last executing test programs: 2m46.380057918s ago: executing program 3 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x6e45491b}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x178, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x2000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}, {{0x5, 0x2, 0x2, 0x645, 0xe684, 0xf5c, {0x5, 0x80000000, 0x8001, 0xcfe, 0x5, 0x3, 0x9, 0x4b5, 0x0, 0x2000, 0x6, 0x0, r2, 0x1ff, 0x6}}, {0x2, 0x2, 0x8, 0x5, 'group_id'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) (fail_nth: 2) 2m45.156165772s ago: executing program 3 (id=2096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000716000/0x4000)=nil, 0x4000}) 2m45.072019454s ago: executing program 3 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000280)={0x0, 0x3, 0xff81, 0xff, 0x6, 0x28, 0x19, "76871ae03ccf40a8f05f351a0765ebfb0441930b", "ee956829284f91c2232782cd89fb44ca7aa9d3ea"}) 2m40.571070949s ago: executing program 3 (id=2106): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) r7 = socket(0xa, 0x1, 0x84) r8 = socket(0xa, 0x1, 0x84) r9 = dup3(r8, r7, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x49}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044814}, 0x8000080) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, 0x0, 0x0) r12 = getpid() r13 = syz_pidfd_open(r12, 0x0) r14 = pidfd_getfd(r13, r13, 0x0) ioctl$FS_IOC_GETVERSION(r14, 0x80087601, &(0x7f0000000000)) creat(0x0, 0x19f) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0xd4, 0x8}, 'port1\x00', 0x81, 0x60000, 0x400, 0x7, 0x1, 0x0, 0x5, 0x0, 0x4, 0x3}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r15, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m38.695373792s ago: executing program 3 (id=2114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0xa, @sdr={0x52424752, 0x101}}) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x8000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x45}, 0xe) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) (async) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fcntl$setsig(r2, 0xa, 0x13) (async) fcntl$setlease(r2, 0x400, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000002c0)={0xa, @sdr={0x52424752, 0x101}}) (async) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x8000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x45}, 0xe) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) (async) fcntl$setlease(r2, 0x400, 0x2) (async) 2m38.217691878s ago: executing program 3 (id=2117): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000a80)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa}, {0x0, 0x0, 0xe2, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311d17962"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m23.030616892s ago: executing program 32 (id=2117): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000a80)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x73, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1=0xac1414aa}, {0x0, 0x0, 0xe2, 0x0, @opaque="41a53bc57d107c6ff061f03cf6bb904c78ef576fdf1a82582813d34772ce2518f6e064561bc8e7c4c3b88889ba6f28ff51a9fa5b94875a7f49e85b4bac7040c621fa1ab002461bb46e93c9f5664d16a8691bdff00d19f7d7fa1a06180e28c9c4ba89da8d2b37f8b0922eaf0298e2395e4b02c08e80b8dfbdfaf63d3c0cd02bc258452710b9ef5347ac7329042cbf02c5878b573d4abaeb9da781b320fd79d482302a8a531644f0d27c0bef42ed5444393fcb1886713b667dc79bd243ea971d9779b208dea2b767d07df0f49a807f9e23d1a8affe410311d17962"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.846888085s ago: executing program 2 (id=2642): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=r0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x100000) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x200400c0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 9.10059073s ago: executing program 4 (id=2650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = dup(r6) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r7) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 7.954992191s ago: executing program 4 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltaction={0x30, 0x18, 0x1, 0x3, 0x25dedc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}]}, 0x30}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 7.679079559s ago: executing program 2 (id=2656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x2000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x400c004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.854695138s ago: executing program 4 (id=2657): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = memfd_create(&(0x7f0000000940)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh\' \xad5\x81\xe2\x05\x95\xe0&\xa0#\xcf\x06\x00\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xb2F\x7f\xeb\xea=\xcdy\xb8\xa1\x93\xe5\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90i\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x91\xf0\xc7;\xde\x9e\xe2\x00\x00\x13\x00\x00\x00\x00\x00l\x06\x98\xa0^\x02\x90O\x14\x918\xb8\xc9 sg\x1d\xbf\xb2\xe2\xbb\x19\x8eb\x19P/\xb4=X|N\xa1\x8f\xa5\xc5,1\x9e\x00\x17?H%\x9e\xef\xb3\x13\v!9\xe4\xc9\\Bg\xe9\x1e\xbb\xad\x91\xda\ad\xc3{\xcb\xec\x8cx\x1e\xaf\xcct\xd0IP\x88\xb2\xbe\xd0\xcd\\a\xef\xbf\xe1\ne3\xe9M\x87\x99\xac\x8a(n\x1b\xce\xfd\xfdh\x9b\x1b\x0f\xde)\xd2\x89i9\xc2\xa9\x85\x1f\xb4qs\xdd\xd3\xbby#\x8f\b&\xac\xbb47x$K\xdf\x10\x1eg\xf6Oc\x80\xa5\xb5\n\xec\x86r\r]\xd4\xfa\x84\x9d8Z\xbd\xdf6Z\xf8K\xbc!\xf3\x80\xfae\a:\xbaJ\xb8~\x82|\x8b\xa5\xbf\x99\xf7\'\xf1Q\xaa\xc9f\xbb\xa1;\xc4\xe5\x87\xe1h{\xc6\xd5\x8b\xf0\x1a\xd9\x1a\xb0\xbaK#x}\xfb\x02~X\xb8\xc7x\xbf\a\xce\x84n\xb5\f]9\x8f\";y\xe0\x14\x94\xd5\xbbK\x04\x8e\xbd\xc8V;\x0e\xdb\xd5(\x93\x17\xa6q\xfb\xa5\x01\xa5\xa7F\x844\xf6uk,\xd3\xb0\xd8\x82\xd0\xbdf\x89\x85\x1ev\xb8e\xf0NX\x13+_\x90\x96\xbaXv\x16K\x11\x1d0\xdc*(\x13\x80\xb4\xc7\xf0[.K\xad \xb4F\xeb\xd4H\xde\r\x01\x10\xe6r\xc1L>Z#\x7f\x89\xdc6\xf0}$X)\n\xd7\"\xb5,\xf0.}Q\xe6\xe7\x83\xd9g\'\xe4\xf3\x1d\x95K\x8a\xf0\xb2}R\xd0\xf3\x9c\x89b;\xa9', 0x6) (rerun: 32) r1 = dup(r0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x46, 0x1, 0x0, 0x2}]) (async) socket$kcm(0x10, 0x2, 0x4) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x24004010) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x240202) (async, rerun: 32) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) (async) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="b206000000000000", 0x8) (async) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0x4004af07, &(0x7f0000000000)={{0x0, 0x0, 0xc1, 0x5, 0x9, 0x7ff, 0x7, 0x7ff, 0xb, 0x7, 0x3b, 0xfff, 0xffff, 0x8a8, 0x6}}) 6.522903456s ago: executing program 0 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 6.201330693s ago: executing program 4 (id=2660): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) fcntl$notify(r0, 0x11, 0x36) 5.992207333s ago: executing program 2 (id=2661): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/122, &(0x7f0000000040)=0x7a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mkdirat(r2, &(0x7f0000000380)='./file0\x00', 0x30) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) setrlimit(0x1, &(0x7f0000000000)) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000080)={0x8, 0x9, 0x609152b0, 0x6, 0xe, "3eccd2000500ef002100"}) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000980e5b4035120e00eef0000000010902120001000000000904"], 0x0) 5.516813971s ago: executing program 1 (id=2662): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x2}) (async) socket$inet6(0xa, 0x2, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10162, 0x0) (async, rerun: 64) setreuid(0x0, 0xee00) (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) write$rfkill(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, 0x0) (async, rerun: 64) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x7578, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r8, 0x4802, 0x6) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) (async, rerun: 32) io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) (rerun: 32) 5.515346344s ago: executing program 4 (id=2663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = dup(r6) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r7) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@loopback, @in=@empty}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000f40)=0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x870}}) 5.474375895s ago: executing program 0 (id=2664): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r5 = syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00') prlimit64(0x0, 0x4, 0x0, 0x0) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00') (async) prlimit64(0x0, 0x4, 0x0, 0x0) (async) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) (async) 5.250848462s ago: executing program 0 (id=2665): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 5.24777079s ago: executing program 5 (id=2666): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000000006100000e00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00') pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) sendmsg$nl_route(r2, 0x0, 0x4008080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) sysinfo(&(0x7f0000000340)=""/193) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="030000000300000000000000fbffffff00"/28], 0x50) r3 = fsopen(&(0x7f0000000500)='jffs2\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000006c0)='source\xbfE&\x81\xed\xd8q\x04\x87N\x1e\x9d\xde\xf8/_\x13\xc1\xbep\x1a\x95\xa5h\xdf\xba-zTf\x9c\x1e\xe5dV\xc43\xef\xa4\xfdDB\xf1o\x89\x00\xa8\x1f\x00\a\xbaj\xdb\xae\x1ah\x89j\x91Q\xb6C\x06\xfa:\xe3_*\x87pnL\x14<\x91\xa0\xe2i1A\x01\xaaww\xe7\xa8P\xbc7\x9dh%Jg\xd0\xdco\x0fN\x1d].\t45Y\n\xe9.Wrj\xb6\xf7$a\xa5\xa4\xa2Q\x9d\b\vG\xe4j\xee\xfc\xf7\xdf\x83\x87\xaaq\xd2\x86.\\i\xc8\x1fy\xe6m\xce\xde\xbb>\x88~\xc8k\xa5\xf3\xe9?\x90\x82PU\xef\x98Za@\x9b\xb2q\xfd\x18F\xcap[\x8f\x11\xc5\xf9\x99L\xd5\x88\xd4\xb4\n\x0fQD\xcd<\bw\xb9\xe9\x15,\x99\x92\x13\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000540)='\\\a\x00\x838\x9d<\f\x91\a\xd4$\xae\xf7\xff\xff\xff\xff\xff\xff\xffM\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x11\x01\x00\xc4\x96\xb7b\xa7\x15V.\x8c`fd\xdc\x8b\x18rBl{\x82\\\xd3A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\x1a\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;d\xa1\x86\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xaa\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\xf03\x81/\x01\x00\x00\x00\x00\x00\x00\x00R\xba\f\x1e\xc6X\xce\x015;\x1bW\xfe8\x17/\xebc)*\x10S\xa6\x94JT\xab\x880\x92\xb0)($f\xa1IxE\xb2\x02\xcdP\x89J\x83\x8a\xed\x15\x80\xda\xff\x00in}', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x18e) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) getpgid(r6) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f048}) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) 4.699084433s ago: executing program 2 (id=2667): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x20000000, 0x0, 0xb49, 0x9, 0x8, 0x1ff, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f00000001c0)={0x4, 0x3c6, 0x404, 0x5, 0x41, 0x4, "1130fd852869ab7e3763d015948ae7f8", 0x1, 0x1, 0x2, 0x0, 0x1, 0x8, 0x4}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x501080, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000340)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000/0x12000)=nil, 0x1000, 0x2}) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) 4.690543982s ago: executing program 0 (id=2668): syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f802", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000200)=0x1b) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x1ff) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000040)={0x0, 0x1, 0x3}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0xff08, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, 0x0, 0x0) recvmsg(r4, &(0x7f00000001c0)={&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000580)=""/167, 0xa7}], 0x3}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f}, 0x94) socket$alg(0x26, 0x5, 0x0) 4.586754896s ago: executing program 5 (id=2669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000280)={0x0, 0x3, 0xff81, 0xff, 0x6, 0x28, 0x19, "76871ae03ccf40a8f05f351a0765ebfb0441930b", "ee956829284f91c2232782cd89fb44ca7aa9d3ea"}) 3.410764836s ago: executing program 1 (id=2670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000006f00000000000000440f20c03507000000440f22c00f38f17db0"], 0x6f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x2a, 0xbe, 0x1, 0x5, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = inotify_init1(0x800) r5 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d260f0100000000000000000006241a000000090581030002ff00000904ec0000020d00000904010102020d0000090582"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) inotify_add_watch(r4, &(0x7f00000002c0)='./file0\x00', 0x100080c) r6 = timerfd_create(0x1, 0x0) timerfd_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000002c0)) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r7, 0x29, 0x36, 0x0, &(0x7f0000000100)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x90003, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x3ff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xa0c}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x26a}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xea}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xffffff7f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000101}, 0x20000084) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) 3.404356869s ago: executing program 5 (id=2671): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xc2d3, 0x10100, 0x2, 0x3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x79a5, 0x2, 0x46, 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.322750913s ago: executing program 2 (id=2672): shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x38, 0x65, 0x33, 0x73f405ffd7003265, 0x30, 0x32, 0x35], 0x2d, [0x32, 0x35, 0x62, 0x64], 0x2d, [0x35, 0x30, 0x31, 0x35], 0x2d, [0x62, 0x65, 0x62, 0x61], 0x2d, [0x63, 0x37, 0x35, 0x30, 0x36, 0x38, 0x62, 0x38]}}}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x2) openat$mice(0xffffffffffffff9c, 0x0, 0x41) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0404"], 0xd) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0xffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x9, 0x3, 0xec9f}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8=r2], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x12, 0xffff, 0x5}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2.782650055s ago: executing program 5 (id=2673): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) fcntl$notify(r0, 0x11, 0x36) 2.757764308s ago: executing program 0 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 2.656992382s ago: executing program 5 (id=2675): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f00004f4000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, &(0x7f0000000380)="f0470fb19e00480000c4a1fd64f464430f0dddc4c10df286b500000066baf80cb855d4af8cef66bafc0cec2e653667ad66b8c1008ee8c4012a51ac87d27293d242d24f0a66baf80cb88a2b1680ef66bafc0c66ed", 0x54}], 0x1, 0x60, &(0x7f00000004c0)=[@dstype3={0x7, 0x5}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x60, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) setrlimit(0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x18, r3}, 0x18) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], &(0x7f0000000140)=""/35, 0x2d, 0x23, 0x0, 0x2, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040100000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000840)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0xa, 0xa, 0x4, 0x100, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f00000008c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000640), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000feffff", @ANYRES32=r5, @ANYBLOB="000000000000000000850000000c000000b7000000000000009500"/40], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, 0x0, &(0x7f0000000080)=r6}, 