last executing test programs: 4m22.565849474s ago: executing program 0 (id=575): socket$inet(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000540)="1d54b8e953e9af43aa84936b86dd", 0x36, 0x4000004, &(0x7f00000004c0)={0x11, 0x7, r1, 0x1, 0xb0, 0x6, @broadcast}, 0x14) 4m22.43952732s ago: executing program 0 (id=578): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc8500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.338898236s ago: executing program 0 (id=580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f00000002c0)='(\\-$}\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet(0x2, 0x2000000080002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = semget$private(0x0, 0x6, 0x0) semtimedop(r5, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x7, 0x1, 0x20000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) syz_io_uring_setup(0x20e9, &(0x7f0000000240)={0x0, 0x6904, 0x10100, 0x2, 0x10b, 0x0, r4}, &(0x7f0000000500)=0x0, &(0x7f0000000440)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd_index, 0x0, 0x0, 0x1, 0x7}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) 4m21.591077611s ago: executing program 0 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) 4m21.40113775s ago: executing program 0 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 4m21.12350706s ago: executing program 0 (id=590): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000180)='0', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 4m21.006654454s ago: executing program 32 (id=590): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000180)='0', 0x1}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 2m39.291080338s ago: executing program 2 (id=866): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, 0x0, 0x0) sendto$l2tp(r4, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, 0x0, 0x0) recvfrom$l2tp(r4, 0x0, 0x0, 0x40010050, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m36.414324067s ago: executing program 2 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = syz_open_dev$vivid(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x52, @empty, @mcast1, 0x0, 0x8000, 0x101}}) 2m35.092487327s ago: executing program 2 (id=876): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x400, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000005, 0x4000010, r2, 0x4c1e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='DIGITAL2 \'Master Capture\' 00000000000000000000\nMIC \'Synth\' 00000000000000000000\nPHONEIN\nOGAIN\nTREBLE \'Synth '], 0xdf) dup3(r4, 0xffffffffffffffff, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) 2m33.79276526s ago: executing program 2 (id=878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fdatasync(r6) recvmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000300)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x806}], 0x1, 0x2, 0x0) sched_setaffinity(0x0, 0x5905e340ca9f694a, &(0x7f0000000280)=0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000200)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000002600)={0x1, 0x0, [{0xf2f6866abe0147ab, 0xb5, &(0x7f0000000f80)=""/181}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000240)=0x81fffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m30.736813988s ago: executing program 2 (id=884): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYRESHEX=0x0], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) syz_emit_ethernet(0x3e, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902", 0x57, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f00000002c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f00000010c0)}, 0x10) 2m26.531537161s ago: executing program 2 (id=891): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) write$nbd(r2, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESHEX], 0xd6) 2m11.467463647s ago: executing program 33 (id=891): sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() sync() r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) write$nbd(r2, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0, @ANYRESHEX], 0xd6) 18.28635192s ago: executing program 6 (id=1118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100001"], 0x184}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r6, 0x5, 0x0, @void}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xad, 0xa8, @random="4f7105f180c8dbdb8461cc6537ec3bd66c272eea8e1ff4f53e007f7c023dc6677850b6c141e260f6b077400e412ec8ffb2dddcdaffcd9721a2da6bd29a9e4fa643e2b8a2be536584e54091954f951b77baeebda6bdf369fb2c6f5fc28b9fc3ac537facd6c2114a4ea5f8fb3cb785e162a7d93e6e2fc491d5ecffe19c08e5a7c8fd5d93fdfd4efff0a10a188e25ac249c347fcbca3c3fe1c79e8ef9d107ee00592e688fa07f88dc87f7"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) 16.170694194s ago: executing program 5 (id=1122): rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x3f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.630352651s ago: executing program 5 (id=1127): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 12.273387464s ago: executing program 4 (id=1129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 12.171662335s ago: executing program 6 (id=1130): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.018231028s ago: executing program 5 (id=1131): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 11.574966068s ago: executing program 6 (id=1133): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 11.267136675s ago: executing program 4 (id=1134): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[r8], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 10.132069554s ago: executing program 6 (id=1136): openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x2}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 9.725102745s ago: executing program 1 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', r3, 0x0, 