249.570:422): avc: denied { open } for pid=8497 comm="syz.6.1616" path="/179/file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3250.332416][ T30] audit: type=1400 audit(3249.650:423): avc: denied { ioctl } for pid=8497 comm="syz.6.1616" path="/179/file0" dev="tmpfs" ino=925 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3250.874698][ T30] audit: type=1400 audit(3250.190:424): avc: denied { unlink } for pid=7372 comm="syz-executor" name="file0" dev="tmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3251.755351][ T8500] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3252.808795][ T30] audit: type=1400 audit(3252.120:425): avc: denied { map } for pid=8501 comm="syz.6.1619" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 3253.183258][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 3260.262225][ T30] audit: type=1400 audit(3259.530:426): avc: denied { recv } for pid=8510 comm="syz.5.1623" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 3272.409397][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3272.488521][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3272.786351][ T8528] raw_sendmsg: syz.6.1626 forgot to set AF_INET. Fix it! [ 3276.456532][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3276.459903][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3288.463673][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3288.482522][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3291.906827][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3292.134300][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3297.254594][ T8562] binder: 8561:8562 ioctl c0306201 0 returned -14 [ 3297.453497][ T8562] binder: 8561:8562 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 3297.457087][ T8562] binder: 8562 RLIMIT_NICE not set [ 3298.566952][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3298.585583][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3301.943969][ T8581] xt_hashlimit: size too large, truncated to 1048576 [ 3313.382918][ T8593] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1649'. [ 3313.387565][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1649'. [ 3313.452232][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'. [ 3317.263517][ T8599] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1651'. [ 3318.044599][ T30] audit: type=1400 audit(3317.320:427): avc: denied { read } for pid=8600 comm="syz.6.1652" name="usbmon0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3318.045565][ T30] audit: type=1400 audit(3317.360:428): avc: denied { open } for pid=8600 comm="syz.6.1652" path="/dev/usbmon0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3320.375303][ T8607] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3363.261644][ T8647] x_tables: duplicate underflow at hook 1 [ 3385.223800][ T30] audit: type=1326 audit(3384.540:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7578fa8 code=0x7ffc0000 [ 3385.357038][ T30] audit: type=1326 audit(3384.680:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7578fa8 code=0x7ffc0000 [ 3385.528492][ T30] audit: type=1326 audit(3384.850:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.5.1672" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa7578fa8 code=0x7ffc0000 [ 3389.081678][ T8668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3389.095327][ T8668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3389.162519][ T30] audit: type=1400 audit(3388.470:432): avc: denied { read } for pid=8667 comm="syz.6.1674" path="socket:[20423]" dev="sockfs" ino=20423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3391.276214][ T8677] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3397.041898][ T8683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3416.824051][ T8756] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3418.389759][ T30] audit: type=1400 audit(3417.710:433): avc: denied { read write } for pid=8759 comm="syz.6.1683" name="vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 3418.424196][ T30] audit: type=1400 audit(3417.750:434): avc: denied { open } for pid=8759 comm="syz.6.1683" path="/dev/vga_arbiter" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 3419.159831][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3419.308926][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3420.237092][ T8768] futex_wake_op: syz.6.1685 tries to shift op by -1; fix this program [ 3422.128538][ T8773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.175977][ T8773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.759705][ T8775] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3428.304433][ T8785] SELinux: syz.6.1691 (8785) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 3441.125737][ T8792] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 3446.132165][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3446.262857][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.575380][ T8808] binder: 8807:8808 ERROR: BC_REGISTER_LOOPER called without request [ 3447.578442][ T8808] binder: 8807:8808 got reply transaction with no transaction stack [ 3447.594548][ T8808] binder: 8807:8808 transaction reply to 0:0 failed 20/29201/-71, code 0 size 0-0 line 3139 [ 3447.629344][ T8808] binder: 8807:8808 ioctl c0306201 0 returned -14 [ 3447.696908][ T8518] binder: undelivered TRANSACTION_ERROR: 29201 [ 3448.948330][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3448.985361][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3454.085257][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3454.111617][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3456.346729][ T8829] input: syz0 as /devices/virtual/input/input12 [ 3460.878177][ T8840] loop1: detected capacity change from 0 to 8 [ 3462.794308][ T8844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27614 sclass=netlink_route_socket pid=8844 comm=syz.5.1713 [ 3472.565404][ C1] invalid error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 3472.567830][ C1] Buffer I/O error on dev loop1, logical block 0, lost async page write [ 3481.207095][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3481.256395][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.416627][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3506.456911][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3546.313737][ T8715] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3548.748628][ T8715] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3550.539567][ T8715] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3552.158018][ T8715] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3563.513032][ T8912] xt_socket: unknown flags 0xc [ 3563.677018][ T8912] binder: 8907:8912 tried to acquire reference to desc 0, got 1 instead [ 3563.703047][ T8912] binder: release 8907:8912 transaction 25 out, still active [ 3564.717573][ T8912] binder: undelivered TRANSACTION_COMPLETE [ 3571.455484][ T8715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3571.556790][ T8715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3571.743494][ T8715] bond0 (unregistering): Released all slaves [ 3573.004922][ T6843] binder: send failed reply for transaction 25, target dead [ 3573.552657][ T8715] hsr_slave_0: left promiscuous mode [ 3573.673857][ T8715] hsr_slave_1: left promiscuous mode [ 3574.024619][ T8715] veth1_macvtap: left promiscuous mode [ 3574.032372][ T8715] veth0_macvtap: left promiscuous mode [ 3574.037138][ T8715] veth1_vlan: left promiscuous mode [ 3574.040788][ T8715] veth0_vlan: left promiscuous mode [ 3576.685520][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3576.728682][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3591.726545][ T8938] xt_hashlimit: size too large, truncated to 1048576 [ 3605.528157][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3605.595951][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3619.978959][ T8894] hsr_slave_0: entered promiscuous mode [ 3620.065873][ T8894] hsr_slave_1: entered promiscuous mode [ 3620.136859][ T8894] debugfs: 'hsr0' already exists in 'hsr' [ 3620.151789][ T8894] Cannot create hsr debugfs directory [ 3624.055867][ T30] audit: type=1400 audit(3623.350:435): avc: denied { mounton } for pid=9004 comm="syz.6.1748" path="/261/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 3629.304083][ T8894] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3629.487054][ T8894] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3629.678323][ T8894] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3629.906473][ T8894] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3641.304869][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3664.815645][ T9057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9057 comm=syz.6.1753 [ 3728.548116][ T9114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9114 comm=syz.6.1757 [ 3758.788484][ T8894] veth0_vlan: entered promiscuous mode [ 3758.909447][ T8894] veth1_vlan: entered promiscuous mode [ 3759.843062][ T8894] veth0_macvtap: entered promiscuous mode [ 3760.386914][ T8894] veth1_macvtap: entered promiscuous mode [ 3762.006584][ T8684] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3762.007384][ T8684] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3762.008078][ T8684] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3762.008351][ T8684] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3792.402655][ T30] audit: type=1400 audit(3791.600:436): avc: denied { read } for pid=9184 comm="syz.7.1771" path="socket:[22507]" dev="sockfs" ino=22507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 3814.965831][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3815.029376][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3834.161297][ T30] audit: type=1400 audit(3833.460:437): avc: denied { mounton } for pid=9220 comm="syz.7.1780" path="/12/file0" dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 3843.016854][ T9232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3843.047852][ T9232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3846.967852][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3847.014875][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3848.455049][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3848.509139][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3850.213111][ T30] audit: type=1400 audit(3849.530:438): avc: denied { bind } for pid=9241 comm="syz.6.