0x20) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1082882, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) eventfd(0x8) 2.656784964s ago: executing program 1 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x2010042, &(0x7f0000000080)={[{}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.463276262s ago: executing program 4 (id=2677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea0000000000010902f5def0fa71ad78e3b72cae932400010000000009040000010300000009210000000122070009058103000000000070732f24e81c7b83ca85ef030e01f0a1861e227660d583ae726d7d7ef2bcaac881f747639a83beb0fe028ef437a59d22212536ca33f7c32b9acc93ba08a73d38640a4f9456911cab6296c2f98749fd166a81460dac3a4068edfecade9773d3aea2ea7c726d774d412800288cbf8b19379fb68fd894e81191de46b2d8e147"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="500800ef545e80b1"], 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000040)='affs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577bcb0b18b55a35f3520747275737465643a73797a20303030303030303030303030303030303430393600"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.822319571s ago: executing program 1 (id=2678): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x6, &(0x7f0000002200)=0x1) r0 = fsopen(&(0x7f0000000200)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x82c00) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000003c0)=""/247) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) msgget(0x0, 0x40) msgget(0x2, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0x3, 0x6576, 0xd}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000000c0)={r8}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.810907093s ago: executing program 2 (id=2679): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002680)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002880)={{0x0, 0x5, 0x2a3ab49a, 0xfffffffffffffffe, 0x8, 0x4, 0x6, 0x200, 0x4, 0x1c2d, 0x8000, 0xffffffffffff6649, 0x8, 0x9, 0x6}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000083c0)={r1, r2, "2179312b4059c664e618ac83bd2a9b71ffb8c777f8a8e462ea1a13799e6a33755e91bd46af51e329b16c8b72bdd3714cdad5df81b5896925eac7a6ad2369740ca97fe719bf22ac92bcae31136e0d802a79c6870bbf0cbea2a4e2206a6a77d30cb0628c6ae29ce35284bd44e57741fe2b4ebe57c91da72a1c63d9879b7d5d06e88bb92c0eca3e480adacbf08411b2b5f3d642d927f04cf665c1713b7f8ce5ba02108fc053638842ab672edcc9f17f1644e56739ef7038e2854818e0b05fdbc0a580e3a27411aaec393100b13c4f07dea2d770ab07081fef9fd9e0354ac36a8690169ee7bc152dd80e88585f9472c0e6a4d75a18d92730c2954baabbe59ee7bab4", "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"}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x1069f483, 0x4af2, 0x5fff, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) ioprio_set$pid(0x2, 0x0, 0x6000) chmod(&(0x7f0000000180)='./file0\x00', 0x3) r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x64581, 0xd5) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r5, r3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) 1.062568268s ago: executing program 0 (id=2680): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x20044090) r2 = userfaultfd(0x80001) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x4) 894.870223ms ago: executing program 1 (id=2681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000280)={0x0, 0x3, 0xff81, 0xff, 0x6, 0x28, 0x19, "76871ae03ccf40a8f05f351a0765ebfb0441930b", "ee956829284f91c2232782cd89fb44ca7aa9d3ea"}) 72.397376ms ago: executing program 5 (id=2682): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9f6b010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000080000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000030000000000000c00000000100000000000000900000000000000000000000205000000020000000000000a02"], 0x0, 0x96}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xfffffffffffffd01}, 0x80) socket$netlink(0x10, 0x3, 0x12) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0xa, 0x0, &(0x7f0000000140)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000677000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, r2, 0x329a6000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x4, &(0x7f0000000000)=0x6) (async) r6 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000cd9a0000950000000000040082abef26a72f60d1bfe7a7dcc9336145e5df0668c63b04447094b29116ee37459e6f334a54eefc063e99a001b3f89b9b6379f9cea1768c30c38da6e13cc6bfd8f51f3488ebf433ca0b19b3c96dfe8edd73d5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff94}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r8 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000100)={'wlan1\x00'}) 0s ago: executing program 1 (id=2683): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x0, 0x51eda, 0x100, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810dc}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0xbe}, 0xff7e) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, @any, 0x3}, 0x76b411829b3c6b4d) shutdown(r2, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RCLUNK(r5, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015800a00142603600e1208000f0000000406040016c008685c400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1010000007c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bbadd809d50300000000000000e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.382515][ T30] audit: type=1400 audit(1757262755.664:29590): avc: denied { read write open } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 690.511689][ T30] audit: type=1400 audit(1757262755.664:29591): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 691.980433][ T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 692.334710][ T24] usb 1-1: device descriptor read/64, error -71 [ 692.582092][ T24] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 692.751018][ T24] usb 1-1: device descriptor read/64, error -71 [ 692.920660][ T24] usb usb1-port1: attempt power cycle [ 693.390367][ T24] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 693.501269][ T24] usb 1-1: device descriptor read/8, error -71 [ 693.836442][ T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 693.862925][ T24] usb 1-1: device descriptor read/8, error -71 [ 693.870738][T12495] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 693.883503][T12495] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 693.894664][T12495] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 693.919637][T12495] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 693.928214][T12495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.980987][ T24] usb usb1-port1: unable to enumerate USB device [ 693.999783][T14882] lo speed is unknown, defaulting to 1000 [ 694.010796][T14882] lo speed is unknown, defaulting to 1000 [ 694.287542][T14900] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2189'. [ 694.302013][ T24] IPVS: starting estimator thread 0... [ 694.414412][T14901] IPVS: using max 75 ests per chain, 180000 per kthread [ 694.485446][T14882] lo speed is unknown, defaulting to 1000 [ 694.836715][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 694.836730][ T30] audit: type=1400 audit(1757262760.264:29851): avc: denied { create } for pid=14902 comm="syz.4.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 695.981598][ T30] audit: type=1400 audit(1757262760.334:29852): avc: denied { create } for pid=14902 comm="syz.4.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 696.002186][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.008548][ T30] audit: type=1400 audit(1757262760.394:29853): avc: denied { create } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 696.040869][ T5849] Bluetooth: hci5: command tx timeout [ 696.092898][ T30] audit: type=1400 audit(1757262760.394:29854): avc: denied { prog_load } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 696.250389][ T30] audit: type=1400 audit(1757262760.394:29855): avc: denied { bpf } for pid=14905 comm="syz.0.2191" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 696.341123][ T30] audit: type=1400 audit(1757262760.394:29856): avc: denied { perfmon } for pid=14905 comm="syz.0.2191" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 696.368736][ T30] audit: type=1400 audit(1757262760.394:29857): avc: denied { prog_run } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 696.384681][T14882] chnl_net:caif_netlink_parms(): no params data found [ 696.390532][ T30] audit: type=1400 audit(1757262760.404:29858): avc: denied { create } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.439432][ T30] audit: type=1400 audit(1757262760.404:29859): avc: denied { setopt } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 696.513611][ T30] audit: type=1400 audit(1757262760.404:29860): avc: denied { create } for pid=14905 comm="syz.0.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 696.533327][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.733964][T14882] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.760497][T14882] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.767865][T14882] bridge_slave_0: entered allmulticast mode [ 696.779209][T14882] bridge_slave_0: entered promiscuous mode [ 696.792413][T14882] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.799738][T14882] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.809836][T14882] bridge_slave_1: entered allmulticast mode [ 696.818116][T14882] bridge_slave_1: entered promiscuous mode [ 696.930149][T14882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.777840][T14882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.005370][T14882] team0: Port device team_slave_0 added [ 698.023506][T14882] team0: Port device team_slave_1 added [ 698.080544][T14882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.091768][ T5849] Bluetooth: hci5: command tx timeout [ 698.105229][T14882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.154715][T14882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.168990][T14882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.177110][T14882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.203058][ C0] vkms_vblank_simulate: vblank timer overrun [ 698.220685][T14882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.476018][T14882] hsr_slave_0: entered promiscuous mode [ 698.489089][T14882] hsr_slave_1: entered promiscuous mode [ 698.553164][T14882] debugfs: 'hsr0' already exists in 'hsr' [ 698.568177][T14882] Cannot create hsr debugfs directory [ 698.658464][T14946] pim6reg: entered allmulticast mode [ 698.687171][T14946] pim6reg: left allmulticast mode [ 699.001086][T11468] block nbd3: Possible stuck request ffff88808ea15080: control (read@0,1024B). Runtime 60 seconds [ 699.011847][T11468] block nbd3: Possible stuck request ffff88808ea15240: control (read@1024,1024B). Runtime 60 seconds [ 699.023152][T11468] block nbd3: Possible stuck request ffff88808ea15400: control (read@2048,1024B). Runtime 60 seconds [ 699.035367][T11468] block nbd3: Possible stuck request ffff88808ea155c0: control (read@3072,1024B). Runtime 60 seconds [ 699.857470][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 699.857489][ T30] audit: type=1400 audit(1757262765.204:30025): avc: denied { create } for pid=14949 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 699.884284][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.040744][ T30] audit: type=1400 audit(1757262765.204:30026): avc: denied { write } for pid=14949 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.171682][ T5849] Bluetooth: hci5: command tx timeout [ 700.189899][ T30] audit: type=1400 audit(1757262765.204:30027): avc: denied { read } for pid=14949 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.243352][ T30] audit: type=1400 audit(1757262765.224:30028): avc: denied { create } for pid=14949 comm="syz.0.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 700.277185][T14882] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 700.295569][ T30] audit: type=1400 audit(1757262765.224:30029): avc: denied { ioctl } for pid=14949 comm="syz.0.2201" path="socket:[53318]" dev="sockfs" ino=53318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.321403][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.396871][T14882] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 700.404275][ T30] audit: type=1400 audit(1757262765.774:30030): avc: denied { create } for pid=14882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.449918][T14882] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 700.470454][ T30] audit: type=1400 audit(1757262765.774:30031): avc: denied { write } for pid=14882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.519395][T14882] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 700.535948][ T30] audit: type=1400 audit(1757262765.774:30032): avc: denied { read } for pid=14882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.580549][ T30] audit: type=1400 audit(1757262765.794:30033): avc: denied { recv } for pid=5220 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 700.605523][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.647966][T14957] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 700.677619][ T30] audit: type=1400 audit(1757262765.794:30034): avc: denied { recv } for pid=14940 comm="syz.4.2199" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 700.703114][ C0] vkms_vblank_simulate: vblank timer overrun [ 700.713734][T14962] input: syz0 as /devices/virtual/input/input30 [ 700.790040][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.813578][T14960] netlink: 'syz.0.2203': attribute type 3 has an invalid length. [ 700.822948][T14960] netlink: 'syz.0.2203': attribute type 1 has an invalid length. [ 700.862999][T14960] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2203'. [ 700.872879][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.914524][T14959] lo speed is unknown, defaulting to 1000 [ 700.927141][T14960] NCSI netlink: No device for ifindex 0 [ 700.944652][T14959] lo speed is unknown, defaulting to 1000 [ 701.095344][T14882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.310735][T14959] lo speed is unknown, defaulting to 1000 [ 701.342967][T14882] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.387304][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.394427][T11576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.601639][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.608776][T11576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.252319][ T5849] Bluetooth: hci5: command tx timeout [ 702.856800][T14994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.888116][T14993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.908255][T14994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.954033][T14993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.364152][T14882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.383680][T15009] fuse: Bad value for 'fd' [ 704.805542][T14882] veth0_vlan: entered promiscuous mode [ 704.882608][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 704.882640][ T30] audit: type=1400 audit(1757262770.384:30228): avc: denied { ioctl } for pid=15016 comm="syz.1.2214" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52890 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 704.915102][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.209613][T14882] veth1_vlan: entered promiscuous mode [ 705.215545][ T30] audit: type=1400 audit(1757262770.424:30229): avc: denied { bpf } for pid=15011 comm="syz.0.2213" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 705.302172][ T30] audit: type=1400 audit(1757262770.594:30230): avc: denied { recv } for pid=15016 comm="syz.1.2214" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 705.306294][T15026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.328266][ T30] audit: type=1326 audit(1757262770.704:30231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5c1658ebe9 code=0x7ffc0000 [ 705.363171][ T30] audit: type=1326 audit(1757262770.704:30232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1658ebe9 code=0x7ffc0000 [ 705.386745][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.396330][ T30] audit: type=1326 audit(1757262770.704:30233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1658ebe9 code=0x7ffc0000 [ 705.419882][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.435494][T15019] debugfs: '!' already exists in 'ieee80211' [ 705.531814][T15026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.646809][ T30] audit: type=1400 audit(1757262770.704:30234): avc: denied { create } for pid=15012 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 705.667419][ C0] vkms_vblank_simulate: vblank timer overrun [ 705.786217][T15031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.819517][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 705.828936][T15031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.873028][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2216'. [ 705.908800][T15030] audit: audit_backlog=65 > audit_backlog_limit=64 [ 705.917052][T15030] audit: audit_lost=186 audit_rate_limit=0 audit_backlog_limit=64 [ 705.944027][T15037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 706.143135][T14882] veth0_macvtap: entered promiscuous mode [ 706.181488][T14882] veth1_macvtap: entered promiscuous mode [ 706.221479][T14882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.245287][T14882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.312567][T11574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.427016][T11574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.465277][T11574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.537435][T11574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.718427][T15045] 9pnet_rdma: rdma_create_trans (15045): problem binding to privport: 13 [ 706.914308][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.934356][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.009282][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.022346][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.036956][T15071] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2224'. [ 709.050909][T15071] openvswitch: netlink: Flow key attr not present in new flow. [ 709.075082][T15071] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 709.088911][T15071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2224'. [ 709.883431][T15079] lo speed is unknown, defaulting to 1000 [ 709.896647][ T30] kauditd_printk_skb: 282 callbacks suppressed [ 709.896662][ T30] audit: type=1400 audit(1757262775.394:30502): avc: denied { create } for pid=15082 comm="syz.0.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 709.999847][T15079] lo speed is unknown, defaulting to 1000 [ 710.421821][ T30] audit: type=1400 audit(1757262775.424:30503): avc: denied { write } for pid=15082 comm="syz.0.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 710.450658][ T30] audit: type=1400 audit(1757262775.424:30504): avc: denied { create } for pid=15082 comm="syz.0.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 710.481959][ T30] audit: type=1400 audit(1757262775.594:30505): avc: denied { recv } for pid=15076 comm="syz.4.2226" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 710.552636][ T30] audit: type=1400 audit(1757262775.644:30506): avc: denied { bind } for pid=15076 comm="syz.4.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 710.584407][ T30] audit: type=1400 audit(1757262776.024:30507): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.634978][ T30] audit: type=1400 audit(1757262776.024:30508): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.745147][ T30] audit: type=1400 audit(1757262776.024:30509): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.770795][ C0] vkms_vblank_simulate: vblank timer overrun [ 710.900851][T15090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.909398][T15090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.979040][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2229'. [ 711.032048][ T30] audit: type=1400 audit(1757262776.074:30510): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 711.068476][T15079] lo speed is unknown, defaulting to 1000 [ 711.176638][ T30] audit: type=1400 audit(1757262776.104:30511): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 711.201980][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.292269][T12495] Bluetooth: hci5: command 0x0405 tx timeout [ 712.450501][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 712.602688][ T24] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 712.830480][ T24] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 712.839493][ T24] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 712.849954][ T24] usb 6-1: config 220 has no interface number 2 [ 712.856387][ T24] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 712.877559][ T24] usb 6-1: config 220 interface 0 has no altsetting 0 [ 712.885293][ T24] usb 6-1: config 220 interface 76 has no altsetting 0 [ 712.895980][ T24] usb 6-1: config 220 interface 1 has no altsetting 0 [ 712.905772][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 712.926367][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.940236][ T24] usb 6-1: Product: syz [ 712.944629][ T24] usb 6-1: Manufacturer: syz [ 712.949381][ T24] usb 6-1: SerialNumber: syz [ 713.380472][T12495] Bluetooth: hci5: command 0x0405 tx timeout [ 714.374723][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.385669][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.402555][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.413636][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.678549][T15131] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 714.796182][T15131] bridge0: port 3(team0) entered disabled state [ 714.805919][T15131] team0: left allmulticast mode [ 714.824383][T15131] team_slave_0: left allmulticast mode [ 714.833304][T15131] team_slave_1: left allmulticast mode [ 714.839922][T15131] team0: left promiscuous mode [ 714.845171][T15131] team_slave_0: left promiscuous mode [ 714.864464][T15131] team_slave_1: left promiscuous mode [ 714.870349][T15131] bridge0: port 3(team0) entered disabled state [ 714.975696][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 714.975712][ T30] audit: type=1400 audit(1757262780.474:30677): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 715.017174][T15131] batman_adv: batadv0: Adding interface: team0 [ 715.025126][T15131] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.054853][ T30] audit: type=1400 audit(1757262780.474:30678): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 715.091595][T15131] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 715.098020][ T24] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 715.117834][ T30] audit: type=1400 audit(1757262780.584:30679): avc: denied { read write } for pid=14882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.155246][ T24] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 715.170329][ T24] usb 6-1: No valid video chain found. [ 715.183284][ T24] usb 6-1: selecting invalid altsetting 0 [ 715.223562][ T30] audit: type=1400 audit(1757262780.584:30680): avc: denied { open } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.248860][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.259424][ T30] audit: type=1400 audit(1757262780.584:30681): avc: denied { ioctl } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 715.268444][ T24] usb 6-1: selecting invalid altsetting 0 [ 715.285453][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.340116][ T24] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 715.498175][ T24] usb 6-1: USB disconnect, device number 2 [ 715.622827][ T30] audit: type=1400 audit(1757262780.584:30682): avc: denied { recv } for pid=5831 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 715.651697][ T30] audit: type=1400 audit(1757262780.604:30683): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 715.693702][ T30] audit: type=1400 audit(1757262780.694:30684): avc: denied { read } for pid=15147 comm="syz.5.2243" name="media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 715.733900][ T30] audit: type=1400 audit(1757262780.694:30685): avc: denied { read open } for pid=15147 comm="syz.5.2243" path="/dev/media0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 715.763750][ T30] audit: type=1400 audit(1757262780.694:30686): avc: denied { create } for pid=15144 comm="syz.4.2242" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 717.761397][T15182] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2252'. [ 717.779308][T15182] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 717.799474][T15182] 0ªX¹¦D: entered allmulticast mode [ 717.806472][T15182] veth0_macvtap: entered allmulticast mode [ 717.831407][T15182] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 717.965059][T15182] hub 1-0:1.0: USB hub found [ 717.977649][T15182] hub 1-0:1.0: 1 port detected [ 719.849126][T15212] macvlan0: entered promiscuous mode [ 719.854543][T15212] bridge0: entered promiscuous mode [ 719.861469][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 720.012556][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 720.012572][ T30] audit: type=1400 audit(1757262785.514:30875): avc: denied { execmem } for pid=15217 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 720.052377][ T30] audit: type=1400 audit(1757262785.554:30876): avc: denied { recv } for pid=5927 comm="kworker/0:8" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 720.085304][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 720.106822][ T30] audit: type=1400 audit(1757262785.584:30877): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 720.132258][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.142207][ T5921] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 720.205583][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.344223][T15220] overlayfs: failed to clone lowerpath [ 720.386268][ T5921] usb 6-1: config 0 descriptor?? [ 720.391884][ T30] audit: type=1400 audit(1757262785.584:30878): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 720.417145][ C0] vkms_vblank_simulate: vblank timer overrun [ 720.488628][ T30] audit: type=1400 audit(1757262785.584:30879): avc: denied { create } for pid=15190 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 720.514142][ T30] audit: type=1400 audit(1757262785.594:30880): avc: denied { setopt } for pid=15190 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 720.536303][ T30] audit: type=1400 audit(1757262785.604:30881): avc: denied { write } for pid=15190 comm="syz.0.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 720.661621][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 720.674606][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 720.725915][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 720.738860][ T30] audit: type=1400 audit(1757262785.604:30882): avc: denied { ioctl } for pid=15202 comm="syz.5.2258" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 720.749518][ T5921] usb 6-1: media controller created [ 720.963363][T15229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.973579][ T30] audit: type=1400 audit(1757262785.634:30883): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 720.998856][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.011147][T15229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.011323][T15206] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 721.032904][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.052930][ T30] audit: type=1400 audit(1757262785.644:30884): avc: denied { ioctl } for pid=15202 comm="syz.5.2258" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 721.614478][ T5921] az6027: usb out operation failed. (-71) [ 721.632941][ T5921] az6027: usb out operation failed. (-71) [ 721.680224][ T5921] stb0899_attach: Driver disabled by Kconfig [ 721.692929][ T5921] az6027: no front-end attached [ 721.692929][ T5921] [ 721.722202][ T5921] az6027: usb out operation failed. (-71) [ 721.727961][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 721.802836][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31 [ 721.869292][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 721.904647][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 721.950256][ T5921] usb 6-1: USB disconnect, device number 3 [ 722.915520][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 723.359705][T15265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.370525][ T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 723.373020][T15265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.550559][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 723.575634][ T43] usb 1-1: config 0 has an invalid interface number: 94 but max is 0 [ 723.590931][ T43] usb 1-1: config 0 has no interface number 0 [ 723.621159][ T43] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90 [ 723.630534][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.638682][ T43] usb 1-1: Product: syz [ 723.668516][ T43] usb 1-1: Manufacturer: syz [ 723.676317][ T43] usb 1-1: SerialNumber: syz [ 723.709549][ T43] usb 1-1: config 0 descriptor?? [ 723.731576][ T43] usb 1-1: unsupported MDLM descriptors [ 723.983776][ T43] usb 1-1: USB disconnect, device number 78 [ 724.229295][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 724.363431][T15283] netlink: 'syz.4.2274': attribute type 26 has an invalid length. [ 724.402770][ T5921] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.414474][ T5921] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 724.546373][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.597393][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.637672][ T5921] usb 6-1: Product: syz [ 724.711521][ T5921] usb 6-1: Manufacturer: syz [ 724.728430][ T5921] usb 6-1: SerialNumber: syz [ 724.765053][ T5921] cdc_mbim 6-1:1.0: skipping garbage [ 724.992846][T15267] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 725.030928][ T5927] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 725.059595][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 725.059611][ T30] audit: type=1400 audit(1757262790.554:31107): avc: denied { recv } for pid=15285 comm="syz.2.2277" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 725.100865][ T30] audit: type=1400 audit(1757262790.594:31108): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 725.287808][ T5927] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 725.296302][ T5927] usb 1-1: config 0 has no interface number 0 [ 725.306115][ T5927] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 725.318280][ T5927] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 725.330177][ T30] audit: type=1400 audit(1757262790.674:31109): avc: denied { ioctl } for pid=15287 comm="syz.0.2278" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 725.357849][ T5927] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.367688][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.380078][ T30] audit: type=1400 audit(1757262790.774:31110): avc: denied { ioctl } for pid=15266 comm="syz.5.2272" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 725.411949][ T5927] usb 1-1: config 0 descriptor?? [ 725.431085][ T30] audit: type=1400 audit(1757262790.774:31111): avc: denied { ioctl } for pid=15287 comm="syz.0.2278" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 725.493171][ T5927] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 725.578190][ T30] audit: type=1400 audit(1757262790.884:31112): avc: denied { create } for pid=15289 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.598807][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.671229][T15288] iowarrior 1-1:0.1: Error -90 while submitting URB [ 725.682240][ T24] usb 1-1: USB disconnect, device number 79 [ 725.719256][ T30] audit: type=1400 audit(1757262790.884:31113): avc: denied { ioctl } for pid=15289 comm="syz.1.2279" path="socket:[55509]" dev="sockfs" ino=55509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.747142][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.798805][ T30] audit: type=1400 audit(1757262790.914:31114): avc: denied { create } for pid=15289 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.826776][ T30] audit: type=1400 audit(1757262790.914:31115): avc: denied { write } for pid=15289 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.847297][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.854625][ T5921] cdc_mbim 6-1:1.0: bind() failure [ 725.862927][ T5921] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 725.881810][ T5921] cdc_ncm 6-1:1.1: bind() failure [ 725.896905][ T5921] usb 6-1: USB disconnect, device number 4 [ 725.905599][T15303] overlayfs: failed to clone upperpath [ 725.937742][ T30] audit: type=1400 audit(1757262790.914:31116): avc: denied { write } for pid=15289 comm="syz.1.