last executing test programs: 2m44.728742428s ago: executing program 0 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000005c0)=""/93, &(0x7f0000000400)=0x5d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername$netlink(r4, &(0x7f0000000540), &(0x7f0000000580)=0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x0, 0x0, 0x2, 0xfffffff9, 0x2, 0x1, 0xfffffffe]}}, 0x5c) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[], 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2m41.134454597s ago: executing program 0 (id=585): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r1, 0x5421, 0x0) ioprio_get$pid(0x1, r2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) getpgid(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) pwrite64(r5, 0x0, 0x0, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 2m39.52203586s ago: executing program 0 (id=588): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2m39.455338498s ago: executing program 1 (id=589): ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000340)={0x7d2, 0xda, 0x0, 0x6, 0x1000, 0x81}) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket(0x22, 0x2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r6, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000440), 0x1000a) sendfile(r6, r7, &(0x7f0000000000)=0x5, 0x20001) accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f00000001c0)=0x10) 2m37.386999526s ago: executing program 0 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100001"], 0x184}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r5, r6, 0x5, 0x0, @void}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xad, 0xa8, @random="4f7105f180c8dbdb8461cc6537ec3bd66c272eea8e1ff4f53e007f7c023dc6677850b6c141e260f6b077400e412ec8ffb2dddcdaffcd9721a2da6bd29a9e4fa643e2b8a2be536584e54091954f951b77baeebda6bdf369fb2c6f5fc28b9fc3ac537facd6c2114a4ea5f8fb3cb785e162a7d93e6e2fc491d5ecffe19c08e5a7c8fd5d93fdfd4efff0a10a188e25ac249c347fcbca3c3fe1c79e8ef9d107ee00592e688fa07f88dc87f7"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) 2m35.8154833s ago: executing program 0 (id=592): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2m35.350977903s ago: executing program 1 (id=595): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2m33.976221667s ago: executing program 1 (id=599): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2m31.763571653s ago: executing program 1 (id=603): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 2m31.147105217s ago: executing program 0 (id=605): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 2m30.112337659s ago: executing program 1 (id=606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000003400)=[{0x0}], 0x1, 0x37, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000440)}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 2m28.538027429s ago: executing program 1 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000003400)=[{0x0}], 0x1, 0x37, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000440)}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 2m15.742762542s ago: executing program 32 (id=605): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x19, 0x20000000, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 2m13.309607638s ago: executing program 33 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000003400)=[{0x0}], 0x1, 0x37, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000440)}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') 18.639835267s ago: executing program 3 (id=837): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e25, @remote}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x2, 0x2, 0xffffffe0, 0xfffffffc, 0x42, "c9190000000003052de5856ee1aa3a9400", 0x99, 0x4}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 17.293567982s ago: executing program 3 (id=839): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000800000000000000000000000000000000ff00e02d7c03f93a395aab", @ANYRES32=0x0, @ANYRES32], 0x50) 16.741266599s ago: executing program 5 (id=634): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 15.606554695s ago: executing program 4 (id=841): rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x3f}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14.232459158s ago: executing program 4 (id=844): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340)={r3, 0xffffffffffffffff, 0x4, r3}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.330651033s ago: executing program 4 (id=846): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 12.219379228s ago: executing program 3 (id=849): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 11.43749376s ago: executing program 6 (id=851): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 11.23593179s ago: executing program 5 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x2, 0x5c, 0xc, 0xfffffff9}, {0x1, 0xbb, 0xde, 0x7fff}, {0x8, 0x8, 0x9, 0x76d1}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9.37169501s ago: executing program 2 (id=854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20}) 9.314888025s ago: executing program 6 (id=855): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 9.289457649s ago: executing program 5 (id=856): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 8.005802526s ago: executing program 2 (id=857): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340)={r3, 0xffffffffffffffff, 0x4, r3}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.384691463s ago: executing program 5 (id=858): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 7.383402401s ago: executing program 6 (id=859): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 6.61943427s ago: executing program 6 (id=860): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 6.500077133s ago: executing program 2 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x3, &(0x7f0000000180)=[{0x2, 0x5c, 0xc, 0xfffffff9}, {0x1, 0xbb, 0xde, 0x7fff}, {0x8, 0x8, 0x9, 0x76d1}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.618269232s ago: executing program 4 (id=862): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) 5.524340143s ago: executing program 6 (id=863): sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f0000000200)=@icresp={{0x1, 0x2, 0x80, 0x8, 0x2}, 0x0, 0x0, 0x2, 0xff}, 0x80, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndctrl(0x0, 0x2000000000, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4000, 0x1b, @mcast1}}, {{0xa, 0x0, 0x855b, @empty, 0x1ff}}}, 0x108) sendmsg$kcm(r5, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x20, 0x9, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) 5.522444264s ago: executing program 2 (id=864): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept4$unix(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) 5.054536817s ago: executing program 3 (id=865): rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x3f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.415870455s ago: executing program 2 (id=866): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 3.386793998s ago: executing program 4 (id=867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20}) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 2.905985646s ago: executing program 3 (id=868): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 1.297397662s ago: executing program 3 (id=869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 1.141856875s ago: executing program 4 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20}) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 950.312585ms ago: executing program 2 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) 0s ago: executing program 6 (id=872): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[0x0], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) kernel console output (not intermixed with test programs): 6.235032][ T1209] usb 3-1: USB disconnect, device number 12 [ 137.183368][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 137.204242][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 137.220582][ T6957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.293'. [ 137.233301][ T1209] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.393472][ T6957] nbd0: detected capacity change from 0 to 256 [ 137.466015][ T1209] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.472234][ T5826] block nbd0: Receive control failed (result -104) [ 137.551179][ T1209] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 137.699580][ T1209] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.853903][ T29] audit: type=1326 audit(1739979810.061:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538cde9 code=0x7ffc0000 [ 137.877185][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 137.877219][ T1209] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 138.136914][ T29] audit: type=1326 audit(1739979810.061:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538cde9 code=0x7ffc0000 [ 138.210830][ T1209] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.220165][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.293243][ T29] audit: type=1326 audit(1739979810.081:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f939538cde9 code=0x7ffc0000 [ 138.320525][ T1209] usb 3-1: Product: syz [ 138.324722][ T1209] usb 3-1: Manufacturer: syz [ 138.355505][ T1209] cdc_wdm 3-1:1.0: skipping garbage [ 138.370267][ T1209] cdc_wdm 3-1:1.0: skipping garbage [ 138.376682][ T29] audit: type=1326 audit(1739979810.081:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538cde9 code=0x7ffc0000 [ 138.440519][ T29] audit: type=1326 audit(1739979810.081:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.1.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939538cde9 code=0x7ffc0000 [ 138.520295][ T1209] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 138.526414][ T1209] cdc_wdm 3-1:1.0: Unknown control protocol [ 138.604990][ T1209] usb 3-1: USB disconnect, device number 13 [ 139.540739][ T1209] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 139.701941][ T1209] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 139.713191][ T1209] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 139.723112][ T1209] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 139.732294][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.744270][ T6981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.750606][ T1201] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.761957][ T1209] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.910500][ T1201] usb 5-1: Using ep0 maxpacket: 8 [ 139.916878][ T1201] usb 5-1: config 0 has an invalid interface number: 141 but max is 12 [ 139.925243][ T1201] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 139.934377][ T1201] usb 5-1: config 0 has no interface number 0 [ 139.940590][ T1201] usb 5-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 139.952013][ T1201] usb 5-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 139.965512][ T1201] usb 5-1: config 0 interface 141 has no altsetting 0 [ 139.974487][ T1201] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 140.012900][ T5914] usb 2-1: USB disconnect, device number 17 [ 140.049975][ T1201] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 140.062533][ T1201] usb 5-1: Product: syz [ 140.066754][ T1201] usb 5-1: Manufacturer: syz [ 140.073117][ T1201] usb 5-1: SerialNumber: syz [ 140.079305][ T1201] usb 5-1: config 0 descriptor?? [ 140.296145][ T1201] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 140.767690][ T6999] ceph: No mds server is up or the cluster is laggy [ 140.776194][ T1209] libceph: connect (1)[c::]:6789 error -101 [ 140.798980][ T1209] libceph: mon0 (1)[c::]:6789 connect error [ 140.921502][ T1201] gspca_zc3xx: reg_w_i err -71 [ 141.347843][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 141.347860][ T29] audit: type=1400 audit(1739979813.591:512): avc: denied { listen } for pid=7015 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.378419][ T29] audit: type=1400 audit(1739979813.601:513): avc: denied { accept } for pid=7015 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.511349][ T1201] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 141.537139][ T29] audit: type=1326 audit(1739979813.781:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 141.650531][ T1201] gspca_zc3xx 5-1:0.141: probe with driver gspca_zc3xx failed with error -71 [ 141.667881][ T29] audit: type=1326 audit(1739979813.781:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 141.688272][ T1201] usb 5-1: USB disconnect, device number 12 [ 142.406404][ T29] audit: type=1400 audit(1739979814.651:516): avc: denied { connect } for pid=7034 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.680547][ T5906] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 142.853902][ T5906] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 142.886398][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.916367][ T5906] usb 2-1: Product: syz [ 142.928039][ T5906] usb 2-1: Manufacturer: syz [ 142.940089][ T5906] usb 2-1: SerialNumber: syz [ 142.963344][ T5906] usb 2-1: config 0 descriptor?? [ 143.154305][ T5826] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 143.181772][ T5906] airspy 2-1:0.0: usb_control_msg() failed -32 request 09 [ 143.222454][ T5906] airspy 2-1:0.0: Could not detect board [ 143.228205][ T5906] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 143.240438][ T29] audit: type=1400 audit(1739979815.481:517): avc: denied { bind } for pid=7043 comm="syz.3.