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3868.137970][ T9262] SELinux: failed to load policy [ 3885.343834][ T30] audit: type=1400 audit(3884.676:439): avc: denied { map } for pid=9271 comm="syz.6.1798" path="socket:[23381]" dev="sockfs" ino=23381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 3885.855251][ T9274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9274 comm=syz.7.1799 [ 3887.273729][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3887.278559][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3902.637539][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3902.695554][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3906.153682][ T9316] batadv_slave_0: entered promiscuous mode [ 3906.266634][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1817'. [ 3906.825078][ T9315] batadv_slave_0: left promiscuous mode [ 3908.437546][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1818'. [ 3908.605965][ T9320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3908.634658][ T9320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3930.096143][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3930.163201][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3932.844644][ T8989] hid_parser_main: 7 callbacks suppressed [ 3932.869888][ T8989] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 3932.911368][ T8989] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3934.499667][ T9368] binder: 9366:9368 ioctl c0306201 0 returned -14 [ 3934.653697][ T9368] binder_alloc: binder_alloc_mmap_handler: 9366 20ffe000-21000000 already mapped failed -16 [ 3940.024261][ T9370] fido_id[9370]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3972.017559][ T30] audit: type=1400 audit(3971.389:440): avc: denied { create } for pid=9402 comm="syz.7.1847" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 3985.717065][ T30] audit: type=1326 audit(3985.096:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.728355][ T30] audit: type=1326 audit(3985.106:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.736034][ T30] audit: type=1326 audit(3985.116:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.753533][ T30] audit: type=1326 audit(3985.136:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.756013][ T30] audit: type=1326 audit(3985.136:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.758522][ T30] audit: type=1400 audit(3985.136:446): avc: denied { write } for pid=9429 comm="syz.7.1860" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 3985.834587][ T30] audit: type=1326 audit(3985.146:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.874734][ T30] audit: type=1326 audit(3985.246:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.879186][ T30] audit: type=1326 audit(3985.256:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3985.907843][ T9434] ptrace attach of "/syz-executor exec"[9435] was attempted by "/syz-executor exec"[9434] [ 3985.945954][ T30] audit: type=1326 audit(3985.326:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.7.1860" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 3987.686438][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3987.706746][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3999.477945][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 3999.603454][ T30] audit: type=1400 audit(3998.593:467): avc: denied { create } for pid=9445 comm="syz.7.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 4003.167995][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4003.304288][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4014.539496][ T30] audit: type=1326 audit(4013.921:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.540595][ T30] audit: type=1326 audit(4013.921:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.541519][ T30] audit: type=1326 audit(4013.931:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.622901][ T30] audit: type=1326 audit(4014.001:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.702793][ T30] audit: type=1326 audit(4014.071:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.733084][ T30] audit: type=1326 audit(4014.121:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.800187][ T30] audit: type=1326 audit(4014.171:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.848417][ T30] audit: type=1326 audit(4014.091:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.862976][ T30] audit: type=1326 audit(4014.251:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4014.864332][ T30] audit: type=1326 audit(4014.251:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.7.1871" exe="/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4031.733291][ T9486] xt_hashlimit: size too large, truncated to 1048576 [ 4051.855985][ T9506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4051.882569][ T9506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4053.511363][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4053.589083][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4055.610450][ T9516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4055.659294][ T9516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4059.737903][ T9528] netlink: 'syz.7.1895': attribute type 1 has an invalid length. [ 4059.744002][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1895'. [ 4060.770041][ T8714] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4061.445660][ T8714] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4062.115693][ T8714] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4063.436081][ T8714] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4067.497722][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4067.515601][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4073.051644][ T8714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 4073.172046][ T8714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 4073.295632][ T8714] bond0 (unregistering): Released all slaves [ 4074.184657][ T8714] hsr_slave_0: left promiscuous mode [ 4074.272386][ T8714] hsr_slave_1: left promiscuous mode [ 4074.563160][ T8714] veth1_macvtap: left promiscuous mode [ 4074.564100][ T8714] veth0_macvtap: left promiscuous mode [ 4074.597978][ T8714] veth1_vlan: left promiscuous mode [ 4074.599159][ T8714] veth0_vlan: left promiscuous mode [ 4113.052166][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4113.125704][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4122.416525][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 4122.428954][ T30] audit: type=1400 audit(4121.865:500): avc: denied { setopt } for pid=9613 comm="syz.7.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 4125.165872][ T9532] hsr_slave_0: entered promiscuous mode [ 4125.208469][ T9532] hsr_slave_1: entered promiscuous mode [ 4130.914545][ T9532] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 4130.975899][ T9532] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 4131.091249][ T9532] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 4131.165463][ T9532] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 4131.512700][ T30] audit: type=1400 audit(4130.969:501): avc: denied { watch watch_reads } for pid=9627 comm="syz.7.1913" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 4132.778210][ T9639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4132.801952][ T9639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4139.092715][ T9654] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1918'. [ 4143.737168][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 4158.341539][ T9686] binder: 9685:9686 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 4158.382836][ T9686] binder: 9685:9686 ioctl c0306201 20000040 returned -22 [ 4160.119467][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4160.144949][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4188.597341][ T9532] veth0_vlan: entered promiscuous mode [ 4189.036947][ T9532] veth1_vlan: entered promiscuous mode [ 4189.841920][ T9532] veth0_macvtap: entered promiscuous mode [ 4190.074456][ T9532] veth1_macvtap: entered promiscuous mode [ 4191.169839][ T8707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 4191.170528][ T8707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 4191.175512][ T8707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 4191.251817][ T8707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 4229.654364][ T9821] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1948'. [ 4234.889902][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1954'. [ 4236.817698][ T9836] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1954'. [ 4236.818845][ T9836] nbd: device at index 64 is going down [ 4239.998784][ T9839] syzkaller0: entered promiscuous mode [ 4240.028035][ T9839] syzkaller0: entered allmulticast mode [ 4244.117985][ T9846] udevd[9846]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 4244.203120][ T9848] binder: 9847:9848 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 4245.578512][ T9845] udevd[9845]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 4249.401414][ T30] audit: type=1400 audit(4248.908:502): avc: denied { read } for pid=9859 comm="syz.8.1962" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 4249.405864][ T30] audit: type=1400 audit(4248.908:503): avc: denied { open } for pid=9859 comm="syz.8.1962" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 4249.529475][ T30] audit: type=1400 audit(4248.998:504): avc: denied { write } for pid=9859 comm="syz.8.1962" name="card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 4249.642239][ T30] audit: type=1400 audit(4249.158:505): avc: denied { ioctl } for pid=9859 comm="syz.8.1962" path="/dev/dri/card1" dev="devtmpfs" ino=619 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 4258.479318][ T9879] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.1970'. [ 4281.099924][ T9926] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 4283.447668][ T9943] syzkaller0: entered promiscuous mode [ 4283.449699][ T9943] syzkaller0: entered allmulticast mode [ 4284.819638][ T9946] syzkaller0: entered promiscuous mode [ 4284.843219][ T9946] syzkaller0: entered allmulticast mode [ 4293.063970][ T9969] xt_hashlimit: size too large, truncated to 1048576 [ 4303.490050][ T9992] xt_hashlimit: size too large, truncated to 1048576 [ 4307.847328][T10000] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1998'. [ 4307.853983][T10000] block nbd0: not configured, cannot reconfigure [ 4308.945413][T10002] syzkaller0: entered promiscuous mode [ 4308.946728][T10002] syzkaller0: entered allmulticast mode [ 4321.281362][T10036] syzkaller0: entered promiscuous mode [ 4321.327502][T10036] syzkaller0: entered allmulticast mode [ 4338.421615][ T30] audit: type=1400 audit(4337.973:506): avc: denied { accept } for pid=10076 comm="syz.8.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 4340.277300][T10078] netlink: 'syz.8.2014': attribute type 10 has an invalid length. [ 4349.443768][T10084] bond0: (slave bond_slave_0): Releasing backup interface [ 4349.966555][T10084] bond0: (slave bond_slave_1): Releasing backup interface [ 4351.375224][T10084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 4379.277726][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4379.339239][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4379.907080][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4379.978203][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4381.400537][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2042'. [ 4384.075228][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2045'. [ 4384.765240][T10175] netlink: 268 bytes leftover after parsing attributes in process `syz.7.2046'. [ 4384.767304][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2046'. [ 4385.589202][ T30] audit: type=1400 audit(4385.166:507): avc: denied { map } for pid=10177 comm="syz.8.2047" path="socket:[26239]" dev="sockfs" ino=26239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 4389.286530][ T30] audit: type=1400 audit(4388.868:508): avc: denied { name_bind } for pid=10185 comm="syz.8.2051" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 4394.779895][T10199] IPv6: Can't replace route, no match found [ 4397.958270][T10207] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2060'. [ 4408.552568][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4408.620545][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4410.965398][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2067'. [ 4418.187209][T10099] udevd[10099]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 4419.142219][T10108] udevd[10108]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 4424.868791][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2075'. [ 4426.163673][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2076'. [ 4429.141138][ T30] audit: type=1400 audit(4428.748:509): avc: denied { accept } for pid=10249 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 4477.025140][ T30] audit: type=1400 audit(4476.632:510): avc: denied { map } for pid=10295 comm="syz.8.2095" path="/dev/dri/card1" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 4490.363366][ T30] audit: type=1400 audit(4489.999:511): avc: denied { execute } for pid=10312 comm="syz.8.2101" path="/88/cpu.stat" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 4503.502970][ T30] audit: type=1400 audit(4503.135:512): avc: denied { open } for pid=10327 comm="syz.7.2104" path="/dev/ptyr3" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 4503.892221][ T30] audit: type=1400 audit(4503.525:513): avc: denied { ioctl } for pid=10327 comm="syz.7.2104" path="/dev/ttyr3" dev="devtmpfs" ino=387 ioctlcmd=0x5428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 4509.024265][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2106'. [ 4512.629461][T10339] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2108'. [ 4514.389942][T10343] binder: 10340:10343 tried to acquire reference to desc 0, got 1 instead [ 4515.024520][T10346] binder: 10340:10346 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 4515.032750][T10346] binder: 10346 RLIMIT_NICE not set [ 4515.038378][T10346] binder: 10346 RLIMIT_NICE not set [ 4515.069100][T10346] binder: 10346 RLIMIT_NICE not set [ 4515.094742][T10346] binder_alloc: 10340: binder_alloc_buf, no vma [ 4515.116255][T10346] binder: cannot allocate buffer: vma cleared, target dead or dying [ 4515.124560][T10346] binder: 10340:10346 transaction reply to 10340:10343 failed 35/29189/-3, code 0 size 0-0 line 3393 [ 4515.163237][T10346] binder: send failed reply for transaction 34 to 10340:10343 [ 4515.596716][ T9] binder: undelivered TRANSACTION_ERROR: 29190 [ 4516.816014][T10348] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 4541.929402][ T30] audit: type=1400 audit(4541.524:514): avc: denied { setopt } for pid=10375 comm="syz.7.