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.325305][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.337416][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.001012][ T5921] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 727.175972][ T5921] usb 6-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 727.203743][ T5921] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 727.226350][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.262781][ T5921] usb 6-1: probing VID:PID(2201:012C) [ 727.283908][ T5921] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 727.307171][ T5921] vub300 6-1:64.0: probe with driver vub300 failed with error -22 [ 727.463481][ T24] usb 6-1: USB disconnect, device number 5 [ 728.377327][T15349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=15349 comm=syz.4.2296 [ 728.550724][ T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 728.863043][ T43] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 728.881368][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 728.891322][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.911548][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 728.921323][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 728.945456][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.981895][ T24] usb 1-1: config 0 descriptor?? [ 729.080823][ T43] usb 6-1: config index 0 descriptor too short (expected 7768, got 18) [ 729.089133][ T43] usb 6-1: config 0 has an invalid interface number: 97 but max is 0 [ 729.110029][ T43] usb 6-1: config 0 has no interface number 0 [ 729.444887][T11468] block nbd3: Possible stuck request ffff88808ea15080: control (read@0,1024B). Runtime 90 seconds [ 729.459031][T11468] block nbd3: Possible stuck request ffff88808ea15240: control (read@1024,1024B). Runtime 90 seconds [ 729.469945][T11468] block nbd3: Possible stuck request ffff88808ea15400: control (read@2048,1024B). Runtime 90 seconds [ 729.481908][T11468] block nbd3: Possible stuck request ffff88808ea155c0: control (read@3072,1024B). Runtime 90 seconds [ 729.496101][ T43] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 729.506762][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.522645][ T43] usb 6-1: config 0 descriptor?? [ 729.545063][ T43] ftdi_sio 6-1:0.97: FTDI USB Serial Device converter detected [ 729.553971][ T43] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 729.945150][ T24] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 730.387354][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.396026][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.413177][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 730.413193][ T30] audit: type=1400 audit(1757262795.534:31412): avc: denied { create } for pid=15350 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 730.445986][ T24] usb 1-1: USB disconnect, device number 80 [ 730.549946][ T30] audit: type=1400 audit(1757262795.554:31413): avc: denied { prog_load } for pid=15350 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 730.649636][ T30] audit: type=1400 audit(1757262795.554:31414): avc: denied { bpf } for pid=15350 comm="syz.5.2297" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 730.684924][T15385] fido_id[15385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 730.721538][ T30] audit: type=1400 audit(1757262795.564:31415): avc: denied { write } for pid=15350 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 730.776461][ T30] audit: type=1400 audit(1757262795.564:31416): avc: denied { module_request } for pid=15350 comm="syz.5.2297" kmod="nfnetlink-subsys-128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 730.799153][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.811440][ T30] audit: type=1400 audit(1757262795.664:31417): avc: denied { prog_load } for pid=15350 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 730.830689][ C0] vkms_vblank_simulate: vblank timer overrun [ 730.852731][ T30] audit: type=1400 audit(1757262795.664:31418): avc: denied { bpf } for pid=15350 comm="syz.5.2297" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 730.994324][ T30] audit: type=1400 audit(1757262795.674:31419): avc: denied { perfmon } for pid=15350 comm="syz.5.2297" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 731.015389][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.681310][ T10] usb 6-1: USB disconnect, device number 6 [ 731.688367][ T10] ftdi_sio 6-1:0.97: device disconnected [ 731.843892][T14882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 731.854729][T15408] audit: audit_backlog=65 > audit_backlog_limit=64 [ 732.220642][T15416] 9pnet_virtio: no channels available for device syz [ 732.530718][T15416] overlayfs: failed to clone lowerpath [ 732.989517][T15424] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 734.754560][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.807380][T15433] lo speed is unknown, defaulting to 1000 [ 734.853947][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.894581][T15433] lo speed is unknown, defaulting to 1000 [ 735.430641][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 735.430657][ T30] audit: type=1400 audit(1757262800.934:31615): avc: denied { create } for pid=15448 comm="syz.0.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 735.609730][ T30] audit: type=1400 audit(1757262800.964:31616): avc: denied { read } for pid=15448 comm="syz.0.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 735.678771][ T30] audit: type=1400 audit(1757262800.974:31617): avc: denied { read write } for pid=14882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 735.787223][ T30] audit: type=1400 audit(1757262800.974:31618): avc: denied { open } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 735.894374][ T30] audit: type=1400 audit(1757262800.974:31619): avc: denied { ioctl } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 735.920126][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.065653][ T30] audit: type=1400 audit(1757262801.004:31620): avc: denied { recv } for pid=5220 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 736.348114][ T30] audit: type=1400 audit(1757262801.124:31621): avc: denied { recv } for pid=15456 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 736.471181][ T30] audit: type=1400 audit(1757262801.144:31622): avc: denied { read } for pid=15456 comm="syz.5.2323" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 736.728919][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.735554][ C0] audit: audit_lost=201 audit_rate_limit=0 audit_backlog_limit=64 [ 737.208494][T15433] lo speed is unknown, defaulting to 1000 [ 737.215028][T15488] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 737.274915][T15488] SELinux: failed to load policy [ 737.306171][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2332'. [ 737.373897][T15494] IPVS: set_ctl: invalid protocol: 50 172.30.1.2:20001 [ 737.923517][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 738.211160][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 738.222836][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 738.239772][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.280354][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.288549][ T24] usb 6-1: Product: syz [ 738.313059][ T24] usb 6-1: Manufacturer: syz [ 738.317686][ T24] usb 6-1: SerialNumber: syz [ 738.340683][ T2152] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 738.370125][ T24] usb 6-1: config 0 descriptor?? [ 738.397080][ T24] usb 6-1: selecting invalid altsetting 0 [ 738.511979][ T2152] usb 1-1: Using ep0 maxpacket: 16 [ 738.610508][ T2152] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 738.635761][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 738.660339][ T2152] usb 1-1: Product: syz [ 738.664827][ T2152] usb 1-1: Manufacturer: syz [ 738.676659][ T2152] usb 1-1: SerialNumber: syz [ 738.693467][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.704594][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.721176][ T2152] usb 1-1: config 0 descriptor?? [ 738.775067][T15519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.783811][T15502] trusted_key: encrypted_key: key trusted:‘8s‰X not found [ 738.811927][T15519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.997824][ T2152] usb 1-1: USB disconnect, device number 81 [ 739.236134][ T10] usb 6-1: USB disconnect, device number 7 [ 740.186018][T15536] ucma_write: process 1924 (syz.2.2342) changed security contexts after opening file descriptor, this is not allowed. [ 740.493922][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 740.493941][ T30] audit: type=1400 audit(1757262805.974:31860): avc: denied { create } for pid=15528 comm="syz.0.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 740.548326][T15548] tipc: Enabling not permitted [ 740.620671][T15548] tipc: Enabling of bearer rejected, failed to enable media [ 740.788532][ T30] audit: type=1400 audit(1757262806.034:31861): avc: denied { create } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 740.937084][ T30] audit: type=1400 audit(1757262806.044:31862): avc: denied { prog_load } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 741.070905][ T30] audit: type=1400 audit(1757262806.044:31863): avc: denied { bpf } for pid=15547 comm="syz.4.2346" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 741.083603][T15552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.091849][ T30] audit: type=1400 audit(1757262806.044:31864): avc: denied { perfmon } for pid=15547 comm="syz.4.2346" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 741.091893][ T30] audit: type=1400 audit(1757262806.044:31865): avc: denied { create } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 741.091935][ T30] audit: type=1400 audit(1757262806.044:31866): avc: denied { bind } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 741.091970][ T30] audit: type=1400 audit(1757262806.044:31867): avc: denied { write } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 741.092006][ T30] audit: type=1400 audit(1757262806.044:31868): avc: denied { map_create } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 741.092044][ T30] audit: type=1400 audit(1757262806.044:31869): avc: denied { write } for pid=15547 comm="syz.4.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 741.165036][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.441220][T15552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.333520][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'. [ 745.586619][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 745.586638][ T30] audit: type=1400 audit(1757262810.634:32061): avc: denied { recv } for pid=15600 comm="syz.4.2360" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 745.758475][ T30] audit: type=1400 audit(1757262811.134:32062): avc: denied { recv } for pid=15577 comm="syz.2.2355" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 745.886359][ T30] audit: type=1400 audit(1757262811.234:32063): avc: denied { read write } for pid=14882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.925463][ T30] audit: type=1400 audit(1757262811.234:32064): avc: denied { open } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 745.949715][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.025559][ T30] audit: type=1400 audit(1757262811.234:32065): avc: denied { ioctl } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 746.051329][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.162481][ T30] audit: type=1400 audit(1757262811.244:32066): avc: denied { recv } for pid=5220 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 746.199070][ T30] audit: type=1400 audit(1757262811.354:32067): avc: denied { prog_load } for pid=15608 comm="syz.1.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 746.257838][ T30] audit: type=1400 audit(1757262811.354:32068): avc: denied { bpf } for pid=15608 comm="syz.1.2361" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 746.278601][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.288588][ T30] audit: type=1400 audit(1757262811.364:32069): avc: denied { read } for pid=15606 comm="syz.5.2362" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 746.301241][T15594] syz.0.2356 (15594): drop_caches: 2 [ 746.316964][ T30] audit: type=1400 audit(1757262811.364:32070): avc: denied { open } for pid=15606 comm="syz.5.2362" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 748.400439][T15654] netlink: 'syz.2.2371': attribute type 4 has an invalid length. [ 748.408279][ T2152] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 748.431010][ T43] lo speed is unknown, defaulting to 1000 [ 748.440460][ T43] sz1: Port: 1 Link DOWN [ 748.445521][ T43] lo speed is unknown, defaulting to 1000 [ 748.583142][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 748.594534][ T2152] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 748.606632][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.644730][ T2152] usb 1-1: config 0 descriptor?? [ 748.676591][T15648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 749.524340][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.557621][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.587523][ T2152] ryos 0003:1E7D:3138.0014: unknown main item tag 0x0 [ 749.601773][ T2152] ryos 0003:1E7D:3138.0014: unknown main item tag 0x1 [ 749.610728][ T2152] ryos 0003:1E7D:3138.0014: unknown main item tag 0x0 [ 749.626095][ T2152] ryos 0003:1E7D:3138.0014: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 749.798745][ T2152] libceph: connect (1)[b::]:6789 error -101 [ 749.801258][ T10] usb 1-1: USB disconnect, device number 82 [ 749.850940][ T2152] libceph: mon0 (1)[b::]:6789 connect error [ 750.110880][T15668] ceph: No mds server is up or the cluster is laggy [ 750.156582][T15669] fido_id[15669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 750.177477][ T2152] libceph: connect (1)[b::]:6789 error -101 [ 750.200790][ T2152] libceph: mon0 (1)[b::]:6789 connect error [ 750.595620][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 750.595632][ T30] audit: type=1400 audit(1757262816.094:32316): avc: denied { execmem } for pid=15683 comm="syz.0.