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.587859][ T1201] usb 2-1: USB disconnect, device number 18 [ 144.373038][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 145.475203][ T7079] netlink: 'syz.4.329': attribute type 21 has an invalid length. [ 145.483288][ T7079] netlink: 132 bytes leftover after parsing attributes in process `syz.4.329'. [ 146.370621][ T29] audit: type=1400 audit(1739979818.601:518): avc: denied { bind } for pid=7082 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 146.420611][ T29] audit: type=1400 audit(1739979818.601:519): avc: denied { name_bind } for pid=7082 comm="syz.4.332" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 146.453707][ T29] audit: type=1400 audit(1739979818.601:520): avc: denied { node_bind } for pid=7082 comm="syz.4.332" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 146.850420][ T29] audit: type=1400 audit(1739979818.621:521): avc: denied { listen } for pid=7082 comm="syz.4.332" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.216461][ T29] audit: type=1400 audit(1739979818.651:522): avc: denied { connect } for pid=7082 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.238727][ T29] audit: type=1400 audit(1739979818.651:523): avc: denied { name_connect } for pid=7082 comm="syz.4.332" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 147.260278][ T29] audit: type=1400 audit(1739979818.661:524): avc: denied { accept } for pid=7082 comm="syz.4.332" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.303620][ T29] audit: type=1400 audit(1739979818.691:525): avc: denied { write } for pid=7082 comm="syz.4.332" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=59456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 147.391012][ T29] audit: type=1400 audit(1739979818.781:526): avc: denied { read } for pid=7087 comm="syz.0.333" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 147.494600][ T29] audit: type=1400 audit(1739979818.781:527): avc: denied { open } for pid=7087 comm="syz.0.333" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 148.122008][ T7102] syz.4.336: attempt to access beyond end of device [ 148.122008][ T7102] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 148.150082][ T7102] XFS (nbd4): SB validate failed with error -5. [ 148.234696][ T7116] openvswitch: netlink: Missing key (keys=40, expected=100) [ 148.505331][ T5935] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 148.917422][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 148.946139][ T5935] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 148.979806][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.041731][ T5935] usb 2-1: config 0 descriptor?? [ 149.560980][ T5935] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 149.626807][ T5935] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 149.734622][ T5935] asix 2-1:0.0: probe with driver asix failed with error -61 [ 149.774151][ T5935] usb 2-1: USB disconnect, device number 19 [ 150.026472][ T7136] syzkaller0: entered promiscuous mode [ 150.042418][ T7136] syzkaller0: entered allmulticast mode [ 151.290805][ T5870] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 151.520055][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.748627][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 151.765877][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.898124][ T5870] usb 2-1: config 0 descriptor?? [ 151.929707][ T5870] pwc: Askey VC010 type 2 USB webcam detected. [ 152.054642][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 152.054658][ T29] audit: type=1400 audit(1739979824.301:532): avc: denied { read } for pid=7166 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.197519][ T7170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=7170 comm=syz.3.354 [ 152.345309][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00 [ 152.352790][ T5870] pwc: recv_control_msg error -32 req 02 val 2700 [ 152.360465][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00 [ 152.369395][ T5870] pwc: recv_control_msg error -32 req 04 val 1000 [ 152.376935][ T5870] pwc: recv_control_msg error -32 req 04 val 1300 [ 152.389839][ T5870] pwc: recv_control_msg error -32 req 04 val 1400 [ 152.397058][ T5870] pwc: recv_control_msg error -32 req 02 val 2000 [ 152.404505][ T5870] pwc: recv_control_msg error -32 req 02 val 2100 [ 152.416152][ T5870] pwc: recv_control_msg error -32 req 04 val 1500 [ 152.423434][ T5870] pwc: recv_control_msg error -32 req 02 val 2500 [ 152.631310][ T5870] pwc: recv_control_msg error -71 req 02 val 2600 [ 152.639930][ T5870] pwc: recv_control_msg error -71 req 02 val 2900 [ 152.647519][ T5870] pwc: recv_control_msg error -71 req 02 val 2800 [ 152.659155][ T5870] pwc: recv_control_msg error -71 req 04 val 1100 [ 152.666244][ T5870] pwc: recv_control_msg error -71 req 04 val 1200 [ 152.777244][ T5870] pwc: Registered as video103. [ 152.785310][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 152.827831][ T5870] usb 2-1: USB disconnect, device number 20 [ 156.480520][ T1201] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.642020][ T1201] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 156.666997][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.682204][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.693493][ T5868] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.701641][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.718973][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.728042][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.739092][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.750679][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.759638][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.771662][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.786275][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.795853][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.807852][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.817322][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.826562][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.837764][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.846113][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.855523][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.868105][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 156.873803][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.882243][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.891354][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.902971][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.914061][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.923850][ T1201] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.932937][ T5868] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 156.942115][ T1201] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.953200][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.961354][ T5868] usb 2-1: Product: syz [ 156.965544][ T5868] usb 2-1: Manufacturer: syz [ 156.970185][ T1201] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.977325][ T5868] usb 2-1: SerialNumber: syz [ 156.983614][ T1201] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.993996][ T5868] usb 2-1: config 0 descriptor?? [ 157.001192][ T1201] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 157.009623][ T1201] usb 4-1: Product: syz [ 157.014183][ T1201] usb 4-1: Manufacturer: syz [ 157.018813][ T1201] usb 4-1: SerialNumber: syz [ 157.040230][ T1201] usb 4-1: config 0 descriptor?? [ 157.048583][ T1201] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 158.222126][ T29] audit: type=1400 audit(1739979830.461:533): avc: denied { connect } for pid=7202 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.478030][ T29] audit: type=1400 audit(1739979830.571:534): avc: denied { write } for pid=7202 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 159.502261][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 159.590299][ T1201] usb 2-1: USB disconnect, device number 21 [ 159.598906][ T7229] Device name cannot be null; rc = [-22] [ 160.094287][ T1209] usb 4-1: USB disconnect, device number 10 [ 160.146204][ T1209] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 162.409591][ T29] audit: type=1400 audit(1739979834.481:535): avc: denied { create } for pid=7251 comm="syz.0.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 162.682292][ T29] audit: type=1400 audit(1739979834.921:536): avc: denied { create } for pid=7254 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 162.726226][ T29] audit: type=1400 audit(1739979834.921:537): avc: denied { setopt } for pid=7254 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 165.700470][ T7269] syz.4.382: attempt to access beyond end of device [ 165.700470][ T7269] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 165.727075][ T7269] XFS (nbd4): SB validate failed with error -5. [ 166.374963][ T29] audit: type=1400 audit(1739979838.581:538): avc: denied { setopt } for pid=7287 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.992467][ T7292] virtio-fs: tag <(null)> not found [ 168.071225][ T43] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 30 seconds [ 170.400492][ T5868] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 171.680859][ C0] Illegal XDP return value 16128 on prog (id 46) dev bond_slave_0, expect packet loss! [ 171.937364][ T29] audit: type=1400 audit(1739979844.011:539): avc: denied { open } for pid=7319 comm="syz.1.395" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 173.269481][ T7337] veth1_to_hsr: entered promiscuous mode [ 173.844720][ T7333] veth1_to_hsr: left promiscuous mode [ 174.044278][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 174.449000][ T29] audit: type=1400 audit(1739979846.691:540): avc: denied { watch } for pid=7342 comm="syz.1.401" path="/78" dev="tmpfs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.573892][ T5868] usb 4-1: unable to read config index 0 descriptor/all [ 176.599688][ T5868] usb 4-1: can't read configurations, error -71 [ 176.887675][ T29] audit: type=1400 audit(1739979849.111:541): avc: denied { wake_alarm } for pid=7362 comm="syz.1.407" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.908010][ T29] audit: type=1400 audit(1739979850.091:542): avc: denied { create } for pid=7372 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.962181][ T29] audit: type=1400 audit(1739979850.211:543): avc: denied { bind } for pid=7372 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.993048][ T29] audit: type=1400 audit(1739979850.211:544): avc: denied { listen } for pid=7372 comm="syz.3.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.277152][ T29] audit: type=1400 audit(1739979851.501:545): avc: denied { bind } for pid=7382 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.480990][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 181.480996][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 181.493186][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 182.506963][ T7414] ax25_connect(): syz.3.423 uses autobind, please contact jreuter@yaina.de [ 183.097794][ T29] audit: type=1400 audit(1739979854.751:546): avc: denied { connect } for pid=7408 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 183.199511][ T7404] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.224110][ T29] audit: type=1400 audit(1739979855.461:547): avc: denied { setopt } for pid=7405 comm="syz.4.421" laddr=::1 lport=60644 faddr=::1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 183.266165][ T7404] kvm: pic: non byte read [ 183.301650][ T7404] kvm: pic: level sensitive irq not supported [ 183.303060][ T7404] kvm: pic: non byte read [ 183.851265][ T7405] dccp_close: ABORT with 180 bytes unread [ 184.215574][ T29] audit: type=1400 audit(1739979856.451:548): avc: denied { read } for pid=7429 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 185.133798][ T7438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.583020][ T29] audit: type=1400 audit(1739979857.331:550): avc: denied { bind } for pid=7433 comm="syz.1.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.917290][ T29] audit: type=1400 audit(1739979857.051:549): avc: denied { write } for pid=7427 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.936942][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.072537][ T7472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'. [ 189.159037][ T29] audit: type=1326 audit(1739979861.401:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7471 comm="syz.2.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba5bb8cde9 code=0x0 [ 191.172255][ T29] audit: type=1400 audit(1739979863.411:552): avc: denied { mount } for pid=7480 comm="syz.2.440" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 191.198508][ T29] audit: type=1400 audit(1739979863.421:553): avc: denied { search } for pid=7480 comm="syz.2.440" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.240497][ T29] audit: type=1400 audit(1739979863.421:554): avc: denied { read } for pid=7480 comm="syz.2.440" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.285071][ T29] audit: type=1400 audit(1739979863.421:555): avc: denied { open } for pid=7480 comm="syz.2.440" path="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 192.932134][ T7499] program syz.1.445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.943776][ T7499] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 192.966287][ T29] audit: type=1400 audit(1739979865.171:556): avc: denied { write } for pid=7491 comm="syz.1.445" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.786719][ T29] audit: type=1400 audit(1739979866.031:557): avc: denied { create } for pid=7502 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 193.858646][ T29] audit: type=1400 audit(1739979866.081:558): avc: denied { setopt } for pid=7502 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 194.084530][ T29] audit: type=1400 audit(1739979866.331:559): avc: denied { sqpoll } for pid=7508 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.331247][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.070465][ T1201] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.762887][ T29] audit: type=1400 audit(1739979868.001:560): avc: denied { setopt } for pid=7518 comm="syz.1.