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 4550.554639][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2130'. [ 4552.810950][T10390] binder: 10389:10390 tried to acquire reference to desc 0, got 1 instead [ 4552.939616][T10390] binder: cannot allocate buffer: no space left [ 4552.941626][T10390] binder: 10389:10390 transaction async to 10389:0 failed 40/29201/-28, code 0 size 96-24 line 3393 [ 4553.063765][T10390] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 4553.134083][ T9103] binder: undelivered TRANSACTION_ERROR: 29201 [ 4590.793533][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4590.905958][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4599.103979][T10435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4599.121641][T10435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4603.902228][ T8731] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4603.904788][ T8731] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4603.929342][ T8731] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4603.934722][ T8731] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 4606.031998][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4606.034994][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4614.411678][T10468] pimreg: entered allmulticast mode [ 4614.456630][ T30] audit: type=1400 audit(4614.141:515): avc: denied { ioctl } for pid=10466 comm="syz.7.2161" path="socket:[27806]" dev="sockfs" ino=27806 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 4614.474040][T10468] pimreg: left allmulticast mode [ 4614.551582][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4614.587859][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4614.928827][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4615.019153][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4620.599231][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2166'. [ 4634.520559][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4634.580843][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4634.929176][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4634.949242][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4641.203253][ T30] audit: type=1326 audit(4640.894:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4641.733048][ T30] audit: type=1326 audit(4641.434:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4641.862316][ T30] audit: type=1326 audit(4641.474:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4641.865238][ T30] audit: type=1326 audit(4641.574:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa177af98 code=0x7ffc0000 [ 4641.883286][ T30] audit: type=1326 audit(4641.584:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa175bf6c code=0x7ffc0000 [ 4642.779746][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4642.879524][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4644.882083][ T30] audit: type=1326 audit(4644.586:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffffa175bf6c code=0x7ffc0000 [ 4645.115547][ T30] audit: type=1326 audit(4644.586:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffa1778ca0 code=0x7ffc0000 [ 4645.198989][ T30] audit: type=1326 audit(4644.906:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa1778d4c code=0x7ffc0000 [ 4645.377379][ T30] audit: type=1326 audit(4645.076:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffffa1778d4c code=0x7ffc0000 [ 4645.658366][ T30] audit: type=1326 audit(4645.366:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffffa1778d0c code=0x7ffc0000 [ 4646.651550][ T30] audit: type=1326 audit(4646.337:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffa175bf6c code=0x7ffc0000 [ 4647.090577][ T30] audit: type=1326 audit(4646.797:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4647.137399][ T30] audit: type=1326 audit(4646.847:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10509 comm="syz.7.2178" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.036936][ T30] audit: type=1326 audit(4675.711:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.113620][ T30] audit: type=1326 audit(4675.831:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.187049][ T30] audit: type=1326 audit(4675.901:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.188424][ T30] audit: type=1326 audit(4675.901:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.246699][ T30] audit: type=1326 audit(4675.941:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.268761][ T30] audit: type=1326 audit(4675.961:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1778fa8 code=0x7ffc0000 [ 4676.270097][ T30] audit: type=1326 audit(4675.981:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa177af98 code=0x7ffc0000 [ 4676.329062][ T30] audit: type=1326 audit(4676.021:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.7.2185" exe="/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa175bf6c code=0x7ffc0000 [ 4695.179843][T10546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4695.280165][T10546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4734.827798][T10624] netlink: 'syz.7.2220': attribute type 21 has an invalid length. [ 4734.828342][T10624] netlink: 'syz.7.2220': attribute type 1 has an invalid length. [ 4734.841933][T10624] netlink: 16090 bytes leftover after parsing attributes in process `syz.7.2220'. [ 4757.932491][ T30] audit: type=1400 audit(4757.692:537): avc: denied { create } for pid=10684 comm="syz.8.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 4765.188182][T10709] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2254'. [ 4770.300765][T10721] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2257'. [ 4770.303780][T10718] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2257'. [ 4770.393097][T10718] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2257'. [ 4797.650884][ T30] audit: type=1400 audit(4797.432:538): avc: denied { setattr } for pid=8894 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 4849.535272][ T8731] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4851.135422][ T8731] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4852.114958][ T8731] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4853.278770][ T8731] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 4856.505547][ T30] audit: type=1400 audit(4856.312:539): avc: denied { shutdown } for pid=10802 comm="syz.8.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 4860.200872][ T30] audit: type=1400 audit(4860.013:540): avc: denied { ioctl } for pid=10813 comm="syz.8.2286" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 4865.077778][ T8731] bond0 (unregistering): Released all slaves [ 4868.431978][ T8731] hsr_slave_0: left promiscuous mode [ 4868.641166][ T8731] hsr_slave_1: left promiscuous mode [ 4869.401404][ T8731] veth1_macvtap: left promiscuous mode [ 4869.442827][ T8731] veth0_macvtap: left promiscuous mode [ 4875.916665][ T30] audit: type=1400 audit(4875.731:541): avc: denied { mount } for pid=10822 comm="syz.8.2288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 4875.994111][ T30] audit: type=1400 audit(4875.811:542): avc: denied { search } for pid=10822 comm="syz.8.2288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 4876.042840][ T30] audit: type=1400 audit(4875.861:543): avc: denied { search } for pid=10822 comm="syz.8.2288" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 4876.441770][ T30] audit: type=1400 audit(4876.232:544): avc: denied { unmount } for pid=9532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 4880.878254][T10829] binder: 10828:10829 ioctl c0306201 0 returned -14 [ 4880.898845][T10829] binder: 10828:10829 ioctl c0306201 0 returned -14 [ 4880.915094][T10829] binder: 10828:10829 got reply transaction with no transaction stack [ 4880.918226][T10829] binder: 10828:10829 transaction reply to 0:0 failed 41/29201/-71, code 0 size 0-0 line 3139 [ 4880.921204][T10829] binder: 10828:10829 ioctl c0306201 20000380 returned -14 [ 4911.801938][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4911.866052][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4915.672990][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4915.718355][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4917.109632][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2300'. [ 4917.110119][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2300'. [ 4917.110711][T10870] netlink: 'syz.8.2300': attribute type 14 has an invalid length. [ 4933.553679][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 4933.712660][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 4940.290017][T10897] lo speed is unknown, defaulting to 1000 [ 4940.324993][T10897] lo speed is unknown, defaulting to 1000 [ 4940.416622][T10897] lo speed is unknown, defaulting to 1000 [ 4940.551803][T10897] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 4940.670151][T10897] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 4942.788422][T10897] lo speed is unknown, defaulting to 1000 [ 4942.812638][T10897] lo speed is unknown, defaulting to 1000 [ 4954.940677][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2307'. [ 4957.760948][T10924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4957.819892][T10924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4962.944210][T10793] hsr_slave_0: entered promiscuous mode [ 4963.005061][T10793] hsr_slave_1: entered promiscuous mode [ 4963.050105][T10793] debugfs: 'hsr0' already exists in 'hsr' [ 4963.072182][T10793] Cannot create hsr debugfs directory [ 4974.764526][T10793] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 4975.023414][T10793] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 4975.269430][T10793] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 4975.481225][T10793] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 4979.349601][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 4979.387954][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 4998.311361][T10793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5020.836990][ T30] audit: type=1400 audit(5020.694:545): avc: denied { ioctl } for pid=11019 comm="syz.8.2327" path="/dev/usbmon0" dev="devtmpfs" ino=697 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 5059.406305][T10793] veth0_vlan: entered promiscuous mode [ 5059.885993][T10793] veth1_vlan: entered promiscuous mode [ 5061.455964][T10793] veth0_macvtap: entered promiscuous mode [ 5061.818734][T10793] veth1_macvtap: entered promiscuous mode [ 5064.082375][ T8720] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.119021][ T9198] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.205987][ T9198] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5064.209046][ T9198] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5076.862286][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5076.991322][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5098.445759][T11139] fuse: Bad value for 'fd' [ 5122.695793][T11160] fuse: Bad value for 'fd' [ 5124.795571][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5124.819769][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5127.749814][ T30] audit: type=1400 audit(5127.697:546): avc: denied { bind } for pid=11170 comm="syz.8.