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 750.801607][ T30] audit: type=1400 audit(1757262816.294:32317): avc: denied { read write } for pid=15676 comm="syz.5.2378" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 750.877306][ T30] audit: type=1400 audit(1757262816.294:32318): avc: denied { open } for pid=15676 comm="syz.5.2378" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 750.956369][ T30] audit: type=1400 audit(1757262816.294:32319): avc: denied { map } for pid=15676 comm="syz.5.2378" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 751.066658][ T30] audit: type=1400 audit(1757262816.404:32320): avc: denied { read } for pid=15676 comm="syz.5.2378" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 751.170193][ T30] audit: type=1400 audit(1757262816.404:32321): avc: denied { open } for pid=15676 comm="syz.5.2378" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 751.194758][ T30] audit: type=1400 audit(1757262816.414:32322): avc: denied { ioctl } for pid=15676 comm="syz.5.2378" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 751.223564][ T30] audit: type=1400 audit(1757262816.664:32323): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.245405][T15693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.252023][ T30] audit: type=1400 audit(1757262816.664:32325): avc: denied { recv } for pid=5843 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 751.264330][T15691] overlayfs: failed to clone upperpath [ 751.287428][ T30] audit: type=1400 audit(1757262816.664:32324): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.312923][T15693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.257133][T15739] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 753.266644][T15739] CPU: 1 UID: 0 PID: 15739 Comm: syz.0.2394 Not tainted syzkaller #0 PREEMPT(full) [ 753.266662][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 753.266669][T15739] Call Trace: [ 753.266673][T15739] [ 753.266678][T15739] dump_stack_lvl+0x16c/0x1f0 [ 753.266698][T15739] sysfs_warn_dup+0x7f/0xa0 [ 753.266714][T15739] sysfs_do_create_link_sd+0x124/0x140 [ 753.266730][T15739] sysfs_create_link+0x61/0xc0 [ 753.266745][T15739] device_add+0x62c/0x1aa0 [ 753.266763][T15739] ? __pfx_device_add+0x10/0x10 [ 753.266778][T15739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 753.266791][T15739] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 753.266806][T15739] wiphy_register+0x1df4/0x29f0 [ 753.266824][T15739] ? netdev_run_todo+0x864/0x1320 [ 753.266839][T15739] ? __dev_printk+0x270/0x270 [ 753.266854][T15739] ? __pfx_wiphy_register+0x10/0x10 [ 753.266872][T15739] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 753.266889][T15739] ieee80211_register_hw+0x2546/0x4120 [ 753.266910][T15739] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 753.266927][T15739] ? find_held_lock+0x2b/0x80 [ 753.266942][T15739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 753.266955][T15739] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 753.266967][T15739] ? __hrtimer_setup+0x176/0x280 [ 753.266980][T15739] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 753.267004][T15739] ? trace_kmalloc+0x2b/0xd0 [ 753.267016][T15739] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 753.267032][T15739] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 753.267048][T15739] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 753.267064][T15739] ? __asan_memcpy+0x3c/0x60 [ 753.267081][T15739] hwsim_new_radio_nl+0xb51/0x12c0 [ 753.267099][T15739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 753.267120][T15739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 753.267137][T15739] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 753.267156][T15739] genl_family_rcv_msg_doit+0x206/0x2f0 [ 753.267173][T15739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 753.267193][T15739] ? bpf_lsm_capable+0x9/0x10 [ 753.267208][T15739] ? security_capable+0x7e/0x260 [ 753.267221][T15739] ? ns_capable+0xd7/0x110 [ 753.267235][T15739] genl_rcv_msg+0x55c/0x800 [ 753.267252][T15739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 753.267268][T15739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 753.267289][T15739] netlink_rcv_skb+0x155/0x420 [ 753.267302][T15739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 753.267318][T15739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.267338][T15739] ? netlink_deliver_tap+0x1ae/0xd30 [ 753.267353][T15739] genl_rcv+0x28/0x40 [ 753.267367][T15739] netlink_unicast+0x5aa/0x870 [ 753.267382][T15739] ? __pfx_netlink_unicast+0x10/0x10 [ 753.267396][T15739] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 753.267415][T15739] netlink_sendmsg+0x8d1/0xdd0 [ 753.267431][T15739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.267451][T15739] ____sys_sendmsg+0xa98/0xc70 [ 753.267467][T15739] ? copy_msghdr_from_user+0x10a/0x160 [ 753.267480][T15739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.267503][T15739] ___sys_sendmsg+0x134/0x1d0 [ 753.267516][T15739] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.267548][T15739] __sys_sendmsg+0x16d/0x220 [ 753.267561][T15739] ? __pfx___sys_sendmsg+0x10/0x10 [ 753.267579][T15739] ? __secure_computing+0x28e/0x3b0 [ 753.267597][T15739] do_syscall_64+0xcd/0x4c0 [ 753.267612][T15739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.267623][T15739] RIP: 0033:0x7f944738ebe9 [ 753.267633][T15739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.267643][T15739] RSP: 002b:00007f9448267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.267654][T15739] RAX: ffffffffffffffda RBX: 00007f94475c6090 RCX: 00007f944738ebe9 [ 753.267660][T15739] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 753.267667][T15739] RBP: 00007f9447411e19 R08: 0000000000000000 R09: 0000000000000000 [ 753.267673][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.267679][T15739] R13: 00007f94475c6128 R14: 00007f94475c6090 R15: 00007ffe0dc688a8 [ 753.267693][T15739] [ 754.991187][T15739] loop4: detected capacity change from 0 to 63 [ 755.014187][ T6736] buffer_io_error: 324 callbacks suppressed [ 755.014198][ T6736] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.363197][ T6736] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.381734][ T6736] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.482003][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 755.498061][ T6736] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.508808][ T6736] Buffer I/O error on dev loop4, logical block 0, async page read [ 755.657792][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 755.666503][ T30] audit: type=1400 audit(1757262821.142:32574): avc: denied { recv } for pid=15749 comm="syz.2.2397" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 755.813843][ T30] audit: type=1326 audit(1757262821.302:32575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f944738e7eb code=0x7ffc0000 [ 755.821967][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 756.291713][ T30] audit: type=1400 audit(1757262821.302:32576): avc: denied { ioctl } for pid=15735 comm="syz.0.2394" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 756.316750][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.403330][ T30] audit: type=1400 audit(1757262821.382:32577): avc: denied { create } for pid=15756 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 756.424977][ T10] usb 1-1: device descriptor read/all, error -71 [ 756.441064][ T30] audit: type=1400 audit(1757262821.382:32578): avc: denied { write } for pid=15756 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 756.461580][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.477991][ T30] audit: type=1400 audit(1757262821.382:32579): avc: denied { read } for pid=15756 comm="syz.5.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 756.500584][ T30] audit: type=1400 audit(1757262821.652:32580): avc: denied { recv } for pid=15756 comm="syz.5.2398" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 756.528798][ T30] audit: type=1326 audit(1757262821.722:32581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.0.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f944738e7eb code=0x7ffc0000 [ 756.620873][ T30] audit: type=1400 audit(1757262821.722:32582): avc: denied { ioctl } for pid=15735 comm="syz.0.2394" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 756.645936][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.748314][ T30] audit: type=1400 audit(1757262822.072:32583): avc: denied { recv } for pid=5831 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 757.027183][T15774] lo speed is unknown, defaulting to 1000 [ 757.035646][T15774] lo speed is unknown, defaulting to 1000 [ 757.221429][T15780] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 758.653861][ T5927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 758.798538][T15774] lo speed is unknown, defaulting to 1000 [ 758.799706][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2407'. [ 758.832506][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 758.886349][ T5927] usb 6-1: unable to get BOS descriptor or descriptor too short [ 758.906409][ T5927] usb 6-1: config 8 has an invalid interface number: 24 but max is 0 [ 758.916653][ T5927] usb 6-1: config 8 has no interface number 0 [ 758.923420][ T5927] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 758.936584][ T5927] usb 6-1: config 8 interface 24 has no altsetting 0 [ 758.972644][ T5927] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 758.984646][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.003700][ T5927] usb 6-1: Product: syz [ 759.013319][ T5927] usb 6-1: Manufacturer: syz [ 759.036952][ T5927] usb 6-1: SerialNumber: syz [ 760.038570][T11468] block nbd3: Possible stuck request ffff88808ea15080: control (read@0,1024B). Runtime 120 seconds [ 760.146126][T11468] block nbd3: Possible stuck request ffff88808ea15240: control (read@1024,1024B). Runtime 120 seconds [ 760.161047][T11468] block nbd3: Possible stuck request ffff88808ea15400: control (read@2048,1024B). Runtime 120 seconds [ 760.172356][T11468] block nbd3: Possible stuck request ffff88808ea155c0: control (read@3072,1024B). Runtime 120 seconds [ 760.664435][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 760.664451][ T30] audit: type=1400 audit(1757262826.162:32714): avc: denied { ioctl } for pid=15787 comm="syz.0.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 760.696092][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.730737][ T2152] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 760.740003][ T30] audit: type=1400 audit(1757262826.232:32715): avc: denied { ioctl } for pid=15787 comm="syz.0.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 760.765047][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.954462][ T2152] usb 1-1: not running at top speed; connect to a high speed hub [ 760.980907][ T2152] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.017599][ T2152] usb 1-1: config 1 interface 0 has no altsetting 0 [ 761.072305][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 761.082914][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.095556][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.106865][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.126734][ T30] audit: type=1400 audit(1757262826.342:32716): avc: denied { ioctl } for pid=15787 comm="syz.0.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 761.133850][ T2152] usb 1-1: Product: syz [ 761.221391][ T5927] vmk80xx 6-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 761.240105][ T2152] usb 1-1: SerialNumber: syz [ 761.292029][ T5927] usb 6-1: USB disconnect, device number 8 [ 761.428714][ T30] audit: type=1400 audit(1757262826.412:32717): avc: denied { recv } for pid=5831 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.492516][T15805] befs: (nullb0): No write support. Marking filesystem read-only [ 761.557489][ T2152] usbhid 1-1:1.0: can't add hid device: -71 [ 761.565407][ T2152] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 761.627895][T15805] befs: (nullb0): invalid magic header [ 761.648291][ T30] audit: type=1400 audit(1757262826.412:32718): avc: denied { recv } for pid=5843 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 761.677133][ T2152] usb 1-1: USB disconnect, device number 85 [ 761.728448][ T30] audit: type=1400 audit(1757262826.442:32719): avc: denied { read write } for pid=5843 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.765380][T15805] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2410'. [ 761.813868][ T30] audit: type=1400 audit(1757262826.442:32720): avc: denied { read write open } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.914451][ T30] audit: type=1400 audit(1757262826.442:32721): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 761.941062][ T30] audit: type=1400 audit(1757262826.452:32722): avc: denied { ioctl } for pid=15787 comm="syz.0.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 761.971627][ T30] audit: type=1400 audit(1757262826.472:32723): avc: denied { ioctl } for pid=15787 comm="syz.0.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 764.024340][T15831] o2cb: This node has not been configured. [ 764.030176][T15831] o2cb: Cluster check failed. Fix errors before retrying. [ 764.037372][T15831] (syz.1.2417,15831,1):user_dlm_register:674 ERROR: status = -22 [ 764.045121][T15831] (syz.1.2417,15831,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 765.698194][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 765.698205][ T30] audit: type=1400 audit(1757262831.192:32870): avc: denied { read write } for pid=15842 comm="syz.0.2421" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 765.728559][ C0] vkms_vblank_simulate: vblank timer overrun [ 766.079688][ T30] audit: type=1400 audit(1757262831.292:32871): avc: denied { create } for pid=15837 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.162167][ T30] audit: type=1400 audit(1757262831.302:32872): avc: denied { write } for pid=15837 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.243150][ T30] audit: type=1400 audit(1757262831.302:32873): avc: denied { read } for pid=15837 comm="syz.1.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 766.285096][ T30] audit: type=1400 audit(1757262831.562:32874): avc: denied { read write open } for pid=15842 comm="syz.0.2421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.339762][ T30] audit: type=1400 audit(1757262831.562:32875): avc: denied { ioctl } for pid=15842 comm="syz.0.2421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.384209][ T30] audit: type=1400 audit(1757262831.642:32876): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.418158][ T30] audit: type=1400 audit(1757262831.652:32877): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.448693][ T2152] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 766.457435][ T30] audit: type=1400 audit(1757262831.662:32878): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 766.458537][ T30] audit: type=1400 audit(1757262831.702:32879): avc: denied { ioctl } for pid=15842 comm="syz.0.2421" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 766.850348][ T2152] usb 1-1: Using ep0 maxpacket: 32 [ 767.211727][ T2152] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 767.220922][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.532743][ T2152] usb 1-1: config 0 descriptor?? [ 767.562302][ T2152] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 768.124620][T15874] FAULT_INJECTION: forcing a failure. [ 768.124620][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 768.137771][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.5.2429 Not tainted syzkaller #0 PREEMPT(full) [ 768.137795][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 768.137805][T15874] Call Trace: [ 768.137812][T15874] [ 768.137820][T15874] dump_stack_lvl+0x16c/0x1f0 [ 768.137848][T15874] should_fail_ex+0x512/0x640 [ 768.137875][T15874] _copy_from_user+0x2e/0xd0 [ 768.137901][T15874] __sys_bpf+0x21d/0x4de0 [ 768.137929][T15874] ? __pfx___sys_bpf+0x10/0x10 [ 768.137952][T15874] ? __pfx___schedule+0x10/0x10 [ 768.137979][T15874] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 768.138003][T15874] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.138047][T15874] __x64_sys_bpf+0x78/0xc0 [ 768.138070][T15874] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.138091][T15874] do_syscall_64+0xcd/0x4c0 [ 768.138115][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.138134][T15874] RIP: 0033:0x7f282c58ebe9 [ 768.138148][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.138166][T15874] RSP: 002b:00007f282d3b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.138184][T15874] RAX: ffffffffffffffda RBX: 00007f282c7c6180 RCX: 00007f282c58ebe9 [ 768.138195][T15874] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 768.138205][T15874] RBP: 00007f282d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 768.138216][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.138227][T15874] R13: 00007f282c7c6218 R14: 00007f282c7c6180 R15: 00007ffd92d8f038 [ 768.138251][T15874] [ 768.363653][ T5921] usb 1-1: USB disconnect, device number 86 [ 768.489721][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.504992][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.870097][T15902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 771.016422][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 771.016440][ T30] audit: type=1400 audit(1757262835.892:33032): avc: denied { prog_load } for pid=15903 comm="syz.2.