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.800312][ T1201] usb 3-1: device descriptor read/64, error -71 [ 196.540845][ T29] audit: type=1400 audit(1739979868.521:561): avc: denied { setopt } for pid=7523 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 196.594741][ T29] audit: type=1400 audit(1739979868.521:562): avc: denied { connect } for pid=7523 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 196.700475][ T1201] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.931540][ T1201] usb 3-1: device descriptor read/64, error -71 [ 197.052440][ T1201] usb usb3-port1: attempt power cycle [ 197.650716][ T29] audit: type=1400 audit(1739979869.401:563): avc: denied { bind } for pid=7529 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.013491][ T43] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 60 seconds [ 200.315473][ T7554] hfs: can't find a HFS filesystem on dev nullb0 [ 200.572353][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 202.027129][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 203.468366][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 203.477296][ T7585] openvswitch: netlink: Message has 3 unknown bytes. [ 204.305387][ T7599] can0: slcan on ttyS3. [ 204.345641][ T7599] block device autoloading is deprecated and will be removed. [ 205.060739][ T29] audit: type=1400 audit(1739979877.311:564): avc: denied { search } for pid=5487 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.105324][ T7601] syz.4.476: attempt to access beyond end of device [ 205.105324][ T7601] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 205.140461][ T7601] qnx6: unable to read the first superblock [ 205.180719][ T7601] syz.4.476: attempt to access beyond end of device [ 205.180719][ T7601] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 205.227670][ T7601] qnx6: unable to read the first superblock [ 205.233764][ T7601] qnx6: unable to read the first superblock [ 205.695538][ T29] audit: type=1400 audit(1739979877.311:565): avc: denied { read } for pid=5487 comm="dhcpcd" name="n100" dev="tmpfs" ino=3483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.845397][ T7594] can0 (unregistered): slcan off ttyS3. [ 205.857748][ T29] audit: type=1400 audit(1739979877.311:566): avc: denied { open } for pid=5487 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.010713][ T29] audit: type=1400 audit(1739979877.311:567): avc: denied { getattr } for pid=5487 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=3483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 206.373983][ T29] audit: type=1400 audit(1739979877.511:568): avc: denied { listen } for pid=7597 comm="syz.4.476" lport=46355 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.732921][ T29] audit: type=1400 audit(1739979877.511:569): avc: denied { write } for pid=7597 comm="syz.4.476" lport=46355 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 206.851567][ T29] audit: type=1400 audit(1739979877.511:570): avc: denied { setopt } for pid=7597 comm="syz.4.476" lport=46355 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 206.892558][ T29] audit: type=1400 audit(1739979878.221:571): avc: denied { read } for pid=7608 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.964896][ T29] audit: type=1400 audit(1739979878.221:572): avc: denied { open } for pid=7608 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.116690][ T29] audit: type=1400 audit(1739979878.221:573): avc: denied { getattr } for pid=7608 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.530026][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 210.530042][ T29] audit: type=1400 audit(1739979882.771:584): avc: denied { read } for pid=7662 comm="syz.1.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.565693][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 210.785139][ T7671] SELinux: security policydb version 17 (MLS) not backwards compatible [ 210.795221][ T7671] SELinux: failed to load policy [ 211.038144][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 211.080004][ T7642] nbd: socks must be embedded in a SOCK_ITEM attr [ 211.092680][ T29] audit: type=1400 audit(1739979883.031:585): avc: denied { load_policy } for pid=7664 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 211.996602][ T7688] dlm: Unknown command passed to DLM device : 64 [ 211.996602][ T7688] [ 212.606733][ T29] audit: type=1400 audit(1739979884.241:586): avc: denied { write } for pid=7684 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 212.900956][ T29] audit: type=1326 audit(1739979885.151:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 213.021430][ T7698] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.483220][ T29] audit: type=1326 audit(1739979885.151:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 213.506628][ T29] audit: type=1326 audit(1739979885.151:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 213.530324][ T29] audit: type=1326 audit(1739979885.151:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 214.389867][ T29] audit: type=1326 audit(1739979885.151:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 214.419369][ T29] audit: type=1326 audit(1739979885.151:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 214.447126][ T29] audit: type=1326 audit(1739979885.151:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7693 comm="syz.4.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faba4f8cde9 code=0x7ffc0000 [ 215.766072][ T7715] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 216.128194][ T7723] xt_connbytes: Forcing CT accounting to be enabled [ 216.144723][ T7723] --map-set only usable from mangle table [ 217.918015][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 217.918031][ T29] audit: type=1400 audit(1739979890.161:645): avc: denied { create } for pid=7732 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.160261][ T29] audit: type=1400 audit(1739979890.191:646): avc: denied { ioctl } for pid=7732 comm="syz.0.504" path="socket:[15602]" dev="sockfs" ino=15602 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.162452][ T29] audit: type=1400 audit(1739979890.461:647): avc: denied { read write } for pid=7740 comm="syz.1.507" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.185958][ T29] audit: type=1400 audit(1739979890.461:648): avc: denied { open } for pid=7740 comm="syz.1.507" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 219.213205][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.978532][ T29] audit: type=1400 audit(1739979890.471:649): avc: denied { map } for pid=7740 comm="syz.1.507" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.002422][ T29] audit: type=1400 audit(1739979890.471:650): avc: denied { execute } for pid=7740 comm="syz.1.507" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 220.021795][ T5870] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 220.121208][ T29] audit: type=1400 audit(1739979892.361:651): avc: denied { mount } for pid=7736 comm="syz.3.506" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.148391][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.345576][ T5870] usb 3-1: config 0 descriptor?? [ 220.405175][ T5870] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 220.419684][ T5870] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 220.799648][ T29] audit: type=1400 audit(1739979893.041:652): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 221.094850][ T29] audit: type=1400 audit(1739979893.041:653): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.156682][ T29] audit: type=1400 audit(1739979893.041:654): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.417956][ T5870] usb 3-1: USB disconnect, device number 17 [ 222.940849][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 222.940868][ T29] audit: type=1400 audit(1739979895.181:675): avc: denied { read } for pid=7779 comm="syz.0.514" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.122609][ T29] audit: type=1400 audit(1739979895.181:676): avc: denied { open } for pid=7779 comm="syz.0.514" path="/dev/cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 223.774744][ T29] audit: type=1400 audit(1739979895.501:677): avc: denied { write } for pid=7779 comm="syz.0.514" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.155863][ T29] audit: type=1400 audit(1739979895.511:678): avc: denied { name_bind } for pid=7779 comm="syz.0.514" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 224.177435][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.761569][ T29] audit: type=1400 audit(1739979895.511:679): avc: denied { node_bind } for pid=7779 comm="syz.0.514" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.800755][ T29] audit: type=1400 audit(1739979895.511:680): avc: denied { read } for pid=7779 comm="syz.0.514" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.826130][ T29] audit: type=1400 audit(1739979895.511:681): avc: denied { open } for pid=7779 comm="syz.0.514" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 224.924755][ T29] audit: type=1400 audit(1739979895.521:682): avc: denied { ioctl } for pid=7779 comm="syz.0.514" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 225.050639][ T29] audit: type=1400 audit(1739979895.521:683): avc: denied { mounton } for pid=7779 comm="syz.0.514" path="/104/file0" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.226493][ T29] audit: type=1400 audit(1739979895.521:684): avc: denied { mount } for pid=7779 comm="syz.0.514" name="/" dev="ramfs" ino=14547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 225.279231][ T7802] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:19 [ 226.301893][ T7805] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 226.843830][ T7797] program syz.3.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.315794][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 228.315814][ T29] audit: type=1400 audit(1739979900.141:736): avc: denied { read write } for pid=7815 comm="syz.3.524" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 228.345234][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.791863][ T29] audit: type=1400 audit(1739979900.141:737): avc: denied { open } for pid=7815 comm="syz.3.524" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 228.930597][ T29] audit: type=1400 audit(1739979900.241:738): avc: denied { create } for pid=7815 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.980703][ T29] audit: type=1400 audit(1739979900.341:739): avc: denied { bind } for pid=7815 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.116539][ T29] audit: type=1400 audit(1739979900.441:740): avc: denied { write } for pid=7815 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.136195][ T29] audit: type=1400 audit(1739979900.541:741): avc: denied { setopt } for pid=7815 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.156387][ T29] audit: type=1400 audit(1739979900.791:742): avc: denied { write } for pid=7819 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.177598][ T29] audit: type=1400 audit(1739979900.891:743): avc: denied { accept } for pid=7815 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 229.231000][ T29] audit: type=1400 audit(1739979901.441:744): avc: denied { create } for pid=7832 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.250936][ T29] audit: type=1400 audit(1739979901.441:745): avc: denied { create } for pid=7832 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 230.352208][ T43] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 90 seconds [ 231.804854][ T7862] ISOFS: Unable to identify CD-ROM format. [ 233.898035][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 233.898056][ T29] audit: type=1400 audit(1739979905.571:763): avc: denied { prog_run } for pid=7867 comm="syz.3.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 234.969147][ T29] audit: type=1400 audit(1739979906.491:764): avc: denied { unlink } for pid=7871 comm="syz.0.535" name="#20" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 235.291287][ T29] audit: type=1400 audit(1739979906.501:765): avc: denied { mount } for pid=7871 comm="syz.0.535" name="/" dev="overlay" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.337999][ T29] audit: type=1400 audit(1739979907.211:766): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.688365][ T29] audit: type=1400 audit(1739979907.791:767): avc: denied { create } for pid=7882 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.970233][ T29] audit: type=1400 audit(1739979907.931:768): avc: denied { name_bind } for pid=7880 comm="syz.3.536" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 236.148817][ T29] audit: type=1400 audit(1739979907.931:769): avc: denied { node_bind } for pid=7880 comm="syz.3.536" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 236.568996][ T29] audit: type=1400 audit(1739979907.961:770): avc: denied { connect } for pid=7882 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.037119][ T29] audit: type=1400 audit(1739979909.281:771): avc: denied { read } for pid=7899 comm="syz.0.541" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 237.157538][ T29] audit: type=1400 audit(1739979909.311:772): avc: denied { open } for pid=7899 comm="syz.0.541" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 239.118804][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 239.118839][ T29] audit: type=1400 audit(1739979910.721:777): avc: denied { ioctl } for pid=7912 comm="syz.1.544" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.150475][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.317136][ T29] audit: type=1400 audit(1739979911.561:778): avc: denied { mount } for pid=7910 comm="syz.4.543" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 239.905835][ T29] audit: type=1400 audit(1739979911.661:779): avc: denied { read } for pid=7910 comm="syz.4.543" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 240.102290][ T29] audit: type=1400 audit(1739979911.661:780): avc: denied { open } for pid=7910 comm="syz.4.543" path="/104/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 240.740519][ T29] audit: type=1400 audit(1739979912.101:781): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 240.785904][ T29] audit: type=1400 audit(1739979913.021:782): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 240.890475][ T5870] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 240.910314][ T29] audit: type=1400 audit(1739979913.151:783): avc: denied { bind } for pid=7939 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.960890][ T29] audit: type=1400 audit(1739979913.181:784): avc: denied { node_bind } for pid=7939 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 241.146775][ T7947] ubi31: attaching mtd0 [ 241.169819][ T29] audit: type=1400 audit(1739979913.201:785): avc: denied { connect } for pid=7939 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.597249][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.098203][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.115908][ T29] audit: type=1400 audit(1739979913.251:786): avc: denied { create } for pid=7944 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 242.135572][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.171103][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 242.180184][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.214385][ T5870] usb 5-1: config 0 descriptor?? [ 243.190824][ T5870] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 243.298216][ T7956] netlink: 'syz.4.547': attribute type 21 has an invalid length. [ 243.306321][ T7956] netlink: 'syz.4.547': attribute type 6 has an invalid length. [ 243.314075][ T7956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.547'. [ 243.331273][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.340574][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.434038][ T5870] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 243.609678][ T5870] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 244.550526][ T5870] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 244.868200][ T5870] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 245.033931][ T5870] usb 5-1: USB disconnect, device number 13 [ 245.075349][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 245.075364][ T29] audit: type=1400 audit(1739979917.321:793): avc: denied { setopt } for pid=7968 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.612890][ T29] audit: type=1400 audit(1739979918.771:794): avc: denied { create } for pid=7976 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 247.606958][ T29] audit: type=1400 audit(1739979918.821:795): avc: denied { listen } for pid=7976 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 248.217069][ T29] audit: type=1400 audit(1739979920.291:796): avc: denied { create } for pid=7983 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 248.307354][ T29] audit: type=1400 audit(1739979920.551:797): avc: denied { create } for pid=7985 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.382214][ T7988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.917254][ T29] audit: type=1400 audit(1739979920.711:798): avc: denied { ioctl } for pid=7983 comm="syz.3.557" path="/dev/sg0" dev="devtmpfs" ino=728 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.959810][ T29] audit: type=1400 audit(1739979920.811:799): avc: denied { bind } for pid=7985 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.015111][ T29] audit: type=1400 audit(1739979921.441:800): avc: denied { create } for pid=7989 comm="syz.1.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.049025][ T29] audit: type=1400 audit(1739979921.441:801): avc: denied { write } for pid=7989 comm="syz.1.560" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.180875][ T29] audit: type=1400 audit(1739979921.451:802): avc: denied { ioctl } for pid=7989 comm="syz.1.560" path="socket:[15165]" dev="sockfs" ino=15165 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.295300][ T29] audit: type=1400 audit(1739979921.751:803): avc: denied { connect } for pid=7993 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 250.549910][ T29] audit: type=1400 audit(1739979921.751:804): avc: denied { name_connect } for pid=7993 comm="syz.4.559" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 251.552907][ T29] audit: type=1400 audit(1739979922.291:805): avc: denied { create } for pid=7985 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 251.620051][ T8009] can0: slcan on ttyS3. [ 252.485766][ T29] audit: type=1400 audit(1739979922.291:806): avc: denied { ioctl } for pid=7985 comm="syz.2.558" path="socket:[15168]" dev="sockfs" ino=15168 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 252.870620][ T29] audit: type=1400 audit(1739979922.291:807): avc: denied { setopt } for pid=7985 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.890605][ T8001] can0 (unregistered): slcan off ttyS3. [ 252.968139][ T29] audit: type=1400 audit(1739979922.341:808): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 253.000181][ T29] audit: type=1400 audit(1739979924.231:809): avc: denied { ioctl } for pid=8001 comm="syz.1.562" path="socket:[16061]" dev="sockfs" ino=16061 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 253.263235][ T29] audit: type=1400 audit(1739979925.501:810): avc: denied { connect } for pid=8011 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.766946][ T29] audit: type=1400 audit(1739979925.581:811): avc: denied { getopt } for pid=8011 comm="syz.1.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.801118][ T5935] IPVS: starting estimator thread 0... [ 253.950467][ T8020] IPVS: using max 34 ests per chain, 81600 per kthread [ 254.387812][ T8034] program syz.2.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.160844][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 255.646124][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.959083][ T5868] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 255.978727][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.021455][ T5868] usb 5-1: config 0 descriptor?? [ 256.188183][ T5868] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 256.799944][ T5868] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 257.262457][ T8058] syz.3.574: attempt to access beyond end of device [ 257.262457][ T8058] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 257.275513][ T8058] qnx6: unable to read the first superblock [ 257.282134][ T8058] syz.3.574: attempt to access beyond end of device [ 257.282134][ T8058] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 257.296338][ T8058] qnx6: unable to read the first superblock [ 257.302403][ T8058] qnx6: unable to read the first superblock [ 257.385938][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 257.385971][ T29] audit: type=1400 audit(1739979929.581:815): avc: denied { connect } for pid=8055 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.700800][ T29] audit: type=1400 audit(1739979929.581:816): avc: denied { name_connect } for pid=8055 comm="syz.3.574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 257.742837][ T29] audit: type=1400 audit(1739979929.621:817): avc: denied { listen } for pid=8055 comm="syz.3.574" lport=56956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.803485][ T29] audit: type=1400 audit(1739979929.621:818): avc: denied { accept } for pid=8055 comm="syz.3.574" lport=56956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 257.838212][ T29] audit: type=1400 audit(1739979929.631:819): avc: denied { setopt } for pid=8055 comm="syz.3.574" lport=56956 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 258.171923][ T5868] usb 5-1: USB disconnect, device number 14 [ 259.552824][ T29] audit: type=1400 audit(1739979931.731:820): avc: denied { create } for pid=8069 comm="syz.0.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 259.707153][ T29] audit: type=1400 audit(1739979931.931:821): avc: denied { ioctl } for pid=8070 comm="syz.4.577" path="socket:[15319]" dev="sockfs" ino=15319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.815577][ T29] audit: type=1400 audit(1739979932.061:822): avc: denied { create } for pid=8070 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.852033][ T8082] ======================================================= [ 259.852033][ T8082] WARNING: The mand mount option has been deprecated and [ 259.852033][ T8082] and is ignored by this kernel. Remove the mand [ 259.852033][ T8082] option from the mount to silence this warning. [ 259.852033][ T8082] ======================================================= [ 259.893328][ T8082] new mount options do not match the existing superblock, will be ignored [ 259.913902][ T29] audit: type=1400 audit(1739979932.081:823): avc: denied { write } for pid=8070 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.933818][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.334886][ T8076] syz.4.577: attempt to access beyond end of device [ 260.334886][ T8076] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 260.425735][ T8076] XFS (nbd4): SB validate failed with error -5. [ 260.438173][ T29] audit: type=1400 audit(1739979932.641:824): avc: denied { create } for pid=8080 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.459017][ T8079] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 260.802330][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 120 seconds [ 263.115673][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 263.190473][ T29] audit: type=1400 audit(1739979935.031:830): avc: denied { mount } for pid=8102 comm="syz.4.584" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 263.941907][ T29] audit: type=1326 audit(1739979935.761:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.071523][ T29] audit: type=1326 audit(1739979935.761:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.094980][ T29] audit: type=1326 audit(1739979935.761:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.119090][ T29] audit: type=1326 audit(1739979935.761:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.178970][ T29] audit: type=1326 audit(1739979935.771:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.234679][ T29] audit: type=1326 audit(1739979935.771:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.300534][ T29] audit: type=1326 audit(1739979935.771:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 264.460674][ T5935] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 265.423479][ T29] audit: type=1326 audit(1739979935.771:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 265.447680][ T29] audit: type=1326 audit(1739979935.771:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8109 comm="syz.0.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe5ccd8cde9 code=0x7ffc0000 [ 266.946888][ T8135] netlink: 148 bytes leftover after parsing attributes in process `syz.0.590'. [ 267.724515][ T5193] udevd[5193]: worker [6108] /devices/virtual/block/nbd0 is taking a long time [ 267.740447][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 267.748530][ T5935] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 267.757866][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.766023][ T5935] usb 5-1: Product: syz [ 267.770184][ T5935] usb 5-1: Manufacturer: syz [ 267.774879][ T5935] usb 5-1: SerialNumber: syz [ 267.784965][ T5935] usb 5-1: config 0 descriptor?? [ 268.230875][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 268.230891][ T29] audit: type=1400 audit(1739979940.481:861): avc: denied { create } for pid=8122 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 268.305155][ T5935] usb 5-1: can't set config #0, error -71 [ 268.330779][ T5935] usb 5-1: USB disconnect, device number 15 [ 270.228519][ T8163] netlink: 148 bytes leftover after parsing attributes in process `syz.3.596'. [ 271.415126][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 271.600528][ T29] audit: type=1400 audit(1739979943.831:862): avc: denied { read } for pid=8168 comm="syz.2.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 272.087069][ T29] audit: type=1404 audit(1739979944.321:863): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 272.491716][ T29] audit: type=1400 audit(1739979944.331:864): avc: denied { create } for pid=8182 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 272.525137][ T29] audit: type=1404 audit(1739979944.361:865): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 272.545543][ T29] audit: type=1400 audit(1739979944.421:866): avc: denied { create } for pid=8169 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.569403][ T29] audit: type=1400 audit(1739979944.511:867): avc: denied { execmem } for pid=8182 comm="syz.1.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 272.623878][ T29] audit: type=1400 audit(1739979944.721:868): avc: denied { read write } for pid=8174 comm="syz.4.602" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.732447][ T29] audit: type=1400 audit(1739979944.721:869): avc: denied { open } for pid=8174 comm="syz.4.602" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.859274][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 273.345217][ T1209] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.516605][ T29] audit: type=1400 audit(1739979944.721:870): avc: denied { ioctl } for pid=8174 comm="syz.4.602" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.544454][ T29] audit: type=1400 audit(1739979944.771:871): avc: denied { read } for pid=8182 comm="syz.1.603" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.568305][ T29] audit: type=1400 audit(1739979944.771:872): avc: denied { open } for pid=8182 comm="syz.1.603" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.591949][ T29] audit: type=1400 audit(1739979944.771:873): avc: denied { ioctl } for pid=8182 comm="syz.1.603" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.617780][ T29] audit: type=1400 audit(1739979945.061:874): avc: denied { prog_load } for pid=8186 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 273.661907][ T29] audit: type=1400 audit(1739979945.061:875): avc: denied { bpf } for pid=8186 comm="syz.2.604" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 273.690533][ T1209] usb 5-1: device descriptor read/64, error -71 [ 273.701303][ T29] audit: type=1400 audit(1739979945.061:876): avc: denied { perfmon } for pid=8186 comm="syz.2.604" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.020578][ T29] audit: type=1400 audit(1739979945.091:877): avc: denied { create } for pid=8186 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.069180][ T29] audit: type=1400 audit(1739979945.101:878): avc: denied { write } for pid=8186 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.619969][ T1209] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 274.629953][ T29] audit: type=1400 audit(1739979945.131:879): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 