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 5132.632267][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5132.803565][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5150.036531][T10820] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5151.475414][T10820] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5152.835781][T10820] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5153.142548][T11165] lo speed is unknown, defaulting to 1000 [ 5153.978939][T10820] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5175.130650][T10820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5175.274084][T10820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5175.357907][T10820] bond0 (unregistering): Released all slaves [ 5176.507355][T10820] hsr_slave_0: left promiscuous mode [ 5176.536329][T10820] hsr_slave_1: left promiscuous mode [ 5177.069501][T10820] veth1_macvtap: left promiscuous mode [ 5177.085859][T10820] veth0_macvtap: left promiscuous mode [ 5177.091864][T10820] veth1_vlan: left promiscuous mode [ 5177.102852][T10820] veth0_vlan: left promiscuous mode [ 5216.049880][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5216.222864][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5229.896595][T11165] hsr_slave_0: entered promiscuous mode [ 5229.945590][T11165] hsr_slave_1: entered promiscuous mode [ 5230.000670][T11165] debugfs: 'hsr0' already exists in 'hsr' [ 5230.001942][T11165] Cannot create hsr debugfs directory [ 5242.109745][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5242.146695][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5245.849240][T11165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 5246.218894][T11165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 5246.587828][T11165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 5247.028516][T11165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 5264.213401][T11303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5264.284313][T11303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5264.595676][T11303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5264.726677][T11303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5266.672871][ T30] audit: type=1400 audit(5266.687:547): avc: denied { mounton } for pid=11305 comm="syz.8.2380" path="cgroup:[4026532697]" dev="nsfs" ino=4026532697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 5275.154553][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5317.216190][ T30] audit: type=1400 audit(5317.252:548): avc: denied { mount } for pid=11378 comm="syz.8.2395" name="/" dev="autofs" ino=30854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 5317.338662][ T30] audit: type=1400 audit(5317.382:549): avc: denied { read append } for pid=11378 comm="syz.8.2395" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 5317.349570][ T30] audit: type=1400 audit(5317.392:550): avc: denied { open } for pid=11378 comm="syz.8.2395" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 5317.363332][ T30] audit: type=1400 audit(5317.402:551): avc: denied { ioctl } for pid=11378 comm="syz.8.2395" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 5317.719239][ T30] audit: type=1400 audit(5317.752:552): avc: denied { unmount } for pid=9532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 5342.140077][T11165] veth0_vlan: entered promiscuous mode [ 5342.645671][T11165] veth1_vlan: entered promiscuous mode [ 5344.154193][T11165] veth0_macvtap: entered promiscuous mode [ 5344.485130][T11165] veth1_macvtap: entered promiscuous mode [ 5347.046218][ T8707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5347.086096][ T8707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5347.157822][ T8707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5347.191356][ T8714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5351.420474][T11429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5351.426433][T11429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5355.388484][ T9103] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 5355.610824][ T9103] usb 1-1: Using ep0 maxpacket: 32 [ 5356.127369][ T9103] usb 1-1: unable to get BOS descriptor or descriptor too short [ 5356.252004][ T9103] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 5356.266122][ T9103] usb 1-1: config 1 has no interface number 1 [ 5356.268250][ T9103] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 5356.465655][ T9103] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 5356.475916][ T9103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 5356.478482][ T9103] usb 1-1: Product: syz [ 5356.479972][ T9103] usb 1-1: Manufacturer: syz [ 5356.481420][ T9103] usb 1-1: SerialNumber: syz [ 5357.930116][ T9103] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 5359.308553][ T9103] usb 1-1: USB disconnect, device number 13 [ 5360.617521][ T30] audit: type=1400 audit(5360.684:553): avc: denied { create } for pid=11443 comm="syz.0.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 5366.526598][T11442] udevd[11442]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 5372.708863][T10916] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 5373.233130][T10916] usb 1-1: device descriptor read/64, error -71 [ 5373.657545][T10916] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 5373.929226][T10916] usb 1-1: device descriptor read/64, error -71 [ 5374.044722][T10916] usb usb1-port1: attempt power cycle [ 5374.664330][T10916] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 5374.853134][T10916] usb 1-1: device descriptor read/8, error -71 [ 5375.287892][T10916] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 5375.616673][T10916] usb 1-1: device descriptor read/8, error -71 [ 5375.732626][T10916] usb usb1-port1: unable to enumerate USB device [ 5383.696569][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5383.708845][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5414.493683][T11533] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2431'. [ 5418.157475][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5418.208795][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5430.245717][ T8731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5430.263080][T11560] binder: 11557:11560 ioctl c0306201 20000080 returned -14 [ 5431.418158][ T8731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5432.211560][ T8731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5433.423551][ T8731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 5434.624780][T11534] lo speed is unknown, defaulting to 1000 [ 5443.735784][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5443.739513][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5447.281221][ T8731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 5447.635494][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 5447.894066][ T8731] bond0 (unregistering): Released all slaves [ 5449.974632][ T8731] hsr_slave_0: left promiscuous mode [ 5450.139777][ T8731] hsr_slave_1: left promiscuous mode [ 5451.131715][ T8731] veth1_macvtap: left promiscuous mode [ 5451.132959][ T8731] veth0_macvtap: left promiscuous mode [ 5451.136228][ T8731] veth1_vlan: left promiscuous mode [ 5451.163597][ T8731] veth0_vlan: left promiscuous mode [ 5451.850683][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5451.983425][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5463.274681][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2450'. [ 5466.243800][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5466.373962][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5468.153282][T11626] nbd8: detected capacity change from 0 to 63 [ 5468.233440][T11626] block nbd8: NBD_DISCONNECT [ 5468.331961][T11626] block nbd8: Disconnected due to user request. [ 5468.333698][T11626] block nbd8: shutting down sockets [ 5468.347777][T11619] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.348034][T11619] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5468.367334][T11619] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.368189][T11619] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5468.421718][T11619] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.452956][T11619] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5468.454233][T11619] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.454363][T11619] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5468.456010][T11619] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.456218][T11619] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5468.456822][T11619] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.456991][T11619] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5468.457525][T11619] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.457690][T11619] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5468.467147][ T153] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.467690][ T153] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5468.500931][T11619] nbd8: unable to read partition table [ 5468.736131][T11619] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.736995][T11619] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5468.822187][T11619] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5468.833679][T11619] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5468.848365][T11619] nbd8: unable to read partition table [ 5483.417958][T11661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5483.458738][T11661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5493.845293][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 5494.490817][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 5514.112977][T11694] syzkaller0: entered promiscuous mode [ 5514.113682][T11694] syzkaller0: entered allmulticast mode [ 5528.671698][T11701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5528.676158][T11701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5546.315941][T11534] hsr_slave_0: entered promiscuous mode [ 5546.345819][T11534] hsr_slave_1: entered promiscuous mode [ 5546.415004][T11534] debugfs: 'hsr0' already exists in 'hsr' [ 5546.415728][T11534] Cannot create hsr debugfs directory [ 5547.270877][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5547.277756][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5550.671431][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2471'. [ 5553.602810][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5553.630931][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5553.691587][ T30] audit: type=1400 audit(5553.840:554): avc: denied { map } for pid=11728 comm="syz.8.2472" path="socket:[31403]" dev="sockfs" ino=31403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 5554.218414][ T30] audit: type=1400 audit(5554.370:555): avc: denied { recv } for pid=3325 comm="syz-executor" saddr=127.0.0.1 src=56474 daddr=127.0.0.1 dest=30002 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 5572.421126][T11534] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 5573.068374][T11534] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 5573.314299][T11534] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 5574.007030][T11534] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 5590.749486][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5613.035652][T11800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5613.104993][T11800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5617.890675][T11813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5617.948225][T11813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5625.892427][T11834] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2486'. [ 5634.885069][T11534] veth0_vlan: entered promiscuous mode [ 5635.545499][T11534] veth1_vlan: entered promiscuous mode [ 5637.699545][T11534] veth0_macvtap: entered promiscuous mode [ 5638.277075][T11534] veth1_macvtap: entered promiscuous mode [ 5640.159360][ T8726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 5640.160207][ T8726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 5640.160798][ T8726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 5640.160964][ T8726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 5645.687145][ T30] audit: type=1400 audit(5645.866:556): avc: denied { create } for pid=11858 comm="syz.8.