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 771.085617][ T30] audit: type=1400 audit(1757262835.902:33033): avc: denied { bpf } for pid=15903 comm="syz.2.2437" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.269191][ T30] audit: type=1400 audit(1757262835.902:33034): avc: denied { perfmon } for pid=15903 comm="syz.2.2437" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.331147][ T30] audit: type=1400 audit(1757262835.902:33035): avc: denied { bpf } for pid=15903 comm="syz.2.2437" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 771.376692][ T30] audit: type=1400 audit(1757262835.912:33036): avc: denied { prog_run } for pid=15903 comm="syz.2.2437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 771.461974][ T30] audit: type=1400 audit(1757262836.052:33037): avc: denied { read append } for pid=15903 comm="syz.2.2437" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.489586][ T30] audit: type=1400 audit(1757262836.052:33038): avc: denied { open } for pid=15903 comm="syz.2.2437" path="/dev/comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.513011][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.523495][ T30] audit: type=1400 audit(1757262836.062:33039): avc: denied { ioctl } for pid=15903 comm="syz.2.2437" path="/dev/comedi2" dev="devtmpfs" ino=1278 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 771.535171][ T5220] udevd[5220]: worker [6262] /devices/virtual/block/nbd3 is taking a long time [ 771.548353][ C0] vkms_vblank_simulate: vblank timer overrun [ 771.617817][T15935] random: crng reseeded on system resumption [ 771.659327][T15936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 771.696344][ T30] audit: type=1400 audit(1757262836.062:33040): avc: denied { read } for pid=15903 comm="syz.2.2437" dev="nsfs" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 771.738832][ T30] audit: type=1400 audit(1757262836.062:33041): avc: denied { open } for pid=15903 comm="syz.2.2437" path="net:[4026532789]" dev="nsfs" ino=4026532789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 771.762274][ C0] vkms_vblank_simulate: vblank timer overrun [ 772.863251][T15953] dvmrp0: entered allmulticast mode [ 773.057248][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 773.549749][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2450'. [ 773.559491][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2450'. [ 773.644202][ T5921] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 773.679579][ T5921] usb 6-1: config 1 has no interface number 0 [ 773.753712][ T5921] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 773.766779][ T5921] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 773.778097][ T5921] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 773.789428][ T5921] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.933627][ T5921] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 773.943493][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.952725][ T5921] usb 6-1: Product: syz [ 773.956862][ T5921] usb 6-1: Manufacturer: syz [ 773.964097][ T5921] usb 6-1: SerialNumber: syz [ 774.575381][T15951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 774.584864][T15951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 774.642067][T15968] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.2452'. [ 774.864248][T15951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 774.877939][T15951] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 775.135885][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2455'. [ 775.153167][T15951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.162468][T15951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.170737][ T5921] usb 6-1: Incompatible driver and firmware versions [ 775.186767][ T5921] usb 6-1: USB disconnect, device number 9 [ 775.756233][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2459'. [ 776.027001][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 776.027017][ T30] audit: type=1400 audit(1757262841.522:33290): avc: denied { ioctl } for pid=16005 comm="syz.0.2462" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 776.085841][ T30] audit: type=1400 audit(1757262841.532:33291): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.112774][ T30] audit: type=1400 audit(1757262841.532:33292): avc: denied { recv } for pid=5209 comm="klogd" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.239605][ T30] audit: type=1400 audit(1757262841.562:33293): avc: denied { create } for pid=16004 comm="syz.5.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 776.240653][ T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 776.261108][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.458270][ T30] audit: type=1400 audit(1757262841.572:33294): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.591184][ T30] audit: type=1400 audit(1757262841.572:33295): avc: denied { recv } for pid=5855 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 776.617528][ T30] audit: type=1400 audit(1757262841.582:33296): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 777.054276][ T30] audit: type=1400 audit(1757262841.582:33297): avc: denied { map_create } for pid=16008 comm="syz.1.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 777.371847][ T30] audit: type=1400 audit(1757262841.612:33298): avc: denied { prog_load } for pid=16008 comm="syz.1.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 777.513816][T16020] bridge3: entered promiscuous mode [ 777.594784][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 777.673627][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 777.684046][ T10] usb 1-1: config 2 has an invalid interface number: 202 but max is 0 [ 777.693790][ T10] usb 1-1: config 2 has no interface number 0 [ 777.708500][ T10] usb 1-1: config 2 interface 202 has no altsetting 0 [ 777.716570][ T30] audit: type=1400 audit(1757262841.612:33299): avc: denied { bpf } for pid=16008 comm="syz.1.2463" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 777.740031][ T10] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= f.ae [ 777.749585][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.758540][ T10] usb 1-1: Product: syz [ 777.764089][ T10] usb 1-1: Manufacturer: syz [ 777.774309][ T10] usb 1-1: SerialNumber: syz [ 778.018654][T16031] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 778.373904][T16031] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 778.932612][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2462'. [ 779.003681][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2469'. [ 779.092763][ T10] pegasus 1-1:2.202: probe with driver pegasus failed with error -71 [ 779.123342][ T10] usb 1-1: USB disconnect, device number 87 [ 780.325694][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.336889][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.573355][T16091] bridge_slave_0: left allmulticast mode [ 780.579125][T16091] bridge_slave_0: left promiscuous mode [ 780.586015][T16091] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.608819][T16091] bridge_slave_1: left allmulticast mode [ 780.614667][T16091] bridge_slave_1: left promiscuous mode [ 780.620951][T16091] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.642680][T16091] bond0: (slave bond_slave_0): Releasing backup interface [ 780.656287][T16091] bond0: (slave bond_slave_1): Releasing backup interface [ 780.671944][T16081] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2478'. [ 780.694094][T16091] team0: Port device team_slave_0 removed [ 780.722911][T16091] team0: Port device team_slave_1 removed [ 780.729117][T16091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.737167][T16091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.745621][T16091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.753676][T16091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.787695][T16081] 1ªX¹¦D: renamed from 30ªX¹¦D (while UP) [ 780.824255][T16081] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 781.031050][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 781.031067][ T30] audit: type=1400 audit(1757262846.532:33543): avc: denied { create } for pid=16097 comm="syz.0.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.063811][ T30] audit: type=1400 audit(1757262846.562:33544): avc: denied { create } for pid=16097 comm="syz.0.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 781.162780][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'. [ 781.231355][ T30] audit: type=1400 audit(1757262846.582:33545): avc: denied { read } for pid=16097 comm="syz.0.2482" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.254332][ T30] audit: type=1400 audit(1757262846.582:33546): avc: denied { open } for pid=16097 comm="syz.0.2482" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.362302][ T30] audit: type=1400 audit(1757262846.592:33547): avc: denied { ioctl } for pid=16097 comm="syz.0.2482" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.424299][ T30] audit: type=1400 audit(1757262846.602:33548): avc: denied { read write } for pid=16097 comm="syz.0.2482" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.428526][T16105] netlink: 424 bytes leftover after parsing attributes in process `syz.1.2484'. [ 781.447633][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.455541][ T30] audit: type=1400 audit(1757262846.602:33549): avc: denied { open } for pid=16097 comm="syz.0.2482" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.490050][ T30] audit: type=1400 audit(1757262846.602:33550): avc: denied { ioctl } for pid=16097 comm="syz.0.2482" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.514740][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.525020][ T30] audit: type=1400 audit(1757262846.602:33551): avc: denied { recv } for pid=5848 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 781.550554][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.566079][ T30] audit: type=1400 audit(1757262846.602:33552): avc: denied { recv } for pid=5848 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 781.697360][T16109] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 781.708224][T16109] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 781.814764][T16114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.850050][T16114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.153885][T16125] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 783.686783][T16159] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2495'. [ 784.884763][T16180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2499'. [ 785.098207][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 785.203600][T16190] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 786.285653][ T30] kauditd_printk_skb: 429 callbacks suppressed [ 786.285666][ T30] audit: type=1400 audit(1757262851.672:33983): avc: denied { create } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 786.423383][ T30] audit: type=1400 audit(1757262851.682:33984): avc: denied { write } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 786.453099][ T30] audit: type=1400 audit(1757262851.682:33985): avc: denied { read } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 786.475992][ T30] audit: type=1400 audit(1757262851.682:33986): avc: denied { ioctl } for pid=16176 comm="syz.5.2498" path="socket:[58155]" dev="sockfs" ino=58155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 786.511852][ T30] audit: type=1400 audit(1757262851.682:33987): avc: denied { read } for pid=16176 comm="syz.5.2498" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 786.622121][ T30] audit: type=1400 audit(1757262851.682:33988): avc: denied { open } for pid=16176 comm="syz.5.2498" path="net:[4026533901]" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 786.736055][ T30] audit: type=1400 audit(1757262851.682:33989): avc: denied { create } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 786.757441][ T30] audit: type=1400 audit(1757262851.682:33990): avc: denied { bind } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 786.777428][ C0] vkms_vblank_simulate: vblank timer overrun [ 786.780422][T11574] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.793507][ T30] audit: type=1400 audit(1757262851.682:33991): avc: denied { create } for pid=16176 comm="syz.5.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 786.814783][T11574] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.883608][T12495] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 786.884283][T11574] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.918601][ T30] audit: type=1400 audit(1757262851.682:33992): avc: denied { read write } for pid=16176 comm="syz.5.2498" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 787.018659][T11574] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.263704][T16242] tipc: Started in network mode [ 788.286987][T16242] tipc: Node identity 22b22835a871, cluster identity 4711 [ 788.299758][T16242] tipc: Enabled bearer , priority 0 [ 788.308214][T16242] syzkaller0: entered promiscuous mode [ 788.314683][T16242] syzkaller0: entered allmulticast mode [ 788.529793][T16257] tipc: Resetting bearer [ 788.794871][T16257] 9pnet_fd: Insufficient options for proto=fd [ 788.995190][T16239] tipc: Resetting bearer [ 789.046491][T16239] tipc: Disabling bearer [ 789.670956][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 789.831304][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 789.839360][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.035014][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 790.073891][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 790.146195][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 790.254593][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 790.323303][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 790.374689][ T10] usb 6-1: Manufacturer: syz [ 790.419316][ T10] usb 6-1: config 0 descriptor?? [ 790.492632][T15910] block nbd3: Possible stuck request ffff88808ea15080: control (read@0,1024B). Runtime 150 seconds [ 790.503492][T15910] block nbd3: Possible stuck request ffff88808ea15240: control (read@1024,1024B). Runtime 150 seconds [ 790.516440][T15910] block nbd3: Possible stuck request ffff88808ea15400: control (read@2048,1024B). Runtime 150 seconds [ 790.527560][T15910] block nbd3: Possible stuck request ffff88808ea155c0: control (read@3072,1024B). Runtime 150 seconds [ 790.645539][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.655257][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.665050][ T10] usb 6-1: USB disconnect, device number 10 [ 790.795647][T16312] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2522'. [ 791.298862][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 791.298882][ T30] audit: type=1400 audit(1757262856.772:34437): avc: denied { execmem } for pid=16300 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 791.455755][ T30] audit: type=1800 audit(1757262856.772:34438): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2521" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 791.477149][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.581000][ T30] audit: type=1400 audit(1757262856.782:34439): avc: denied { create } for pid=16300 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 791.611097][ T30] audit: type=1400 audit(1757262856.832:34440): avc: denied { read } for pid=16319 comm="syz.2.2523" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 791.647276][T16337] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 791.713117][T16337] bond1: entered promiscuous mode [ 791.719922][ T30] audit: type=1400 audit(1757262856.832:34441): avc: denied { open } for pid=16319 comm="syz.2.2523" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 791.743163][ C0] vkms_vblank_simulate: vblank