278.031082][ T8242] netlink: 148 bytes leftover after parsing attributes in process `syz.4.615'. [ 279.410517][ T8248] netlink: 148 bytes leftover after parsing attributes in process `syz.3.616'. [ 280.417236][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 280.552312][ T29] audit: type=1400 audit(1739979952.661:913): avc: denied { create } for pid=8254 comm="syz.3.619" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.573664][ T29] audit: type=1400 audit(1739979952.661:914): avc: denied { create } for pid=8254 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.593886][ T29] audit: type=1400 audit(1739979952.661:915): avc: denied { connect } for pid=8254 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.631301][ T29] audit: type=1400 audit(1739979952.661:916): avc: denied { read } for pid=8254 comm="syz.3.619" path="socket:[16705]" dev="sockfs" ino=16705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 280.779352][ T29] audit: type=1400 audit(1739979952.861:917): avc: denied { read } for pid=8254 comm="syz.3.619" path="socket:[16708]" dev="sockfs" ino=16708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 281.049891][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 281.654976][ T5906] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 282.584480][ T5906] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 282.605265][ T5906] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.631744][ T5906] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x8B has invalid wMaxPacketSize 0 [ 282.762370][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 282.769588][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 282.779002][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.797215][ T5906] usb 3-1: config 0 descriptor?? [ 282.834014][ T29] audit: type=1400 audit(1739979955.081:918): avc: denied { read } for pid=8276 comm="syz.4.626" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.464246][ T29] audit: type=1400 audit(1739979955.081:919): avc: denied { open } for pid=8276 comm="syz.4.626" path="net:[4026532906]" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.553342][ T29] audit: type=1400 audit(1739979955.081:920): avc: denied { create } for pid=8276 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.576422][ T29] audit: type=1400 audit(1739979955.151:921): avc: denied { module_request } for pid=8273 comm="syz.3.625" kmod="ipt_ipvs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.734050][ T29] audit: type=1400 audit(1739979955.981:922): avc: denied { create } for pid=8276 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 287.098112][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 289.676359][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 289.970199][ T29] audit: type=1400 audit(1739979961.521:926): avc: denied { read write } for pid=8316 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 290.016250][ T29] audit: type=1400 audit(1739979961.521:927): avc: denied { open } for pid=8316 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 290.101576][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.119608][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.124493][ T29] audit: type=1400 audit(1739979962.301:928): avc: denied { ioctl } for pid=8316 comm="syz-executor" path="socket:[17551]" dev="sockfs" ino=17551 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 290.129642][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.151776][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.167109][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.174592][ T5132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 290.182005][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.329789][ T29] audit: type=1400 audit(1739979962.451:929): avc: denied { mounton } for pid=8316 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 290.993989][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 150 seconds [ 291.887114][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.916676][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.933153][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.948885][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.970948][ T5833] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.987315][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.165162][ T8337] syz.4.641: attempt to access beyond end of device [ 292.165162][ T8337] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 292.184406][ T29] audit: type=1400 audit(1739979964.431:930): avc: denied { create } for pid=8331 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 292.223168][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 292.290554][ T5132] Bluetooth: hci5: command tx timeout [ 292.306423][ T8337] XFS (nbd4): SB validate failed with error -5. [ 292.319099][ T5914] usb 3-1: USB disconnect, device number 18 [ 292.320567][ T29] audit: type=1400 audit(1739979964.551:931): avc: denied { write } for pid=8331 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 292.823449][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 292.994941][ T29] audit: type=1400 audit(1739979965.231:932): avc: denied { write } for pid=8350 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 293.567276][ T6401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.806851][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 294.112127][ T5132] Bluetooth: hci6: command tx timeout [ 294.351486][ T5132] Bluetooth: hci5: command tx timeout [ 294.484803][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.592502][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.600039][ T8316] bridge_slave_0: entered allmulticast mode [ 294.607192][ T8316] bridge_slave_0: entered promiscuous mode [ 294.634222][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.641628][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.648841][ T8316] bridge_slave_1: entered allmulticast mode [ 294.656906][ T8316] bridge_slave_1: entered promiscuous mode [ 294.743551][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 295.350592][ T29] audit: type=1400 audit(1739979967.581:933): avc: denied { bind } for pid=8373 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.608973][ T6401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.420025][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 296.545036][ T5132] Bluetooth: hci6: command tx timeout [ 296.550627][ T5132] Bluetooth: hci5: command tx timeout [ 296.672690][ T29] audit: type=1400 audit(1739979968.921:934): avc: denied { setopt } for pid=8373 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 297.689439][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.854616][ T6401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.235947][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.269847][ T6401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.695938][ T5833] Bluetooth: hci5: command tx timeout [ 298.701653][ T5132] Bluetooth: hci6: command tx timeout [ 298.738270][ T8316] team0: Port device team_slave_0 added [ 298.793453][ T8316] team0: Port device team_slave_1 added [ 298.862060][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 298.904554][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.970450][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.002129][ T8403] syz.4.651: attempt to access beyond end of device [ 299.002129][ T8403] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 299.054275][ T8403] XFS (nbd4): SB validate failed with error -5. [ 299.060421][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.160254][ T29] audit: type=1400 audit(1739979971.401:935): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 299.228732][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.257155][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.429729][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.971343][ T6401] bridge_slave_1: left allmulticast mode [ 299.977547][ T6401] bridge_slave_1: left promiscuous mode [ 299.987586][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.017850][ T29] audit: type=1400 audit(1739979972.261:936): avc: denied { search } for pid=5487 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.054076][ T6401] bridge_slave_0: left allmulticast mode [ 300.059767][ T6401] bridge_slave_0: left promiscuous mode [ 300.135929][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.168566][ T29] audit: type=1400 audit(1739979972.261:937): avc: denied { read } for pid=5487 comm="dhcpcd" name="n106" dev="tmpfs" ino=3861 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 300.240751][ T29] audit: type=1400 audit(1739979972.261:938): avc: denied { open } for pid=5487 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3861 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 300.484451][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 300.750500][ T5833] Bluetooth: hci6: command tx timeout [ 301.047502][ T29] audit: type=1400 audit(1739979972.261:939): avc: denied { getattr } for pid=5487 comm="dhcpcd" path="/run/udev/data/n106" dev="tmpfs" ino=3861 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 303.105821][ T29] audit: type=1400 audit(1739979975.301:940): avc: denied { watch } for pid=8434 comm="syz.4.658" path="/133/file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.264267][ T8435] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3256431472 (26051451776 ns) > initial count (24997152112 ns). Using initial count to start timer. [ 303.296283][ T29] audit: type=1400 audit(1739979975.301:941): avc: denied { watch_sb watch_reads } for pid=8434 comm="syz.4.658" path="/133/file0" dev="tmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 303.374942][ T29] audit: type=1400 audit(1739979975.581:942): avc: denied { read } for pid=8434 comm="syz.4.658" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.421697][ T29] audit: type=1400 audit(1739979975.581:943): avc: denied { open } for pid=8434 comm="syz.4.658" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.665839][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.659'. [ 304.412142][ T29] audit: type=1400 audit(1739979976.641:944): avc: denied { bind } for pid=8444 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 304.822329][ T29] audit: type=1400 audit(1739979976.901:945): avc: denied { accept } for pid=8444 comm="syz.4.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 305.147070][ T6401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.168033][ T6401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.195847][ T6401] bond0 (unregistering): Released all slaves [ 305.354697][ T8316] hsr_slave_0: entered promiscuous mode [ 305.411656][ T8316] hsr_slave_1: entered promiscuous mode [ 305.417675][ T8316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.485539][ T8316] Cannot create hsr debugfs directory [ 305.495010][ T29] audit: type=1400 audit(1739979977.741:946): avc: denied { read } for pid=8463 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.527074][ T29] audit: type=1400 audit(1739979977.741:947): avc: denied { open } for pid=8463 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.555162][ T29] audit: type=1400 audit(1739979977.741:948): avc: denied { getattr } for pid=8463 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.808758][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 306.936589][ T29] audit: type=1400 audit(1739979979.181:949): avc: denied { write } for pid=8460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.043154][ T29] audit: type=1400 audit(1739979979.181:950): avc: denied { add_name } for pid=8460 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.249123][ T29] audit: type=1400 audit(1739979979.181:951): avc: denied { create } for pid=8460 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.299908][ T29] audit: type=1400 audit(1739979979.181:952): avc: denied { write } for pid=8460 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=3875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.327308][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.334601][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.359084][ T8338] bridge_slave_0: entered allmulticast mode [ 308.370046][ T8338] bridge_slave_0: entered promiscuous mode [ 308.990571][ T29] audit: type=1400 audit(1739979979.181:953): avc: denied { append } for pid=8460 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=3875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 309.661927][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 310.361544][ T29] audit: type=1400 audit(1739979980.531:954): avc: denied { remove_name } for pid=8490 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=3875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.396754][ T29] audit: type=1400 audit(1739979980.531:955): avc: denied { unlink } for pid=8490 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=3875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.464961][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.481297][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.519304][ T8338] bridge_slave_1: entered allmulticast mode [ 310.536163][ T8338] bridge_slave_1: entered promiscuous mode [ 310.605843][ T29] audit: type=1400 audit(1739979982.851:956): avc: denied { write } for pid=8513 comm="syz.4.671" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 311.119690][ T29] audit: type=1400 audit(1739979983.361:957): avc: denied { read write } for pid=8513 comm="syz.4.671" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.733361][ T29] audit: type=1400 audit(1739979983.361:958): avc: denied { open } for pid=8513 comm="syz.4.671" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.803307][ T29] audit: type=1400 audit(1739979983.361:959): avc: denied { map } for pid=8513 comm="syz.4.671" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 312.838881][ T29] audit: type=1400 audit(1739979983.361:960): avc: denied { execute } for pid=8513 comm="syz.4.671" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 314.234407][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.072619][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.774594][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 