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 5649.672944][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2494'. [ 5653.000470][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'. [ 5661.867727][ T30] audit: type=1400 audit(5662.074:557): avc: denied { getopt } for pid=11888 comm="syz.2.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 5664.436984][T11897] netlink: 'syz.8.2504': attribute type 10 has an invalid length. [ 5685.412857][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2511'. [ 5688.785897][T11927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5688.824664][T11927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5690.783488][ T30] audit: type=1400 audit(5691.019:558): avc: denied { lock } for pid=11929 comm="syz.2.2515" path="socket:[32830]" dev="sockfs" ino=32830 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 5695.201666][ T30] audit: type=1400 audit(5695.431:559): avc: denied { getopt } for pid=11940 comm="syz.8.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 5722.559040][T12006] nbd8: detected capacity change from 0 to 63 [ 5722.827221][T11627] block nbd8: Receive control failed (result -32) [ 5722.857984][T11943] block nbd8: Dead connection, failed to find a fallback [ 5722.859716][T11943] block nbd8: shutting down sockets [ 5722.860057][T11943] blk_print_req_error: 26 callbacks suppressed [ 5722.860190][T11943] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5722.860405][T11943] buffer_io_error: 26 callbacks suppressed [ 5722.860518][T11943] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5723.016189][T11943] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.017086][T11943] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5723.018091][T11943] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.018394][T11943] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5723.018981][T11943] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.019234][T11943] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5723.020115][T11943] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.020389][T11943] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5723.267661][T11943] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.268590][T11943] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5723.374366][T11943] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.404684][T11943] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5723.406773][T11943] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5723.406965][T11943] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5723.407207][T11943] nbd8: unable to read partition table [ 5724.047188][T11943] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5724.048215][T11943] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5724.049017][T11943] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5724.049193][T11943] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5724.167185][T11943] nbd8: unable to read partition table [ 5725.532704][T12011] netlink: 596 bytes leftover after parsing attributes in process `syz.8.2540'. [ 5725.574330][ T30] audit: type=1400 audit(5725.816:560): avc: denied { read } for pid=12009 comm="syz.8.2540" path="socket:[32928]" dev="sockfs" ino=32928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 5729.961052][T12021] nbd2: detected capacity change from 0 to 63 [ 5730.064591][T11627] block nbd2: Receive control failed (result -32) [ 5731.074175][T11943] block nbd2: Dead connection, failed to find a fallback [ 5731.075663][T11943] block nbd2: shutting down sockets [ 5731.075954][T11943] blk_print_req_error: 26 callbacks suppressed [ 5731.076089][T11943] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.076291][T11943] buffer_io_error: 26 callbacks suppressed [ 5731.076385][T11943] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5731.294591][T11943] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.306431][T11943] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5731.333769][T11943] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.342171][T11943] Buffer I/O error on dev nbd2, logical block 2, async page read [ 5731.350067][T11943] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.356144][T11943] Buffer I/O error on dev nbd2, logical block 3, async page read [ 5731.360543][T11943] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.362834][T11943] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5731.365610][T11943] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.368777][T11943] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5731.371927][T11943] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.549204][T11943] Buffer I/O error on dev nbd2, logical block 2, async page read [ 5731.551585][T11943] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5731.552009][T11943] Buffer I/O error on dev nbd2, logical block 3, async page read [ 5731.552384][T11943] nbd2: unable to read partition table [ 5732.103927][T11943] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5732.105050][T11943] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5732.221915][T11943] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5732.241623][T11943] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5732.431972][T11943] nbd2: unable to read partition table [ 5736.780556][T12038] nbd: nbd8 already in use [ 5738.680953][T12041] fuse: Unknown parameter 'group_i00000000000000000000' [ 5740.971578][T12046] netlink: 'syz.8.2552': attribute type 39 has an invalid length. [ 5742.767576][T12050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5742.796885][T12050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5745.525627][T12057] fuse: Unknown parameter 'group_i00000000000000000000' [ 5747.980995][T12060] lo speed is unknown, defaulting to 1000 [ 5756.989032][T12076] nbd: nbd2 already in use [ 5774.502219][T12101] nbd: nbd2 already in use [ 5774.570197][T12101] block nbd2: NBD_DISCONNECT [ 5774.571387][T12101] block nbd2: Send disconnect failed -32 [ 5777.616798][T12109] netlink: 4280 bytes leftover after parsing attributes in process `syz.8.2573'. [ 5779.149705][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5779.229614][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5782.527527][T12121] nbd2: detected capacity change from 0 to 63 [ 5782.577057][T12121] block nbd2: NBD_DISCONNECT [ 5782.617031][T12121] block nbd2: Disconnected due to user request. [ 5782.630895][T12121] block nbd2: shutting down sockets [ 5785.386862][T12127] netlink: 'syz.8.2579': attribute type 4 has an invalid length. [ 5787.368105][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 5787.415094][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 5789.767150][T12135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2581'. [ 5790.310051][T12134] nbd: nbd8 already in use [ 5790.321133][T12134] block nbd8: NBD_DISCONNECT [ 5790.328894][T12134] block nbd8: Send disconnect failed -32 [ 5793.181068][T12142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12142 comm=syz.8.2585 [ 5795.209392][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2587'. [ 5798.346961][T12152] nbd: nbd8 already in use [ 5798.378921][T12152] block nbd8: NBD_DISCONNECT [ 5803.543073][ T30] audit: type=1400 audit(5803.765:561): avc: denied { create } for pid=12161 comm="syz.2.2592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 5805.662559][T12166] nbd8: detected capacity change from 0 to 63 [ 5805.748205][T12166] block nbd8: NBD_DISCONNECT [ 5805.757735][T12166] block nbd8: Disconnected due to user request. [ 5805.764663][T12166] block nbd8: shutting down sockets [ 5805.870297][T12105] blk_print_req_error: 26 callbacks suppressed [ 5805.873896][T12105] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5805.875288][T12105] buffer_io_error: 26 callbacks suppressed [ 5805.878823][T12105] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5805.916300][ T153] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 5805.917165][ T153] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5805.917876][ T153] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5805.918073][ T153] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5805.925516][T12105] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5805.927753][T12105] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5805.943601][T12105] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5805.949378][T12105] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5805.969199][T12105] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5805.992695][T12105] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5805.994279][T12105] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5805.995196][T12105] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5805.995568][T12105] nbd8: unable to read partition table [ 5806.597859][T12105] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5806.724076][T12105] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5806.725350][T12105] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5806.725629][T12105] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5806.726241][T12105] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5806.726875][T12105] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5806.806521][T12105] nbd8: unable to read partition table [ 5807.906024][ T30] audit: type=1400 audit(5808.177:562): avc: denied { create } for pid=12171 comm="syz.8.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 5808.014660][ T30] audit: type=1400 audit(5808.307:563): avc: denied { bind } for pid=12171 comm="syz.8.2596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 5812.680153][T12183] nbd2: detected capacity change from 0 to 63 [ 5812.744668][T12183] block nbd2: NBD_DISCONNECT [ 5812.761538][T12183] block nbd2: Disconnected due to user request. [ 5812.765660][T12183] block nbd2: shutting down sockets [ 5814.754117][T12188] fuse: Bad value for 'fd' [ 5817.560586][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2601'. [ 5818.358709][T12186] batadv_slave_1: entered allmulticast mode [ 5818.806761][ T30] audit: type=1400 audit(5819.083:564): avc: denied { create } for pid=12184 comm="syz.8.