timer overrun [ 791.764541][T16337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.786164][T16341] overlayfs: failed to clone upperpath [ 791.832933][ T30] audit: type=1400 audit(1757262856.832:34442): avc: denied { read write } for pid=16319 comm="syz.2.2523" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 791.842704][T16336] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.870702][T16342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.904179][T16329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 791.912529][T16340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.919224][T16342] audit: audit_lost=207 audit_rate_limit=0 audit_backlog_limit=64 [ 791.963632][T16340] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 792.096279][T16340] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 792.154913][T16340] bond1: (slave vcan0): making interface the new active one [ 792.165140][T16340] vcan0: entered promiscuous mode [ 792.177675][T16340] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 792.995913][T16369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.015426][T16369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.066878][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 793.149298][T16369] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2534'. [ 794.244776][T16393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2540'. [ 794.374300][T16393] openvswitch: netlink: IP tunnel dst address not specified [ 794.415827][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 795.676588][T16413] Can't find a SQUASHFS superblock on nullb0 [ 795.692425][T16418] fuse: Bad value for 'fd' [ 795.946145][T16421] block nbd2: Send control failed (result -22) [ 795.985212][T16421] block nbd2: Request send failed, requeueing [ 796.420569][ T30] kauditd_printk_skb: 518 callbacks suppressed [ 796.420590][ T30] audit: type=1400 audit(1757262861.702:34755): avc: denied { recv } for pid=16417 comm="syz.4.2546" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.452783][ T11] block nbd2: Dead connection, failed to find a fallback [ 796.459876][ T11] block nbd2: shutting down sockets [ 796.465561][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 796.486687][ T30] audit: type=1400 audit(1757262861.982:34756): avc: denied { map } for pid=16390 comm="syz.5.2541" path="socket:[58596]" dev="sockfs" ino=58596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 796.511135][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.547969][ T30] audit: type=1400 audit(1757262861.982:34757): avc: denied { read } for pid=16390 comm="syz.5.2541" path="socket:[58596]" dev="sockfs" ino=58596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 796.580936][ T30] audit: type=1400 audit(1757262862.022:34758): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 796.670909][ T30] audit: type=1400 audit(1757262862.032:34759): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.695161][ C0] vkms_vblank_simulate: vblank timer overrun [ 796.711397][ T30] audit: type=1400 audit(1757262862.032:34760): avc: denied { read write open } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.828253][ T30] audit: type=1400 audit(1757262862.042:34761): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 796.858768][ T30] audit: type=1400 audit(1757262862.082:34762): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 797.186838][T16437] o2cb: This node has not been configured. [ 797.192770][T16437] o2cb: Cluster check failed. Fix errors before retrying. [ 797.199877][T16437] (syz.0.2548,16437,1):user_dlm_register:674 ERROR: status = -22 [ 797.207683][T16437] (syz.0.2548,16437,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 797.237574][ T30] audit: type=1400 audit(1757262862.212:34763): avc: denied { recv } for pid=10 comm="kworker/0:1" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 797.262975][ C0] vkms_vblank_simulate: vblank timer overrun [ 797.277842][ T30] audit: type=1400 audit(1757262862.212:34764): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 798.118075][T16464] netlink: 'syz.4.2556': attribute type 11 has an invalid length. [ 798.917417][T16472] rdma_rxe: rxe_newlink: failed to add lo [ 799.664656][T16484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.673931][T16484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.040855][T16494] atomic_op ffff888034cab998 conn xmit_atomic 0000000000000000 [ 800.053482][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 801.546862][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 801.546881][ T30] audit: type=1400 audit(1757262866.952:35012): avc: denied { execmem } for pid=16515 comm="syz.4.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 801.588330][ T30] audit: type=1400 audit(1757262867.082:35013): avc: denied { create } for pid=16510 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 801.609056][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.615108][T16518] lo speed is unknown, defaulting to 1000 [ 801.626869][T16518] lo speed is unknown, defaulting to 1000 [ 801.688288][ T30] audit: type=1400 audit(1757262867.082:35014): avc: denied { write } for pid=16510 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 801.708863][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.722066][ T30] audit: type=1400 audit(1757262867.082:35015): avc: denied { read } for pid=16510 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 801.742554][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.751100][ T30] audit: type=1400 audit(1757262867.082:35016): avc: denied { read write } for pid=16510 comm="syz.2.2568" name="video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.065280][T16518] lo speed is unknown, defaulting to 1000 [ 802.202610][ T30] audit: type=1400 audit(1757262867.082:35017): avc: denied { open } for pid=16510 comm="syz.2.2568" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.226382][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.240845][ T30] audit: type=1400 audit(1757262867.082:35018): avc: denied { ioctl } for pid=16510 comm="syz.2.2568" path="/dev/video4" dev="devtmpfs" ino=936 ioctlcmd=0x5668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 802.265875][ C0] vkms_vblank_simulate: vblank timer overrun [ 802.350145][ T30] audit: type=1400 audit(1757262867.082:35019): avc: denied { create } for pid=16510 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 802.471685][ T30] audit: type=1400 audit(1757262867.082:35020): avc: denied { setopt } for pid=16510 comm="syz.2.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 802.548795][ T30] audit: type=1400 audit(1757262867.132:35021): avc: denied { prog_load } for pid=16515 comm="syz.4.2569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 803.009546][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 803.180708][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 803.326329][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.411806][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.477261][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 803.656333][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.683881][ T24] usb 6-1: config 0 descriptor?? [ 804.447139][ T24] koneplus 0003:1E7D:2D51.0015: invalid report_size 57404731 [ 804.470809][ T24] koneplus 0003:1E7D:2D51.0015: item 0 4 1 7 parsing failed [ 804.478729][ T24] koneplus 0003:1E7D:2D51.0015: parse failed [ 804.484855][ T24] koneplus 0003:1E7D:2D51.0015: probe with driver koneplus failed with error -22 [ 805.372517][T16571] ALSA: mixer_oss: invalid OSS volume '' [ 805.390391][T16571] netlink: 'syz.0.2584': attribute type 8 has an invalid length. [ 806.580335][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 806.580353][ T30] audit: type=1400 audit(1757262871.872:35215): avc: denied { write } for pid=16583 comm="syz.4.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 806.682758][ T30] audit: type=1400 audit(1757262871.872:35216): avc: denied { map_create } for pid=16583 comm="syz.4.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 806.709571][ T30] audit: type=1400 audit(1757262871.872:35217): avc: denied { perfmon } for pid=16583 comm="syz.4.2588" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 807.114034][ T30] audit: type=1400 audit(1757262872.232:35218): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 807.407080][ T30] audit: type=1400 audit(1757262872.262:35219): avc: denied { prog_load } for pid=16582 comm="syz.0.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 807.426298][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.500878][ T30] audit: type=1400 audit(1757262872.262:35220): avc: denied { bpf } for pid=16582 comm="syz.0.2587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 807.641839][ T30] audit: type=1400 audit(1757262872.292:35221): avc: denied { read append } for pid=16582 comm="syz.0.2587" name="v4l-subdev4" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.729817][ T43] usb 6-1: USB disconnect, device number 11 [ 807.759107][ T30] audit: type=1400 audit(1757262872.292:35222): avc: denied { open } for pid=16582 comm="syz.0.2587" path="/dev/v4l-subdev4" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.888594][ T30] audit: type=1400 audit(1757262872.302:35223): avc: denied { ioctl } for pid=16582 comm="syz.0.2587" path="/dev/v4l-subdev4" dev="devtmpfs" ino=944 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.913757][ C0] vkms_vblank_simulate: vblank timer overrun [ 807.925113][T16607] hfsplus: unable to find HFS+ superblock [ 807.989311][ T30] audit: type=1400 audit(1757262872.302:35224): avc: denied { create } for pid=16582 comm="syz.0.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 808.009955][ C0] vkms_vblank_simulate: vblank timer overrun [ 808.481327][T16607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 808.495295][T16607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2592'. [ 808.546344][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2594'. [ 808.647835][T16615] macsec1: entered allmulticast mode [ 808.659463][T16607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.660373][T16615] bridge0: entered allmulticast mode [ 808.708629][T16607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.709956][T16615] bridge0: port 1(macsec1) entered blocking state [ 808.728455][T16615] bridge0: port 1(macsec1) entered disabled state [ 808.841918][T16615] bridge0: left allmulticast mode [ 809.407957][T16633] overlayfs: failed to resolve './file0': -2 [ 809.768292][T16618] ALSA: mixer_oss: invalid OSS volume '' [ 809.845916][T16618] ALSA: mixer_oss: invalid OSS volume '' [ 810.645465][T16646] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2603'. [ 811.512794][T16656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.530634][T16656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.600100][ T30] kauditd_printk_skb: 209 callbacks suppressed [ 811.600112][ T30] audit: type=1400 audit(1757262877.082:35435): avc: denied { create } for pid=16657 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 811.769852][ T30] audit: type=1400 audit(1757262877.082:35436): avc: denied { create } for pid=16657 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 811.845725][ T30] audit: type=1400 audit(1757262877.082:35437): avc: denied { read } for pid=16657 comm="syz.0.2606" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.927370][ T30] audit: type=1400 audit(1757262877.082:35438): avc: denied { open } for pid=16657 comm="syz.0.2606" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 811.951824][T16663] netlink: 'syz.5.2607': attribute type 10 has an invalid length. [ 811.960300][T16663] netem: change failed [ 812.037179][ T30] audit: type=1400 audit(1757262877.082:35439): avc: denied { ioctl } for pid=16657 comm="syz.0.2606" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 812.208862][ T30] audit: type=1400 audit(1757262877.072:35433): avc: denied { read write } for pid=14882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.617442][ T30] audit: type=1400 audit(1757262877.122:35440): avc: denied { read write open } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.858738][ T30] audit: type=1400 audit(1757262877.122:35441): avc: denied { ioctl } for pid=14882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.267570][ T30] audit: type=1400 audit(1757262877.182:35442): avc: denied { create } for pid=16657 comm="syz.0.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 813.405037][T16681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 815.581772][T16707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.601637][T16707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.346045][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.375061][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.603525][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 821.603545][ T30] audit: type=1400 audit(1757262882.222:35635): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 821.742346][T15910] block nbd3: Possible stuck request ffff88808ea15080: control (read@0,1024B). Runtime 180 seconds [ 821.753107][T15910] block nbd3: Possible stuck request ffff88808ea15240: control (read@1024,1024B). Runtime 180 seconds [ 821.764098][T15910] block nbd3: Possible stuck request ffff88808ea15400: control (read@2048,1024B). Runtime 180 seconds [ 821.775069][T15910] block nbd3: Possible stuck request ffff88808ea155c0: control (read@3072,1024B). Runtime 180 seconds [ 821.898737][ T30] audit: type=1400 audit(1757262883.722:35636): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 821.923846][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.932522][ T30] audit: type=1400 audit(1757262886.222:35637): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 821.957576][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.970837][ T30] audit: type=1400 audit(1757262887.052:35638): avc: denied { prog_load } for pid=16725 comm="syz.5.