316.242142][ T8338] team0: Port device team_slave_0 added [ 316.253837][ T6401] hsr_slave_0: left promiscuous mode [ 316.260185][ T6401] hsr_slave_1: left promiscuous mode [ 316.267103][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.274834][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.297159][ T6401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.304844][ T6401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.329659][ T6401] veth1_macvtap: left promiscuous mode [ 316.345695][ T6401] veth0_macvtap: left promiscuous mode [ 316.355166][ T6401] veth1_vlan: left promiscuous mode [ 316.364252][ T6401] veth0_vlan: left promiscuous mode [ 317.090714][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.859885][ T6401] team0 (unregistering): Port device team_slave_1 removed [ 317.990690][ T6401] team0 (unregistering): Port device team_slave_0 removed [ 318.106673][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 320.760868][ T29] audit: type=1400 audit(1739979992.601:961): avc: denied { read append } for pid=8592 comm="syz.2.685" name="sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.787631][ T29] audit: type=1400 audit(1739979992.601:962): avc: denied { open } for pid=8592 comm="syz.2.685" path="/dev/sg0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.835624][ T29] audit: type=1400 audit(1739979992.921:963): avc: denied { create } for pid=8592 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.896067][ T29] audit: type=1400 audit(1739979992.921:964): avc: denied { bind } for pid=8592 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 320.937156][ T29] audit: type=1400 audit(1739979992.921:965): avc: denied { node_bind } for pid=8592 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.502789][ T29] audit: type=1400 audit(1739979992.921:966): avc: denied { connect } for pid=8592 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.614532][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 180 seconds [ 321.653412][ T29] audit: type=1400 audit(1739979992.921:967): avc: denied { write } for pid=8592 comm="syz.2.685" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.677111][ T29] audit: type=1400 audit(1739979992.921:968): avc: denied { create } for pid=8592 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 321.699691][ T29] audit: type=1400 audit(1739979992.921:969): avc: denied { ioctl } for pid=8592 comm="syz.2.685" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 324.730552][ T8621] netlink: 148 bytes leftover after parsing attributes in process `syz.4.692'. [ 326.539135][ T8338] team0: Port device team_slave_1 added [ 327.520878][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.535954][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.570154][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.607052][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.616434][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.649081][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.699515][ T8316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.753812][ T8316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.806101][ T8316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.924438][ T8316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.149846][ T8338] hsr_slave_0: entered promiscuous mode [ 328.228300][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 329.116704][ T8338] hsr_slave_1: entered promiscuous mode [ 329.123288][ T8338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.131816][ T8338] Cannot create hsr debugfs directory [ 329.966374][ T6401] IPVS: stop unused estimator thread 0... [ 330.448402][ T8670] netlink: 148 bytes leftover after parsing attributes in process `syz.4.702'. [ 331.212016][ T29] audit: type=1400 audit(1739980003.461:970): avc: denied { write } for pid=8674 comm="syz.4.704" name="vbi7" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 331.235264][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.220691][ T29] audit: type=1400 audit(1739980003.481:971): avc: denied { create } for pid=8674 comm="syz.4.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 332.415091][ T8316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.560520][ T29] audit: type=1400 audit(1739980004.801:972): avc: denied { mount } for pid=8674 comm="syz.4.704" name="/" dev="ocfs2_dlmfs" ino=18110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 332.960617][ T5914] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 333.905667][ T5914] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 334.171247][ T29] audit: type=1400 audit(1739980006.341:973): avc: denied { mount } for pid=8689 comm="syz.3.706" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 334.195023][ T5914] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.217146][ T8316] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.246304][ T5914] usb 3-1: string descriptor 0 read error: -71 [ 334.292937][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.300066][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.321118][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 334.334722][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.348454][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.355653][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.921393][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 335.102846][ T5914] usb 3-1: config 0 descriptor?? [ 335.443930][ T5914] usb 3-1: can't set config #0, error -71 [ 335.453680][ T5914] usb 3-1: USB disconnect, device number 19 [ 335.794178][ T29] audit: type=1400 audit(1739980008.031:974): avc: denied { sys_chroot } for pid=8714 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 336.102636][ T29] audit: type=1400 audit(1739980008.031:975): avc: denied { setgid } for pid=8714 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 336.326608][ T29] audit: type=1400 audit(1739980008.081:976): avc: denied { setrlimit } for pid=8714 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 336.388985][ T8338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.478496][ T8338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 336.656224][ T8338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 336.986946][ T8338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.954044][ T29] audit: type=1400 audit(1739980010.191:977): avc: denied { sys_module } for pid=8316 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 338.062261][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.113015][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.154832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.162036][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.126503][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.133708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.550007][ T8338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.692577][ T8316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.773316][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 341.794368][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.946192][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 342.541045][ T8316] veth0_vlan: entered promiscuous mode [ 342.650598][ T8316] veth1_vlan: entered promiscuous mode [ 342.725959][ T8316] veth0_macvtap: entered promiscuous mode [ 342.776078][ T8316] veth1_macvtap: entered promiscuous mode [ 343.610931][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.668875][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.746188][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.805878][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.859417][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.896808][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.908678][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.928786][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.172636][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.196567][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.244870][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.497781][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.992217][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.093442][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.209814][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.312800][ T8316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.419860][ T8316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.534918][ T8316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.562668][ T8316] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.595569][ T8316] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.627559][ T8316] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.640477][ T8316] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.767170][ T8338] veth0_vlan: entered promiscuous mode [ 345.807537][ T8338] veth1_vlan: entered promiscuous mode [ 345.829213][ T8338] veth0_macvtap: entered promiscuous mode [ 345.855743][ T8338] veth1_macvtap: entered promiscuous mode [ 346.009683][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 347.560272][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.601922][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.616431][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.733468][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.744990][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.760572][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.772438][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.783668][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.795187][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.805770][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.835419][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.852201][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.463260][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.507135][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.553649][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.600450][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.637006][ T5193] udevd[5193]: worker [6108] /devices/virtual/block/nbd0 timeout; kill it [ 350.700516][ T5193] udevd[5193]: seq 11772 '/devices/virtual/block/nbd0' killed [ 350.730469][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.790639][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.835849][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.885697][ T8338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.921794][ T8338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.054647][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.150165][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.164525][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.175328][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.184545][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.193953][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 351.201650][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 352.026892][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 210 seconds [ 352.343228][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 352.354372][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 352.364364][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 352.376605][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.430261][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 352.439271][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.303610][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 353.332457][ T5833] Bluetooth: hci0: command tx timeout [ 353.953495][ T6054] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.180573][ T29] audit: type=1400 audit(1739980026.381:978): avc: denied { create } for pid=8892 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 355.094036][ T5833] Bluetooth: hci5: command tx timeout [ 355.759969][ T5833] Bluetooth: hci0: command tx timeout [ 356.310742][ T29] audit: type=1400 audit(1739980026.391:979): avc: denied { setopt } for pid=8892 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 356.415968][ T29] audit: type=1400 audit(1739980026.401:980): avc: denied { connect } for pid=8892 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.447552][ T29] audit: type=1400 audit(1739980026.401:981): avc: denied { getopt } for pid=8892 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.672215][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 357.270696][ T5132] Bluetooth: hci5: command tx timeout [ 357.785541][ T6054] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.794522][ T5132] Bluetooth: hci0: command tx timeout [ 360.090154][ T5132] Bluetooth: hci5: command tx timeout [ 360.095669][ T5132] Bluetooth: hci0: command tx timeout [ 360.402845][ T6054] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.439088][ T8860] chnl_net:caif_netlink_parms(): no params data found [ 361.856726][ T6054] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.915781][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 362.111858][ T5833] Bluetooth: hci5: command tx timeout [ 362.694207][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.708311][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.715716][ T8860] bridge_slave_0: entered allmulticast mode [ 362.725522][ T8860] bridge_slave_0: entered promiscuous mode [ 362.990983][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 364.009629][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.030606][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.052723][ T8860] bridge_slave_1: entered allmulticast mode [ 364.059873][ T8860] bridge_slave_1: entered promiscuous mode [ 367.236782][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.264984][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.397995][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.405241][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.414076][ T8874] bridge_slave_0: entered allmulticast mode [ 367.421164][ T8874] bridge_slave_0: entered promiscuous mode [ 