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 5818.934721][ T30] audit: type=1400 audit(5819.203:565): avc: denied { write } for pid=12184 comm="syz.8.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 5818.960649][T12186] siw: device registration error -23 [ 5820.297248][T12184] batadv_slave_1: left allmulticast mode [ 5824.983130][T12203] nbd2: detected capacity change from 0 to 63 [ 5825.014061][T12203] block nbd2: NBD_DISCONNECT [ 5825.032388][T12203] block nbd2: Disconnected due to user request. [ 5825.038157][T12203] block nbd2: shutting down sockets [ 5833.488676][T12226] nbd8: detected capacity change from 0 to 63 [ 5833.551171][T12226] block nbd8: NBD_DISCONNECT [ 5833.600665][T12226] block nbd8: Disconnected due to user request. [ 5833.601277][T12226] block nbd8: shutting down sockets [ 5833.739322][ C0] blk_print_req_error: 24 callbacks suppressed [ 5833.740288][ C0] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5833.740652][ C0] buffer_io_error: 26 callbacks suppressed [ 5833.740750][ C0] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5833.819035][ T153] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 5833.819829][ T153] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5833.820359][ T153] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5833.820632][ T153] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5833.870353][T12100] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5833.879199][T12100] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5833.882990][T12100] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5833.914296][T12100] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5833.944971][T12100] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.000998][T12100] Buffer I/O error on dev nbd8, logical block 2, async page read [ 5834.002871][T12100] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.003033][T12100] Buffer I/O error on dev nbd8, logical block 3, async page read [ 5834.003272][T12100] nbd8: unable to read partition table [ 5834.342509][T12100] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.482156][T12100] Buffer I/O error on dev nbd8, logical block 0, async page read [ 5834.484137][T12100] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.484499][T12100] Buffer I/O error on dev nbd8, logical block 1, async page read [ 5834.486471][T12100] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.487258][T12100] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5834.489755][T12100] nbd8: unable to read partition table [ 5843.549465][ T30] audit: type=1400 audit(5843.855:566): avc: denied { map } for pid=12250 comm="syz.2.2619" path="socket:[34118]" dev="sockfs" ino=34118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 5849.566195][T12273] fuse: Bad value for 'rootmode' [ 5857.832800][T12283] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5864.936367][T12305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 5866.666416][T12305] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 5866.676321][ T9624] lo speed is unknown, defaulting to 1000 [ 5866.677530][ T9624] syz0: Port: 1 Link ACTIVE [ 5868.007712][T12311] syzkaller1: entered promiscuous mode [ 5868.021508][T12311] syzkaller1: entered allmulticast mode [ 5875.181314][T12335] syzkaller0: entered promiscuous mode [ 5875.198188][T12335] syzkaller0: entered allmulticast mode [ 5875.252043][T12335] 0: reclassify loop, rule prio 0, protocol 700 [ 5883.178854][T12352] syzkaller1: entered promiscuous mode [ 5883.193661][T12352] syzkaller1: entered allmulticast mode [ 5887.452314][T12366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12366 comm=syz.2.2652 [ 5887.703237][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 5893.538958][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 5893.858915][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2656'. [ 5899.624495][ T30] audit: type=1400 audit(5899.953:567): avc: denied { write } for pid=12394 comm="syz.8.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 5907.726790][T12416] netlink: 'syz.2.2667': attribute type 1 has an invalid length. [ 5911.973425][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2669'. [ 5925.718795][ T30] audit: type=1400 audit(5926.066:568): avc: denied { connect } for pid=12456 comm="syz.8.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 5937.329908][T12484] nbd2: detected capacity change from 0 to 63 [ 5937.398962][T11627] block nbd2: Receive control failed (result -32) [ 5937.611652][T12330] block nbd2: Dead connection, failed to find a fallback [ 5937.765171][T12330] block nbd2: shutting down sockets [ 5937.766279][T12330] blk_print_req_error: 24 callbacks suppressed [ 5937.766541][T12330] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.766854][T12330] buffer_io_error: 26 callbacks suppressed [ 5937.767043][T12330] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5937.768480][T12330] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.768777][T12330] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5937.769503][T12330] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.771083][T12330] Buffer I/O error on dev nbd2, logical block 2, async page read [ 5937.771733][T12330] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.771909][T12330] Buffer I/O error on dev nbd2, logical block 3, async page read [ 5937.772945][T12330] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.773132][T12330] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5937.838025][T12330] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.838834][T12330] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5937.839728][T12330] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.840054][T12330] Buffer I/O error on dev nbd2, logical block 2, async page read [ 5937.840719][T12330] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5937.840900][T12330] Buffer I/O error on dev nbd2, logical block 3, async page read [ 5937.841148][T12330] nbd2: unable to read partition table [ 5938.228598][T12330] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5938.255802][T12330] Buffer I/O error on dev nbd2, logical block 0, async page read [ 5938.258343][T12330] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 5938.258745][T12330] Buffer I/O error on dev nbd2, logical block 1, async page read [ 5938.261062][T12330] nbd2: unable to read partition table [ 5940.052005][T12490] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 5941.019496][T12493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'. [ 5942.327422][T12488] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2689'. [ 5942.481041][T12490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 5942.849018][T12488] bond2: entered allmulticast mode [ 5943.628577][T12490] bond2: (slave dummy0): making interface the new active one [ 5943.637712][T12490] dummy0: entered allmulticast mode [ 5943.698044][T12490] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 5945.372538][T12503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12503 comm=syz.2.2693 [ 5946.337625][T12505] fuse: Unknown parameter 'user_i00000000000000000000' [ 5950.125330][T12518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12518 comm=syz.2.2699 [ 5951.265351][T12522] fuse: Unknown parameter 'user_id00000000000000000000' [ 5957.535887][T12524] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 5961.600613][T12542] fuse: Unknown parameter 'user_id00000000000000000000' [ 5965.243919][T12540] lo speed is unknown, defaulting to 1000 [ 5969.437334][T12559] fuse: Unknown parameter 'user_id00000000000000000000' [ 5979.347278][T12576] fuse: Bad value for 'fd' [ 5981.304837][T12582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12582 comm=syz.2.2719 [ 5984.678336][T12590] fuse: Bad value for 'fd' [ 5988.914483][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2725'. [ 5992.465952][T12603] fuse: Bad value for 'fd' [ 5998.021724][T12616] netlink: 'syz.2.2732': attribute type 1 has an invalid length. [ 5999.640219][T12620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2732'. [ 6000.351326][T12622] fuse: Unknown parameter '0x0000000000000003' [ 6001.686687][T12623] bond3: (slave erspan1): making interface the new active one [ 6001.730860][T12623] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 6006.456216][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2735'. [ 6006.457247][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2735'. [ 6009.361719][T12636] fuse: Unknown parameter '0x0000000000000003' [ 6015.368068][T12652] block nbd2: NBD_DISCONNECT [ 6015.373278][T12652] block nbd2: Send disconnect failed -32 [ 6021.710254][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6021.767879][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6024.628236][T12675] netlink: 'syz.2.2754': attribute type 29 has an invalid length. [ 6025.769394][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 6025.796425][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 6027.106678][T12681] syzkaller0: entered promiscuous mode [ 6027.107510][T12681] syzkaller0: entered allmulticast mode [ 6029.445101][T12685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2758'. [ 6034.260542][T12696] fuse: Unknown parameter 'fd0x0000000000000003' [ 6039.526969][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2769'. [ 6049.354887][T12727] nbd: must specify at least one socket [ 6055.708052][T12740] nbd: must specify at least one socket [ 6062.764982][ T8725] nci: nci_rx_work: unknown MT 0x7 [ 6066.034672][T12765] nbd: must specify a size in bytes for the device [ 6069.455075][T12771] syzkaller0: entered promiscuous mode [ 6069.469546][T12771] syzkaller0: entered allmulticast mode [ 6074.731374][T12780] nbd: must specify a size in bytes for the device [ 6082.010016][T12795] nbd: must specify a size in bytes for the device [ 6084.077366][T12803] netlink: 27 bytes leftover after parsing attributes in process `syz.8.2805'. [ 6089.608913][T12813] nbd0: detected capacity change from 0 to 63 [ 6089.695956][T11627] block nbd0: Receive control failed (result -104) [ 6096.641189][T12827] nbd1: detected capacity change from 0 to 63 [ 6096.719593][T11627] block nbd1: Receive control failed (result -32) [ 6097.312410][T12489] block nbd1: Dead connection, failed to find a fallback [ 6097.313429][T12489] block nbd1: shutting down sockets [ 6097.408403][T12489] blk_print_req_error: 26 callbacks suppressed [ 6097.425334][T12489] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.426371][T12489] buffer_io_error: 26 callbacks suppressed [ 6097.426931][T12489] Buffer I/O error on dev nbd1, logical block 0, async page read [ 6097.428226][T12489] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.428546][T12489] Buffer I/O error on dev nbd1, logical block 1, async page read [ 6097.429268][T12489] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.429572][T12489] Buffer I/O error on dev nbd1, logical block 2, async page read [ 6097.430947][T12489] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.431271][T12489] Buffer I/O error on dev nbd1, logical block 3, async page read [ 6097.432425][T12489] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.432740][T12489] Buffer I/O error on dev nbd1, logical block 0, async page read [ 6097.433448][T12489] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.498030][T12489] Buffer I/O error on dev nbd1, logical block 1, async page read [ 6097.499368][T12489] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.499573][T12489] Buffer I/O error on dev nbd1, logical block 2, async page read [ 6097.500173][T12489] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.500399][T12489] Buffer I/O error on dev nbd1, logical block 3, async page read [ 6097.500651][T12489] nbd1: unable to read partition table [ 6097.911240][T12489] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.945877][T12489] Buffer I/O error on dev nbd1, logical block 0, async page read [ 6097.951645][T12489] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6097.956168][T12489] Buffer I/O error on dev nbd1, logical block 1, async page read [ 6097.962152][T12489] nbd1: unable to read partition table [ 6102.586704][T12840] nbd2: detected capacity change from 0 to 63 [ 6102.619561][T12840] block nbd2: NBD_DISCONNECT [ 6102.665544][T12840] block nbd2: Disconnected due to user request. [ 6102.668064][T12840] block nbd2: shutting down sockets [ 6115.067990][T12856] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12856 comm=syz.8.2825 [ 6115.240452][T12856] netlink: 'syz.8.2825': attribute type 9 has an invalid length. [ 6115.257667][T12856] netlink: 'syz.8.2825': attribute type 6 has an invalid length. [ 6115.264497][T12856] netlink: 'syz.8.2825': attribute type 7 has an invalid length. [ 6115.272788][T12856] netlink: 'syz.8.2825': attribute type 8 has an invalid length. [ 6119.104407][ T30] audit: type=1400 audit(6119.543:569): avc: denied { getopt } for pid=12867 comm="syz.2.