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 821.992011][ T30] audit: type=1400 audit(1757262887.052:35639): avc: denied { bpf } for pid=16725 comm="syz.5.2622" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 822.076326][ T30] audit: type=1400 audit(1757262887.052:35640): avc: denied { read } for pid=16725 comm="syz.5.2622" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 822.180009][ T30] audit: type=1400 audit(1757262887.052:35641): avc: denied { open } for pid=16725 comm="syz.5.2622" path="net:[4026533901]" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 822.246758][T14882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.254445][T16748] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.265189][T16747] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.326677][T16755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 822.344763][T16755] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 822.368590][T16755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.314674][T16779] bond0: (slave macvlan1): Error -98 calling set_mac_address [ 823.851489][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 824.417606][T16798] qnx6: unable to read the first superblock [ 825.360845][T16809] gfs2: not a GFS2 filesystem [ 825.720930][ T5927] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 825.883224][ T5927] usb 6-1: not running at top speed; connect to a high speed hub [ 825.895603][ T5927] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 825.923612][ T5927] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 825.935784][ T5927] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.952850][ T5927] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 825.964029][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.968500][T16819] tc_dump_action: action bad kind [ 825.978227][ T5927] usb 6-1: Product: syz [ 825.983458][ T5927] usb 6-1: Manufacturer: syz [ 825.988599][ T5927] usb 6-1: SerialNumber: syz [ 826.241636][ T5927] usb 6-1: unit 0 not found! [ 826.249543][ T5927] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 826.263403][ T5927] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 826.457789][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 826.741879][ T5927] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 826.756215][ T30] kauditd_printk_skb: 283 callbacks suppressed [ 826.756231][ T30] audit: type=1400 audit(1757262892.262:35910): avc: denied { recv } for pid=5927 comm="kworker/0:8" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 826.770017][ T5927] usb 6-1: USB disconnect, device number 12 [ 826.832868][ T30] audit: type=1400 audit(1757262892.322:35911): avc: denied { prog_load } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 826.874745][ T6736] udevd[6736]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 826.892090][ T30] audit: type=1400 audit(1757262892.322:35912): avc: denied { bpf } for pid=16827 comm="syz.4.2650" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 826.916619][ T30] audit: type=1400 audit(1757262892.322:35913): avc: denied { perfmon } for pid=16827 comm="syz.4.2650" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 826.960652][ T30] audit: type=1400 audit(1757262892.322:35914): avc: denied { prog_run } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 827.011611][ T30] audit: type=1400 audit(1757262892.332:35915): avc: denied { create } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 827.061652][ T30] audit: type=1400 audit(1757262892.382:35916): avc: denied { write } for pid=16827 comm="syz.4.2650" path="socket:[61455]" dev="sockfs" ino=61455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 827.610535][ T30] audit: type=1400 audit(1757262892.392:35917): avc: denied { write } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 827.631929][ T30] audit: type=1400 audit(1757262892.412:35918): avc: denied { execmem } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 827.672594][ T30] audit: type=1400 audit(1757262892.662:35919): avc: denied { create } for pid=16827 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 828.254031][T16845] netlink: 'syz.4.2653': attribute type 31 has an invalid length. [ 829.232290][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 829.259629][T16861] tipc: Enabling of bearer rejected, failed to enable media [ 830.314880][T16881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.376933][T16881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.780105][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 831.780121][ T30] audit: type=1400 audit(1757262897.272:36126): avc: denied { prog_load } for pid=16906 comm="syz.0.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 831.806415][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.325123][ T30] audit: type=1400 audit(1757262897.372:36127): avc: denied { prog_load } for pid=16914 comm="syz.5.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 832.353052][ T30] audit: type=1400 audit(1757262897.372:36128): avc: denied { bpf } for pid=16914 comm="syz.5.2669" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 832.373851][ C0] vkms_vblank_simulate: vblank timer overrun [ 832.439614][ T30] audit: type=1400 audit(1757262897.382:36129): avc: denied { perfmon } for pid=16914 comm="syz.5.2669" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 832.461919][ T30] audit: type=1400 audit(1757262897.392:36130): avc: denied { read } for pid=16914 comm="syz.5.2669" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 832.483365][ T30] audit: type=1400 audit(1757262897.392:36131): avc: denied { open } for pid=16914 comm="syz.5.2669" path="net:[4026533901]" dev="nsfs" ino=4026533901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 832.506799][ T30] audit: type=1400 audit(1757262897.402:36132): avc: denied { create } for pid=16914 comm="syz.5.2669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 832.558787][ T30] audit: type=1400 audit(1757262897.412:36133): avc: denied { ioctl } for pid=16914 comm="syz.5.2669" path="socket:[60865]" dev="sockfs" ino=60865 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 832.595920][T16924] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 832.601565][ T30] audit: type=1400 audit(1757262897.742:36134): avc: denied { recv } for pid=16914 comm="syz.5.2669" saddr=10.128.0.169 src=30006 daddr=10.128.1.62 dest=40032 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 832.661227][T16923] overlayfs: failed to resolve './file1': -2 [ 832.669434][ T30] audit: type=1400 audit(1757262897.852:36135): avc: denied { prog_load } for pid=16906 comm="syz.0.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 833.332567][T16939] cgroup: subsys name conflicts with all [ 833.400764][ T5220] udevd[5220]: worker [6262] /devices/virtual/block/nbd3 timeout; kill it [ 833.419540][ T5220] udevd[5220]: seq 17730 '/devices/virtual/block/nbd3' killed [ 834.374390][T16953] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 834.391680][T16953] overlayfs: failed to resolve './file1': -2 [ 835.982427][ T31] INFO: task syz.3.2117:14627 blocked for more than 143 seconds. [ 836.042888][ T31] Not tainted syzkaller #0 [ 836.059181][T16967] netlink: 'syz.1.2683': attribute type 21 has an invalid length. [ 836.060124][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.105282][ T31] task:syz.3.2117 state:D stack:28184 pid:14627 tgid:14625 ppid:5852 task_flags:0x400140 flags:0x00004004 [ 836.131308][ T31] Call Trace: [ 836.135144][ T31] [ 836.141426][T16967] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2683'. [ 836.151126][ T31] __schedule+0x1190/0x5de0 [ 836.161647][ T31] ? __pfx___schedule+0x10/0x10 [ 836.326590][ T31] ? find_held_lock+0x2b/0x80 [ 836.353180][ T31] ? schedule+0x2d7/0x3a0 [ 836.358503][ T31] ? bdev_open+0x41a/0xe40 [ 836.364677][ T31] schedule+0xe7/0x3a0 [ 836.371888][ T31] schedule_preempt_disabled+0x13/0x30 [ 836.386681][ T31] __mutex_lock+0x81b/0x1060 [ 836.401899][ T31] ? bdev_open+0x41a/0xe40 [ 836.413705][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 836.427382][ T31] ? __pfx_ilookup+0x10/0x10 [ 836.439118][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 836.449742][ T31] ? bdev_open+0x41a/0xe40 [ 836.454617][ T31] bdev_open+0x41a/0xe40 [ 836.458990][ T31] blkdev_open+0x277/0x3f0 [ 836.469850][ T31] do_dentry_open+0x97f/0x1530 [ 836.475213][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 836.481269][ T31] vfs_open+0x82/0x3f0 [ 836.485656][ T31] path_openat+0x1de4/0x2cb0 [ 836.492868][ T31] ? __pfx_path_openat+0x10/0x10 [ 836.497936][ T31] do_filp_open+0x20b/0x470 [ 836.504334][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 836.511035][ T31] ? alloc_fd+0x471/0x7d0 [ 836.515722][ T31] do_sys_openat2+0x11b/0x1d0 [ 836.521899][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 836.527947][ T31] ? find_held_lock+0x2b/0x80 [ 836.534237][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 836.541572][ T31] __x64_sys_openat+0x174/0x210 [ 836.546601][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 836.576789][ T31] ? do_user_addr_fault+0x843/0x1370 [ 836.584084][ T31] do_syscall_64+0xcd/0x4c0 [ 836.588724][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.595503][ T31] RIP: 0033:0x7f4a3a58d550 [ 836.601664][ T31] RSP: 002b:00007f4a3b457b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 836.615294][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a3a58d550 [ 836.625576][ T31] RDX: 0000000000000000 RSI: 00007f4a3b457c10 RDI: 00000000ffffff9c [ 836.636894][ T31] RBP: 00007f4a3b457c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 836.651512][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 836.661690][ T31] R13: 00007f4a3a7c6038 R14: 00007f4a3a7c5fa0 R15: 00007fffd6ffb318 [ 836.671985][ T31] [ 836.677427][ T31] INFO: task syz.3.2117:14631 blocked for more than 144 seconds. [ 836.687632][ T31] Not tainted syzkaller #0 [ 836.694859][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 836.704864][ T31] task:syz.3.2117 state:D stack:27912 pid:14631 tgid:14625 ppid:5852 task_flags:0x400140 flags:0x00004004 [ 836.717198][ T31] Call Trace: [ 836.725739][ T31] [ 836.728747][ T31] __schedule+0x1190/0x5de0 [ 836.733881][ T31] ? __pfx___schedule+0x10/0x10 [ 836.738747][ T31] ? find_held_lock+0x2b/0x80 [ 836.744109][ T31] ? schedule+0x2d7/0x3a0 [ 836.748433][ T31] ? bdev_open+0xa2/0xe40 [ 836.753257][ T31] schedule+0xe7/0x3a0 [ 836.757784][ T31] schedule_preempt_disabled+0x13/0x30 [ 836.764295][ T31] __mutex_lock+0x81b/0x1060 [ 836.768878][ T31] ? bdev_open+0xa2/0xe40 [ 836.773790][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 836.778817][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 836.785162][ T31] ? bdev_open+0xa2/0xe40 [ 836.789519][ T31] bdev_open+0xa2/0xe40 [ 836.794157][ T31] bdev_file_open_by_dev+0x182/0x210 [ 836.799437][ T31] setup_bdev_super+0x39b/0x730 [ 836.804941][ T31] get_tree_bdev_flags+0x363/0x620 [ 836.810071][ T31] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 836.816163][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 836.822429][ T31] ? bpf_lsm_capable+0x9/0x10 [ 836.827126][ T31] ? security_capable+0x7e/0x260 [ 836.832601][ T31] vfs_get_tree+0x8b/0x340 [ 836.837009][ T31] path_mount+0x1513/0x2000 [ 836.842435][ T31] ? __pfx_path_mount+0x10/0x10 [ 836.847298][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 836.852695][ T31] ? putname+0x154/0x1a0 [ 836.856957][ T31] ? putname+0x154/0x1a0 [ 836.861833][ T31] ? __x64_sys_mount+0x28d/0x310 [ 836.866791][ T31] __x64_sys_mount+0x28d/0x310 [ 836.872319][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 836.877647][ T31] do_syscall_64+0xcd/0x4c0 [ 836.882888][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.888780][ T31] RIP: 0033:0x7f4a3a58ebe9 [ 836.893791][ T31] RSP: 002b:00007f4a3b437038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 836.903149][ T31] RAX: ffffffffffffffda RBX: 00007f4a3a7c6090 RCX: 00007f4a3a58ebe9 [ 836.911556][ T31] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000200000000280 [ 836.919510][ T31] RBP: 00007f4a3a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 836.928148][ T31] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 836.936580][ T31] R13: 00007f4a3a7c6128 R14: 00007f4a3a7c6090 R15: 00007fffd6ffb318 [ 836.945309][ T31] [ 836.948344][ T31] [ 836.948344][ T31] Showing all locks held in the system: [ 836.958233][ T31] 1 lock held by khungtaskd/31: [ 836.963932][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 836.975442][ T31] 5 locks held by kworker/u8:2/36: [ 836.980937][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 836.990944][ T31] #1: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 837.000637][ T31] #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 837.009988][ T31] #3: ffffffff9b05bbb8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 837.021103][ T31] #4: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x20e/0x4e0 [ 837.029840][ T31] 2 locks held by getty/5609: [ 837.035006][ T31] #0: ffff88814dd730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 837.045395][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 837.065307][ T31] 1 lock held by udevd/6262: [ 837.069992][ T31] #0: ffff88807bf32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 837.079785][ T31] 1 lock held by syz.3.2117/14627: [ 837.089127][ T31] #0: ffff88807bf32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 837.099992][ T31] 2 locks held by syz.3.2117/14631: [ 837.106615][ T31] #0: ffff88802641c0e0 (&type->s_umount_key#96/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 837.118632][ T31] #1: ffff88807bf32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 837.129387][ T31] 1 lock held by syz.4.2677/16951: [ 837.135780][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 837.146487][ T31] [ 837.148832][ T31] ============================================= [ 837.148832][ T31] [ 837.162577][ T31] NMI backtrace for cpu 1 [ 837.162596][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 837.162615][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 837.162625][ T31] Call Trace: [ 837.162631][ T31] [ 837.162639][ T31] dump_stack_lvl+0x116/0x1f0 [ 837.162666][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 837.162684][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 837.162712][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 837.162732][ T31] watchdog+0xf0e/0x1260 [ 837.162756][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.162773][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.162795][ T31] ? __kthread_parkme+0x19e/0x250 [ 837.162821][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.162840][ T31] kthread+0x3c2/0x780 [ 837.162858][ T31] ? __pfx_kthread+0x10/0x10 [ 837.162882][ T31] ? rcu_is_watching+0x12/0xc0 [ 837.162903][ T31] ? __pfx_kthread+0x10/0x10 [ 837.162921][ T31] ret_from_fork+0x5d4/0x6f0 [ 837.162938][ T31] ? __pfx_kthread+0x10/0x10 [ 837.162956][ T31] ret_from_fork_asm+0x1a/0x30 [ 837.162989][ T31] [ 837.162995][ T31] Sending NMI from CPU 1 to CPUs 0: [ 837.278618][ C0] NMI backtrace for cpu 0 [ 837.278633][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 837.278651][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 837.278659][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 837.278680][ C0] Code: dc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 837.278693][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 837.278705][ C0] RAX: 0000000001eedfc9 RBX: 0000000000000000 RCX: ffffffff8b944c29 [ 837.278714][ C0] RDX: 0000000000000000 RSI: ffffffff8de522e0 RDI: ffffffff8c162d80 [ 837.278722][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 837.278731][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 837.278739][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 837.278747][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 837.278761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 837.278769][ C0] CR2: 000055558ca405c8 CR3: 000000005bb47000 CR4: 00000000003526f0 [ 837.278778][ C0] Call Trace: [ 837.278784][ C0] [ 837.278789][ C0] default_idle+0x13/0x20 [ 837.278807][ C0] default_idle_call+0x6d/0xb0 [ 837.278824][ C0] do_idle+0x391/0x510 [ 837.278842][ C0] ? __pfx_do_idle+0x10/0x10 [ 837.278856][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 837.278872][ C0] cpu_startup_entry+0x4f/0x60 [ 837.278887][ C0] rest_init+0x16b/0x2b0 [ 837.278904][ C0] ? acpi_subsystem_init+0x133/0x180 [ 837.278920][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 837.278936][ C0] start_kernel+0x3ee/0x4d0 [ 837.278953][ C0] x86_64_start_reservations+0x18/0x30 [ 837.278968][ C0] x86_64_start_kernel+0x130/0x190 [ 837.278984][ C0] common_startup_64+0x13e/0x148 [ 837.279011][ C0] [ 837.469547][ C0] vkms_vblank_simulate: vblank timer overrun [ 837.480558][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 837.487403][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 837.496478][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 837.506504][ T31] Call Trace: [ 837.509755][ T31] [ 837.512659][ T31] dump_stack_lvl+0x3d/0x1f0 [ 837.517224][ T31] vpanic+0x6e8/0x7a0 [ 837.521183][ T31] ? __pfx_vpanic+0x10/0x10 [ 837.525659][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 837.531624][ T31] panic+0xca/0xd0 [ 837.535318][ T31] ? __pfx_panic+0x10/0x10 [ 837.539709][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 837.545064][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 837.551188][ T31] ? watchdog+0xd78/0x1260 [ 837.555573][ T31] ? watchdog+0xd6b/0x1260 [ 837.559959][ T31] watchdog+0xd89/0x1260 [ 837.564171][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.568816][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 837.573986][ T31] ? __kthread_parkme+0x19e/0x250 [ 837.578985][ T31] ? __pfx_watchdog+0x10/0x10 [ 837.583630][ T31] kthread+0x3c2/0x780 [ 837.587667][ T31] ? __pfx_kthread+0x10/0x10 [ 837.592224][ T31] ? rcu_is_watching+0x12/0xc0 [ 837.596959][ T31] ? __pfx_kthread+0x10/0x10 [ 837.601518][ T31] ret_from_fork+0x5d4/0x6f0 [ 837.606077][ T31] ? __pfx_kthread+0x10/0x10 [ 837.610644][ T31] ret_from_fork_asm+0x1a/0x30 [ 837.615392][ T31] [ 837.618589][ T31] Kernel Offset: disabled [ 837.622887][ T31] Rebooting in 86400 seconds..