368.825024][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.837211][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.844683][ T8874] bridge_slave_1: entered allmulticast mode [ 368.865051][ T8874] bridge_slave_1: entered promiscuous mode [ 368.949550][ T8860] team0: Port device team_slave_0 added [ 369.000724][ T8860] team0: Port device team_slave_1 added [ 369.090183][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.102628][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.759'. [ 369.189597][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.215847][ T6054] bridge_slave_1: left allmulticast mode [ 369.237533][ T6054] bridge_slave_1: left promiscuous mode [ 369.255646][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.296177][ T6054] bridge_slave_0: left allmulticast mode [ 369.312563][ T6054] bridge_slave_0: left promiscuous mode [ 369.325903][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.642885][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.765371][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.777067][ T6054] bond0 (unregistering): Released all slaves [ 371.844538][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.853156][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.879377][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.915551][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.927663][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.976962][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.242154][ T8860] hsr_slave_0: entered promiscuous mode [ 372.254534][ T8860] hsr_slave_1: entered promiscuous mode [ 372.432967][ T8860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.497529][ T8860] Cannot create hsr debugfs directory [ 372.608041][ T8874] team0: Port device team_slave_0 added [ 372.731871][ T8874] team0: Port device team_slave_1 added [ 372.744818][ T6054] hsr_slave_0: left promiscuous mode [ 372.757233][ T6054] hsr_slave_1: left promiscuous mode [ 372.769812][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.778138][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.877766][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.918732][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.000076][ T6054] veth1_macvtap: left promiscuous mode [ 373.661209][ T6054] veth0_macvtap: left promiscuous mode [ 373.763358][ T6054] veth1_vlan: left promiscuous mode [ 373.774039][ T6054] veth0_vlan: left promiscuous mode [ 374.027161][ T29] audit: type=1400 audit(1739980046.271:982): avc: denied { mount } for pid=9084 comm="syz.2.771" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 374.633958][ T29] audit: type=1400 audit(1739980046.871:983): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 374.922514][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 377.238845][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 378.520072][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.935193][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 380.050854][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 380.417365][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 382.634923][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 240 seconds [ 384.517942][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.549366][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.622816][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.714643][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.744730][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.784062][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.190241][ T9188] netlink: 148 bytes leftover after parsing attributes in process `syz.2.795'. [ 386.213613][ T8874] hsr_slave_0: entered promiscuous mode [ 386.321143][ T8874] hsr_slave_1: entered promiscuous mode [ 386.337764][ T8874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.356072][ T8874] Cannot create hsr debugfs directory [ 387.699753][ T9210] netlink: 148 bytes leftover after parsing attributes in process `syz.4.797'. [ 388.105726][ T8860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.396332][ T8860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.424973][ T8860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 388.454625][ T8860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 388.760745][ T6054] bridge_slave_1: left allmulticast mode [ 388.767542][ T6054] bridge_slave_1: left promiscuous mode [ 388.779054][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.788197][ T6054] bridge_slave_0: left allmulticast mode [ 388.795922][ T6054] bridge_slave_0: left promiscuous mode [ 388.802034][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.602281][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'. [ 390.755620][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 391.167236][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.197734][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.212168][ T6054] bond0 (unregistering): Released all slaves [ 391.466772][ T6054] hsr_slave_0: left promiscuous mode [ 391.488953][ T6054] hsr_slave_1: left promiscuous mode [ 391.507265][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.519292][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.550183][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.605000][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.856564][ T6054] veth1_macvtap: left promiscuous mode [ 391.885645][ T6054] veth0_macvtap: left promiscuous mode [ 391.921993][ T6054] veth1_vlan: left promiscuous mode [ 391.962407][ T6054] veth0_vlan: left promiscuous mode [ 394.756354][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 395.430648][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 395.535817][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 397.494908][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.821'. [ 398.184366][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 398.363488][ T8860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.800047][ T8860] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.907169][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.914398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.954547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.961736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.971911][ T29] audit: type=1400 audit(1739980071.221:984): avc: denied { write } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.039165][ T29] audit: type=1400 audit(1739980071.221:985): avc: denied { remove_name } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.074056][ T29] audit: type=1400 audit(1739980071.221:986): avc: denied { rename } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.159743][ T29] audit: type=1400 audit(1739980071.221:987): avc: denied { add_name } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.525721][ T29] audit: type=1400 audit(1739980071.221:988): avc: denied { unlink } for pid=5175 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.640949][ T8874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 399.641147][ T29] audit: type=1400 audit(1739980071.221:989): avc: denied { create } for pid=5175 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.710457][ T8874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.742577][ T8874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 399.785187][ T8874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.975941][ T8874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.019041][ T8874] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.058696][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.065941][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.098481][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.105685][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.145732][ T8860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.633886][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.952873][ T29] audit: type=1400 audit(1739980073.171:990): avc: denied { connect } for pid=9359 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 401.340970][ T29] audit: type=1400 audit(1739980073.171:991): avc: denied { name_connect } for pid=9359 comm="syz.4.828" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 401.653535][ T8860] veth0_vlan: entered promiscuous mode [ 402.443124][ T8860] veth1_vlan: entered promiscuous mode [ 402.531832][ T8860] veth0_macvtap: entered promiscuous mode [ 403.081735][ T8860] veth1_macvtap: entered promiscuous mode [ 403.299368][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.394146][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.450735][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.557935][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.840395][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.879128][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.897691][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.920345][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.972444][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.002542][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.118452][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.250548][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.270591][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.283227][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.298177][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.413101][ T8860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.427099][ T8860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.443487][ T8860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.475030][ T8860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.486973][ T8860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.498164][ T8860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.507403][ T8860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.320521][ T29] audit: type=1400 audit(1739980077.561:992): avc: denied { write } for pid=9407 comm="syz.2.836" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 405.371870][ T8874] veth0_vlan: entered promiscuous mode [ 405.388366][ T9408] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3256431472 (26051451776 ns) > initial count (24997152112 ns). Using initial count to start timer. [ 405.390922][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.435576][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.463026][ T6393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.472320][ T6393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.497609][ T29] audit: type=1400 audit(1739980077.741:993): avc: denied { mounton } for pid=8860 comm="syz-executor" path="/root/syzkaller.Lnctey/syz-tmp" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 405.586967][ T29] audit: type=1400 audit(1739980077.781:994): avc: denied { mount } for pid=8860 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 405.616581][ T29] audit: type=1400 audit(1739980077.791:995): avc: denied { mounton } for pid=8860 comm="syz-executor" path="/root/syzkaller.Lnctey/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 405.621311][ T8874] veth1_vlan: entered promiscuous mode [ 405.646401][ T29] audit: type=1400 audit(1739980077.791:996): avc: denied { mounton } for pid=8860 comm="syz-executor" path="/root/syzkaller.Lnctey/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 405.703415][ T9417] netlink: 148 bytes leftover after parsing attributes in process `syz.4.834'. [ 406.171986][ T8874] veth0_macvtap: entered promiscuous mode [ 406.200036][ T8874] veth1_macvtap: entered promiscuous mode [ 406.250366][ T29] audit: type=1400 audit(1739980077.811:997): avc: denied { unmount } for pid=8860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 406.255609][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.278907][ T29] audit: type=1400 audit(1739980077.821:998): avc: denied { mounton } for pid=8860 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 406.326322][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.343838][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.364815][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.377798][ T29] audit: type=1400 audit(1739980077.821:999): avc: denied { mount } for pid=8860 comm="syz-executor" name="/" dev="gadgetfs" ino=7028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 406.401248][ T29] audit: type=1400 audit(1739980077.971:1000): avc: denied { mounton } for pid=8860 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 406.425616][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.436373][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.446982][ T29] audit: type=1400 audit(1739980077.971:1001): avc: denied { mount } for pid=8860 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 406.482754][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.605616][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.626886][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.645254][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.657310][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.674582][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.692405][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.712908][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.727125][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.738529][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.752980][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.766934][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.780128][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.795938][ T8874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.807667][ T8874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.821596][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.897534][ T8874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.965619][ T8874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.998589][ T8874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.106835][ T8874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.271802][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.327890][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.425508][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.530986][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.541302][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 412.315881][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.849'. [ 413.074842][ T7072] block nbd0: Possible stuck request ffff888026885080: control (read@0,4096B). Runtime 270 seconds [ 418.980431][ T29] audit: type=1400 audit(1739980091.181:1002): avc: denied { accept } for pid=9563 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 419.292254][ T9432] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 419.619875][ T29] audit: type=1400 audit(1739980091.341:1003): avc: denied { append } for pid=9563 comm="syz.2.864" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 419.643521][ T9569] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 419.677389][ T29] audit: type=1400 audit(1739980091.421:1004): avc: denied { map } for pid=9563 comm="syz.2.864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.184231][ T29] audit: type=1400 audit(1739980091.421:1005): avc: denied { read write } for pid=9563 comm="syz.2.864" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 420.214554][ T29] audit: type=1400 audit(1739980091.441:1006): avc: denied { write } for pid=9563 comm="syz.2.864" path="socket:[22402]" dev="sockfs" ino=22402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 420.428228][ T9432] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 420.457011][ T9432] usb 7-1: config 0 interface 0 has no altsetting 0 [ 420.706133][ T9432] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.726371][ T9432] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.868803][ T9432] usb 7-1: Product: syz [ 420.873796][ T9432] usb 7-1: Manufacturer: syz [ 420.878452][ T9432] usb 7-1: SerialNumber: syz [ 420.912587][ T9432] usb 7-1: config 0 descriptor?? [ 420.933568][ T9432] usb 7-1: selecting invalid altsetting 0 [ 423.640522][ T30] INFO: task syz.0.605:8192 blocked for more than 143 seconds. [ 423.649122][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 423.664810][ T9432] usb 7-1: USB disconnect, device number 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.929352][ T29] audit: type=1400 audit(1739980096.151:1007): avc: denied { write } for pid=5805 comm="syz-executor" path="pipe:[4613]" dev="pipefs" ino=4613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 423.952497][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.918835][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.910179][ T30] task:syz.0.605 state:D stack:26448 pid:8192 tgid:8191 ppid:5824 task_flags:0x400140 flags:0x00000004 [ 425.984285][ T30] Call Trace: [ 426.011656][ T30] [ 426.014643][ T30] __schedule+0xf43/0x5890 [ 426.019076][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 426.060496][ T30] ? __pfx___schedule+0x10/0x10 [ 426.065416][ T30] ? schedule+0x298/0x350 [ 426.069795][ T30] ? __pfx_lock_release+0x10/0x10 [ 426.080530][ T30] ? __mutex_trylock_common+0x78/0x250 [ 426.086056][ T30] ? lock_acquire+0x2f/0xb0 [ 426.094518][ T30] ? schedule+0x1fd/0x350 [ 426.098907][ T30] schedule+0xe7/0x350 [ 426.105705][ T30] schedule_preempt_disabled+0x13/0x30 [ 426.118068][ T30] __mutex_lock+0x6bd/0xb10 [ 426.124947][ T30] ? bdev_open+0xa2/0xe20 [ 426.129311][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 426.134506][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 426.140187][ T30] ? bdev_open+0xa2/0xe20 [ 426.144742][ T30] bdev_open+0xa2/0xe20 [ 426.148927][ T30] bdev_file_open_by_dev+0x17d/0x210 [ 426.154819][ T30] setup_bdev_super+0x39b/0x730 [ 426.159700][ T30] get_tree_bdev_flags+0x365/0x620 [ 426.169194][ T30] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 426.174759][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 426.190379][ T30] ? bpf_lsm_capable+0x9/0x10 [ 426.195103][ T30] ? security_capable+0x7e/0x260 [ 426.200077][ T30] vfs_get_tree+0x8b/0x340 [ 426.204705][ T30] path_mount+0x14e6/0x1f10 [ 426.217036][ T30] ? kmem_cache_free+0x2e2/0x4d0 [ 426.222326][ T30] ? __pfx_path_mount+0x10/0x10 [ 426.227227][ T30] ? putname+0x13c/0x180 [ 426.231813][ T30] __x64_sys_mount+0x28f/0x310 [ 426.236594][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 426.242371][ T30] do_syscall_64+0xcd/0x250 [ 426.246963][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.253327][ T30] RIP: 0033:0x7fe5ccd8cde9 [ 426.257762][ T30] RSP: 002b:00007fe5cdc29038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.266612][ T30] RAX: ffffffffffffffda RBX: 00007fe5ccfa5fa0 RCX: 00007fe5ccd8cde9 [ 426.274895][ T30] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000400000000040 [ 426.283032][ T30] RBP: 00007fe5cce0e2a0 R08: 0000400000000140 R09: 0000000000000000 [ 426.291178][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.299169][ T30] R13: 0000000000000000 R14: 00007fe5ccfa5fa0 R15: 00007ffec5d26cb8 [ 426.307197][ T30] [ 426.313861][ T30] [ 426.313861][ T30] Showing all locks held in the system: [ 426.341903][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 426.347256][ T30] 1 lock held by khungtaskd/30: [ 426.378493][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 426.388837][ T30] 1 lock held by dhcpcd/5487: [ 426.415964][ T30] #0: ffffffff8fef6aa8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x316/0x1560 [ 426.426633][ T30] 2 locks held by getty/5570: [ 426.436462][ T30] #0: ffff88803784a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 426.449221][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 426.470379][ T30] 3 locks held by kworker/1:5/5914: [ 426.475624][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 426.497439][ T30] #1: ffffc90003fe7d18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 426.524110][ T30] #2: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 426.536763][ T30] 1 lock held by udevd/6108: [ 426.541753][ T30] #0: ffff8881443214c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 426.554141][ T30] 2 locks held by syz.0.605/8192: [ 426.559183][ T30] #0: ffff8880363880e0 (&type->s_umount_key#78/1){+.+.}-{4:4}, at: alloc_super+0x23d/0xbd0 [ 426.569414][ T30] #1: ffff8881443214c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe20 [ 426.580777][ T30] 1 lock held by syz.5.858/9541: [ 426.585769][ T30] #0: ffffffff8fef6aa8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 426.594822][ T30] 5 locks held by syz.3.869/9599: [ 426.599889][ T30] #0: ffff88807c556e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 426.610513][ T30] #1: ffffffff8ff953b0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x53/0xa0 [ 426.622426][ T30] #2: ffffffff8fef6aa8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 426.632376][ T30] #3: ffff88805bb98768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf1/0x720 [ 426.643134][ T30] #4: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 426.653295][ T30] 2 locks held by syz.4.870/9604: [ 426.658312][ T30] #0: ffffffff8ff977b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 426.666585][ T30] #1: ffffffff8ff97868 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 426.678786][ T30] 3 locks held by syz.4.870/9606: [ 426.684743][ T30] #0: ffffffff8ff977b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 426.693138][ T30] #1: ffffffff8ff97868 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 426.702288][ T30] #2: ffffffff8fef6aa8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x20a2/0x4060 [ 426.712395][ T30] 2 locks held by syz.2.871/9607: [ 426.718095][ T30] #0: ffffffff8ff977b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 426.726401][ T30] #1: ffffffff8ff97868 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 426.735497][ T30] 2 locks held by syz.2.871/9608: [ 426.740591][ T30] #0: ffffffff8ff977b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 426.748864][ T30] #1: ffffffff8ff97868 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 426.757990][ T30] 3 locks held by syz.6.872/9611: [ 426.763082][ T30] #0: ffff88805e1e8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 426.772807][ T30] #1: ffff88805e1e8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 426.782569][ T30] #2: ffff88805d5d8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7f/0x730 [ 426.794838][ T9606] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 426.818376][ T9607] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 426.851298][ T30] [ 426.853685][ T30] ============================================= [ 426.853685][ T30] [ 426.887611][ T30] NMI backtrace for cpu 1 [ 426.887626][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 426.887644][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 426.887654][ T30] Call Trace: [ 426.887659][ T30] [ 426.887664][ T30] dump_stack_lvl+0x116/0x1f0 [ 426.887690][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 426.887712][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 426.887735][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 426.887762][ T30] watchdog+0xf62/0x12b0 [ 426.887791][ T30] ? __pfx_watchdog+0x10/0x10 [ 426.887812][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 426.887831][ T30] ? __kthread_parkme+0x148/0x220 [ 426.887846][ T30] ? __pfx_watchdog+0x10/0x10 [ 426.887869][ T30] kthread+0x3af/0x750 [ 426.887889][ T30] ? __pfx_kthread+0x10/0x10 [ 426.887911][ T30] ? __pfx_kthread+0x10/0x10 [ 426.887928][ T30] ret_from_fork+0x45/0x80 [ 426.887947][ T30] ? __pfx_kthread+0x10/0x10 [ 426.887965][ T30] ret_from_fork_asm+0x1a/0x30 [ 426.887991][ T30] [ 426.888001][ T30] Sending NMI from CPU 1 to CPUs 0: [ 427.002080][ C0] NMI backtrace for cpu 0 [ 427.002092][ C0] CPU: 0 UID: 0 PID: 6054 Comm: kworker/u8:11 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 427.002108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.002117][ C0] Workqueue: bat_events batadv_nc_worker [ 427.002143][ C0] RIP: 0010:check_preemption_disabled+0x16/0xe0 [ 427.002163][ C0] Code: ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 4d ad ac 74 65 8b 05 42 ad ac 74 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc [ 427.002175][ C0] RSP: 0000:ffffc90004a1fa58 EFLAGS: 00000292 [ 427.002185][ C0] RAX: 0000000080000001 RBX: 0000000000000000 RCX: ffffffff8195c03c [ 427.002194][ C0] RDX: fffffbfff20c49e3 RSI: ffffffff8bd35400 RDI: ffffffff8bd35440 [ 427.002202][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c49e2 [ 427.002210][ C0] R10: ffffffff90624f17 R11: 0000000000000002 R12: 0000000000000000 [ 427.002218][ C0] R13: 000000000003d94c R14: 0000000000000000 R15: 0000000000000000 [ 427.002226][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 427.002240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.002248][ C0] CR2: 000055b09840a070 CR3: 000000003435c000 CR4: 00000000003526f0 [ 427.002256][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.002263][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 427.002271][ C0] Call Trace: [ 427.002276][ C0] [ 427.002281][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 427.002302][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 427.002318][ C0] ? nmi_handle+0x1ac/0x5d0 [ 427.002336][ C0] ? check_preemption_disabled+0x16/0xe0 [ 427.002350][ C0] ? default_do_nmi+0x6a/0x160 [ 427.002368][ C0] ? exc_nmi+0x170/0x1e0 [ 427.002384][ C0] ? end_repeat_nmi+0xf/0x53 [ 427.002403][ C0] ? trace_lock_acquire+0x3c/0x1f0 [ 427.002418][ C0] ? check_preemption_disabled+0x16/0xe0 [ 427.002439][ C0] ? check_preemption_disabled+0x16/0xe0 [ 427.002455][ C0] ? check_preemption_disabled+0x16/0xe0 [ 427.002469][ C0] [ 427.002473][ C0] [ 427.002478][ C0] rcu_is_watching+0x12/0xc0 [ 427.002493][ C0] trace_lock_acquire+0x14e/0x1f0 [ 427.002507][ C0] ? batadv_nc_worker+0x164/0x1060 [ 427.002522][ C0] lock_acquire+0x2f/0xb0 [ 427.002539][ C0] ? batadv_nc_worker+0x164/0x1060 [ 427.002555][ C0] batadv_nc_worker+0x16a/0x1060 [ 427.002570][ C0] ? batadv_nc_worker+0x164/0x1060 [ 427.002587][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 427.002602][ C0] ? rcu_is_watching+0x12/0xc0 [ 427.002614][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 427.002628][ C0] ? process_one_work+0x921/0x1ba0 [ 427.002644][ C0] ? lock_acquire+0x2f/0xb0 [ 427.002659][ C0] ? process_one_work+0x921/0x1ba0 [ 427.002675][ C0] process_one_work+0x9c5/0x1ba0 [ 427.002694][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 427.002714][ C0] ? __pfx_process_one_work+0x10/0x10 [ 427.002732][ C0] ? assign_work+0x1a0/0x250 [ 427.002748][ C0] worker_thread+0x6c8/0xf00 [ 427.002766][ C0] ? __pfx_worker_thread+0x10/0x10 [ 427.002782][ C0] kthread+0x3af/0x750 [ 427.002796][ C0] ? __pfx_kthread+0x10/0x10 [ 427.002809][ C0] ? lock_acquire+0x2f/0xb0 [ 427.002826][ C0] ? __pfx_kthread+0x10/0x10 [ 427.002840][ C0] ret_from_fork+0x45/0x80 [ 427.002856][ C0] ? __pfx_kthread+0x10/0x10 [ 427.002870][ C0] ret_from_fork_asm+0x1a/0x30 [ 427.002889][ C0] [ 427.014866][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 427.014882][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 427.014899][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 427.014909][ T30] Call Trace: [ 427.014917][ T30] [ 427.014925][ T30] dump_stack_lvl+0x3d/0x1f0 [ 427.014949][ T30] panic+0x71d/0x800 [ 427.014966][ T30] ? __pfx_panic+0x10/0x10 [ 427.014981][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 427.015003][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.015022][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 427.015041][ T30] ? watchdog+0xdcc/0x12b0 [ 427.015062][ T30] ? watchdog+0xdbf/0x12b0 [ 427.015084][ T30] watchdog+0xddd/0x12b0 [ 427.015107][ T30] ? __pfx_watchdog+0x10/0x10 [ 427.015126][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 427.015143][ T30] ? __kthread_parkme+0x148/0x220 [ 427.015159][ T30] ? __pfx_watchdog+0x10/0x10 [ 427.015199][ T30] kthread+0x3af/0x750 [ 427.015218][ T30] ? __pfx_kthread+0x10/0x10 [ 427.015237][ T30] ? __pfx_kthread+0x10/0x10 [ 427.015255][ T30] ret_from_fork+0x45/0x80 [ 427.015273][ T30] ? __pfx_kthread+0x10/0x10 [ 427.015289][ T30] ret_from_fork_asm+0x1a/0x30 [ 427.015314][ T30] [ 427.479679][ T30] Kernel Offset: disabled [ 427.484001][ T30] Rebooting in 86400 seconds..