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 6119.371553][T12868] syzkaller1: entered promiscuous mode [ 6119.405255][T12868] syzkaller1: entered allmulticast mode [ 6119.727827][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 30 seconds [ 6119.747707][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 30 seconds [ 6119.748423][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 30 seconds [ 6119.748747][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 30 seconds [ 6120.804721][T12870] block nbd8: NBD_DISCONNECT [ 6144.519277][T12900] bond2: left allmulticast mode [ 6144.525293][T12900] dummy0: left allmulticast mode [ 6144.649880][ T8707] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6144.655579][ T8707] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6144.684383][ T8707] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6144.685432][ T8707] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 6146.552387][T12915] nbd2: detected capacity change from 0 to 63 [ 6146.585154][T11627] block nbd2: Receive control failed (result -32) [ 6147.294860][T12489] block nbd2: Dead connection, failed to find a fallback [ 6147.295912][T12489] block nbd2: shutting down sockets [ 6147.296088][T12489] blk_print_req_error: 26 callbacks suppressed [ 6147.296250][T12489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.296452][T12489] buffer_io_error: 26 callbacks suppressed [ 6147.296549][T12489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 6147.297365][T12489] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.297573][T12489] Buffer I/O error on dev nbd2, logical block 1, async page read [ 6147.298282][T12489] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.298474][T12489] Buffer I/O error on dev nbd2, logical block 2, async page read [ 6147.357410][T12489] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.358088][T12489] Buffer I/O error on dev nbd2, logical block 3, async page read [ 6147.395044][T12489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.395651][T12489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 6147.396276][T12489] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.396390][T12489] Buffer I/O error on dev nbd2, logical block 1, async page read [ 6147.396690][T12489] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.396887][T12489] Buffer I/O error on dev nbd2, logical block 2, async page read [ 6147.397259][T12489] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.397350][T12489] Buffer I/O error on dev nbd2, logical block 3, async page read [ 6147.397465][T12489] nbd2: unable to read partition table [ 6147.667244][T12489] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.668306][T12489] Buffer I/O error on dev nbd2, logical block 0, async page read [ 6147.703929][T12917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12917 comm=syz.8.2850 [ 6147.813186][T12489] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 6147.841945][T12489] Buffer I/O error on dev nbd2, logical block 1, async page read [ 6147.856949][T12489] nbd2: unable to read partition table [ 6149.767345][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 60 seconds [ 6149.772694][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 60 seconds [ 6149.775378][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 60 seconds [ 6149.780533][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 60 seconds [ 6153.210607][ T30] audit: type=1400 audit(6153.670:570): avc: denied { create } for pid=12929 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 6153.261098][ T30] audit: type=1400 audit(6153.720:571): avc: denied { write } for pid=12929 comm="syz.2.2855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 6153.273164][T12930] netlink: 'syz.2.2855': attribute type 1 has an invalid length. [ 6158.927655][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 6158.967327][T12945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2860'. [ 6162.774970][T12952] bridge_slave_0: entered promiscuous mode [ 6164.109136][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 6164.604903][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 6166.735755][T12958] bond0: (slave bond_slave_1): Releasing backup interface [ 6167.373647][T12960] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2868'. [ 6171.444580][T12970] netlink: 'syz.8.2870': attribute type 25 has an invalid length. [ 6174.540741][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2873'. [ 6176.320390][T12979] syzkaller1: entered promiscuous mode [ 6176.321705][T12979] syzkaller1: entered allmulticast mode [ 6179.826864][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 90 seconds [ 6179.827718][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 90 seconds [ 6179.827955][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 90 seconds [ 6179.828214][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 90 seconds [ 6188.429882][ T30] audit: type=1400 audit(6188.898:572): avc: denied { getopt } for pid=13003 comm="syz.8.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 6188.826059][T13007] netlink: 'syz.2.2888': attribute type 14 has an invalid length. [ 6188.840827][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 6189.980631][ T8720] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 6189.981750][ T8720] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 6189.982243][ T8720] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 6189.982692][ T8720] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 6189.990249][T13007] netlink: 'syz.2.2888': attribute type 14 has an invalid length. [ 6190.013758][T13007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 6209.893843][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 120 seconds [ 6209.894848][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 120 seconds [ 6209.895578][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 120 seconds [ 6209.896433][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 120 seconds [ 6217.409207][T13064] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 6229.224619][T13091] bond0: (slave bond_slave_1): Releasing backup interface [ 6231.688588][ T30] audit: type=1400 audit(6232.139:573): avc: denied { ioctl } for pid=13092 comm="syz.2.2923" path="socket:[35723]" dev="sockfs" ino=35723 ioctlcmd=0x8926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 6239.974667][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 150 seconds [ 6239.976291][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 150 seconds [ 6239.976603][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 150 seconds [ 6239.976778][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 150 seconds [ 6242.734055][ T30] audit: type=1400 audit(6243.235:574): avc: denied { create } for pid=13118 comm="syz.2.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 6252.543032][T13130] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2936'. [ 6262.219661][T13157] IPv6: NLM_F_CREATE should be specified when creating new route [ 6264.924392][ T30] audit: type=1400 audit(6265.446:575): avc: denied { bind } for pid=13160 comm="syz.8.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 6264.965176][ T30] audit: type=1400 audit(6265.486:576): avc: denied { listen } for pid=13160 comm="syz.8.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 6269.407330][T13175] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2951'. [ 6269.441087][T13175] netlink: 'syz.8.2951': attribute type 9 has an invalid length. [ 6269.449034][T13175] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2951'. [ 6269.450699][T13175] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2951'. [ 6270.035747][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 180 seconds [ 6270.039280][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 180 seconds [ 6270.041946][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 180 seconds [ 6270.044148][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 180 seconds [ 6270.511546][T13177] syzkaller0: entered promiscuous mode [ 6270.530790][T13177] syzkaller0: entered allmulticast mode [ 6274.603193][T13183] netem: change failed [ 6290.930570][T13215] lo speed is unknown, defaulting to 1000 [ 6293.779943][ T3145] udevd[3145]: worker [12330] /devices/virtual/block/nbd0 timeout; kill it [ 6293.782393][ T3145] udevd[3145]: seq 13555 '/devices/virtual/block/nbd0' killed [ 6300.137453][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 210 seconds [ 6300.140538][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 210 seconds [ 6300.146891][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 210 seconds [ 6300.147502][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 210 seconds [ 6302.844823][T13217] lo speed is unknown, defaulting to 1000 [ 6324.308091][T13217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 6324.345638][T13217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 6330.156152][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 240 seconds [ 6330.160068][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 240 seconds [ 6330.162946][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 240 seconds [ 6330.165267][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 240 seconds [ 6332.903433][T13306] syzkaller0: entered promiscuous mode [ 6332.917748][T13306] syzkaller0: entered allmulticast mode [ 6333.011118][T13306] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 6335.220692][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'. [ 6337.309189][T13217] hsr_slave_0: entered promiscuous mode [ 6337.339782][T13217] hsr_slave_1: entered promiscuous mode [ 6337.358014][T13217] debugfs: 'hsr0' already exists in 'hsr' [ 6337.358887][T13217] Cannot create hsr debugfs directory [ 6348.526937][T13217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 6348.774567][T13217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 6349.002197][T13217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 6349.456586][T13217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 6360.244369][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 270 seconds [ 6360.244885][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 270 seconds [ 6360.245240][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 270 seconds [ 6360.245406][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 270 seconds [ 6360.306939][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 6390.292798][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 300 seconds [ 6390.294542][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 300 seconds [ 6390.295865][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 300 seconds [ 6390.296978][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 300 seconds [ 6408.885102][T13217] veth0_vlan: entered promiscuous mode [ 6409.192800][T13217] veth1_vlan: entered promiscuous mode [ 6410.935842][T13217] veth0_macvtap: entered promiscuous mode [ 6411.375811][T13217] veth1_macvtap: entered promiscuous mode [ 6411.546337][ T30] audit: type=1400 audit(6412.139:577): avc: denied { getopt } for pid=13415 comm="syz.2.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 6413.427814][ T9198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 6413.521443][ T8720] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 6413.523580][ T8720] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 6413.527169][ T8720] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 6420.349260][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 330 seconds [ 6420.351551][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 330 seconds [ 6420.357123][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 330 seconds [ 6420.359834][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 330 seconds [ 6432.974424][T13454] xt_hashlimit: size too large, truncated to 1048576 [ 6438.761289][T13460] bond0: (slave bond_slave_1): Releasing backup interface [ 6443.486187][T13467] netlink: 'syz.2.3026': attribute type 2 has an invalid length. [ 6450.410863][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 360 seconds [ 6450.411599][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 360 seconds [ 6450.412320][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 360 seconds [ 6450.412622][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 360 seconds [ 6456.288403][ T30] audit: type=1400 audit(6456.891:578): avc: denied { bind } for pid=13504 comm="syz.8.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 6456.292443][ T30] audit: type=1400 audit(6456.901:579): avc: denied { name_bind } for pid=13504 comm="syz.8.3042" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 6456.330646][ T30] audit: type=1400 audit(6456.901:580): avc: denied { node_bind } for pid=13504 comm="syz.8.3042" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 6480.479206][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 390 seconds [ 6480.488881][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 390 seconds [ 6480.493935][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 390 seconds [ 6480.494529][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 390 seconds [ 6487.694591][ T30] audit: type=1400 audit(6488.277:581): avc: denied { read } for pid=13577 comm="syz.2.3073" path="socket:[38491]" dev="sockfs" ino=38491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 6510.554109][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 420 seconds [ 6510.555029][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 420 seconds [ 6510.555668][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 420 seconds [ 6510.556019][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 420 seconds [ 6517.689205][T13641] hsr0: entered promiscuous mode [ 6517.730708][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3096'. [ 6517.810449][T13641] hsr_slave_0: left promiscuous mode [ 6517.879868][T13641] hsr_slave_1: left promiscuous mode [ 6518.280745][T13641] hsr0 (unregistering): left promiscuous mode [ 6540.658763][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 450 seconds [ 6540.659876][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 450 seconds [ 6540.660554][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 450 seconds [ 6540.660886][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 450 seconds [ 6570.674563][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 480 seconds [ 6570.675575][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 480 seconds [ 6570.676232][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 480 seconds [ 6570.676427][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 480 seconds [ 6584.228971][T13775] syzkaller0: entered promiscuous mode [ 6584.268236][T13775] syzkaller0: entered allmulticast mode [ 6600.738408][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 510 seconds [ 6600.739368][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 510 seconds [ 6600.739583][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 510 seconds [ 6600.739748][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 510 seconds [ 6605.906129][T13825] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3153'. [ 6605.923071][T13825] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3153'. [ 6609.068870][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3156'. [ 6620.916092][T13856] netlink: 'syz.2.3167': attribute type 1 has an invalid length. [ 6622.538772][T13859] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 6629.963664][T13876] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3174'. [ 6630.814867][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 540 seconds [ 6630.816112][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 540 seconds [ 6630.824881][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 540 seconds [ 6630.825226][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 540 seconds [ 6641.216654][T13907] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 6645.068647][ T30] audit: type=1400 audit(6645.776:582): avc: denied { ioctl } for pid=13913 comm="syz.2.3191" path="socket:[40040]" dev="sockfs" ino=40040 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 6660.880358][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 570 seconds [ 6660.881303][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 570 seconds [ 6660.883391][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 570 seconds [ 6660.883604][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 570 seconds [ 6663.085560][T13975] netlink: 'syz.8.3218': attribute type 3 has an invalid length. [ 6663.090168][T13975] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3218'. [ 6686.027985][T14022] netlink: 'syz.2.3241': attribute type 2 has an invalid length. [ 6690.943046][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 600 seconds [ 6690.944148][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 600 seconds [ 6690.948146][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 600 seconds [ 6690.948448][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 600 seconds [ 6691.302723][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 6693.694283][T14034] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 6693.935079][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 6717.528656][ T30] audit: type=1400 audit(6718.262:583): avc: denied { ioctl } for pid=14091 comm="syz.8.3265" path="socket:[40338]" dev="sockfs" ino=40338 ioctlcmd=0x8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 6721.000100][ T153] block nbd0: Possible stuck request 000000004783250f: control (read@0,1024B). Runtime 630 seconds [ 6721.001146][ T153] block nbd0: Possible stuck request 00000000fb14f1cc: control (read@1024,1024B). Runtime 630 seconds [ 6721.008565][ T153] block nbd0: Possible stuck request 00000000a906d4f4: control (read@2048,1024B). Runtime 630 seconds [ 6721.009238][ T153] block nbd0: Possible stuck request 000000008e79e6fc: control (read@3072,1024B). Runtime 630 seconds [ 6726.992411][T14113] syzkaller0: entered promiscuous mode [ 6727.001060][T14113] syzkaller0: entered allmulticast mode [ 6727.220006][T14113] 0: reclassify loop, rule prio 0, protocol 800 [ 6729.691477][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3277'. [ 6732.385979][T14121] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 6738.917399][ T32] INFO: task udevd:12330 blocked for more than 430 seconds. [ 6738.920797][ T32] Tainted: G L syzkaller #0 [ 6738.921475][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 6738.922188][ T32] task:udevd state:D stack:0 pid:12330 tgid:12330 ppid:3145 task_flags:0x400140 flags:0x00000011 [ 6738.931259][ T32] Call trace: [ 6738.931542][ T32] __switch_to+0x200/0x500 (T) [ 6738.932175][ T32] __schedule+0xcc8/0x3304 [ 6738.932455][ T32] schedule+0xcc/0x350 [ 6738.932588][ T32] io_schedule+0xac/0x114 [ 6738.932700][ T32] folio_wait_bit_common+0x2b0/0x650 [ 6738.946280][ T32] do_read_cache_folio+0x238/0x3ec [ 6738.946928][ T32] read_cache_folio+0x44/0x74 [ 6738.947228][ T32] read_part_sector+0xa4/0x5e0 [ 6738.947364][ T32] msdos_partition+0xec/0x1f20 [ 6738.947476][ T32] bdev_disk_changed+0x4a4/0xe1c [ 6738.947645][ T32] blkdev_get_whole+0x144/0x1f0 [ 6738.947769][ T32] bdev_open+0x1d4/0xa70 [ 6738.947890][ T32] blkdev_open+0x270/0x3f0 [ 6738.948007][ T32] do_dentry_open+0x3f0/0x10d4 [ 6738.948132][ T32] vfs_open+0x5c/0x300 [ 6738.948271][ T32] path_openat+0x1734/0x2650 [ 6738.948396][ T32] do_filp_open+0x184/0x364 [ 6738.948512][ T32] do_sys_openat2+0xec/0x190 [ 6738.948623][ T32] __arm64_sys_openat+0x130/0x1d0 [ 6738.948739][ T32] invoke_syscall+0x70/0x260 [ 6738.948860][ T32] el0_svc_common.constprop.0+0xac/0x230 [ 6738.948971][ T32] do_el0_svc+0x40/0x58 [ 6738.949085][ T32] el0_svc+0x54/0x29c [ 6738.949232][ T32] el0t_64_sync_handler+0xa0/0xe4 [ 6738.949380][ T32] el0t_64_sync+0x198/0x19c [ 6738.950134][ T32] [ 6738.950134][ T32] Showing all locks held in the system: [ 6738.950483][ T32] 2 locks held by pr/ttyAMA-1/31: [ 6738.950807][ T32] 1 lock held by khungtaskd/32: [ 6738.950937][ T32] #0: ffff800087632120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x30/0x198 [ 6738.952260][ T32] 2 locks held by getty/3271: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 6738.952372][ T32] #0: ffff000017f600a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 6739.057375][ T32] #1: ffff80008d9fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x420/0xee0 [ 6739.058534][ T32] 2 locks held by syz-executor/3325: [ 6739.058737][ T32] 3 locks held by kworker/u8:20/8721: [ 6739.058930][ T32] 3 locks held by kworker/u8:2/10164: [ 6739.059030][ T32] 3 locks held by kworker/u8:3/10820: [ 6739.059233][ T32] 1 lock held by udevd/12330: [ 6739.059375][ T32] #0: ffff0000152f4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x2b8/0xa70 [ 6739.059945][ T32] 2 locks held by kworker/u8:1/12755: [ 6739.060037][ T32] #0: ffff00000e031148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1820 [ 6739.060681][ T32] #1: ffff8000a23d7bf0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x720/0x1820 [ 6739.061230][ T32] 3 locks held by kworker/u8:8/13729: [ 6739.061326][ T32] 1 lock held by syz.8.3280/14135: [ 6739.061485][ T32] 2 locks held by modprobe/14140: [ 6739.062355][ T32] [ 6739.062485][ T32] ============================================= [ 6739.062485][ T32] [ 6739.063460][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 6739.067624][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 6739.068003][ T32] Tainted: [L]=SOFTLOCKUP [ 6739.068186][ T32] Hardware name: linux,dummy-virt (DT) [ 6739.068542][ T32] Call trace: [ 6739.068708][ T32] show_stack+0x18/0x24 (C) [ 6739.069031][ T32] dump_stack_lvl+0x7c/0xb0 [ 6739.069234][ T32] dump_stack+0x1c/0x28 [ 6739.069513][ T32] vpanic+0x1d8/0x478 [ 6739.069918][ T32] trace_suspend_resume+0x0/0x1f4 [ 6739.070323][ T32] watchdog+0x588/0xd14 [ 6739.070705][ T32] kthread+0x348/0x660 [ 6739.071078][ T32] ret_from_fork+0x10/0x20 [ 6739.071909][ T32] SMP: stopping secondary CPUs [ 6739.073632][ T32] Kernel Offset: disabled [ 6739.074500][ T32] CPU features: 0x208000,1001a001,00008000,0400421b [ 6739.075497][ T32] Memory Limit: none [ 6739.077101][ T32] Rebooting in 86400 seconds..