0x1000000000}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf6", 0x4be, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') 9.371474149s ago: executing program 4 (id=1138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1000000000}, 0x18) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x4be, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f0000001480)) 8.679244079s ago: executing program 6 (id=1139): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 8.323813737s ago: executing program 1 (id=1140): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.783611933s ago: executing program 4 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB="000000000000000000000000000031f975bc520089"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002000000000000000000000005a447967", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f00000005c0)=ANY=[], 0x100}], 0x2}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 7.475824931s ago: executing program 3 (id=1142): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[r8], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 7.344707162s ago: executing program 1 (id=1143): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r4, 0x0, 0x4, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000800000000000000000000000000000000ff00e02d7c03f93a395aab", @ANYRES32=0x0, @ANYRES32], 0x50) 6.737956164s ago: executing program 5 (id=1144): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r4, 0x0, 0x4, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000800000000000000000000000000000000ff00e02d7c03f93a395aab", @ANYRES32=0x0, @ANYRES32], 0x50) 6.021090636s ago: executing program 1 (id=1145): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340)={r2, 0xffffffffffffffff, 0x4, r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.98673701s ago: executing program 3 (id=1146): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.961727451s ago: executing program 5 (id=1147): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e25, @remote}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x2, 0x2, 0xffffffe0, 0xfffffffc, 0x42, "c9190000000003052de5856ee1aa3a9400", 0x99, 0x4}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 4.672736616s ago: executing program 1 (id=1148): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x44804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 3.735480724s ago: executing program 5 (id=1149): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 3.646229138s ago: executing program 3 (id=1150): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 2.99661256s ago: executing program 3 (id=1151): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e25, @remote}, 0x10) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x2, 0x2, 0xffffffe0, 0xfffffffc, 0x42, "c9190000000003052de5856ee1aa3a9400", 0x99, 0x4}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 2.926035052s ago: executing program 4 (id=1152): rt_sigaction(0x16, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b, 0x3f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.021873653s ago: executing program 3 (id=1153): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="2e9c0f20e06635000010000f22e00f380406000066b98a0200000f323ef20f58790066b9c200000066b86f00000066ba000000000f300f219dbaa00066edf30f7f3966b8761fe42d0f23c00f21f86635020002000f23f8", 0x57}], 0x1, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'wlc\x00', 0x0, 0x0, 0x4b}, 0x2c) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r4, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000100)="26d1b3", 0x3, 0x40040, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225"], &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa, 0x2, 0x0, @void, @value}, 0x28) syz_open_dev$evdev(0x0, 0x2, 0x822b01) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x20, 0x4, @tid=r6}, 0x0) 1.439361836s ago: executing program 1 (id=1154): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) 1.406320935s ago: executing program 4 (id=1155): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 641.577848ms ago: executing program 3 (id=1156): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) socket(0x1d, 0x2, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001340)={r3, 0xffffffffffffffff, 0x4, r3}, 0x10) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1157): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) epoll_create1(0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[r8], 0x1, r6, r7, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) kernel console output (not intermixed with test programs): idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 210.710640][ T9] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 210.735012][ T9] usb 4-1: Product: syz [ 210.740064][ T9] usb 4-1: Manufacturer: syz [ 210.744672][ T9] usb 4-1: SerialNumber: syz [ 210.755204][ T9] usb 4-1: config 0 descriptor?? [ 211.152086][ T6338] usb 4-1: USB disconnect, device number 9 [ 212.169992][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 213.844524][ T5864] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 214.007990][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 214.014390][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.557834][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.569451][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.579135][ T5864] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.592426][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.612901][ T5864] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.640693][ T5864] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.679500][ T5864] usb 2-1: Manufacturer: syz [ 214.706061][ T5864] usb 2-1: config 0 descriptor?? [ 214.948619][ T45] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 215.028067][ T29] audit: type=1400 audit(1739979775.083:465): avc: denied { read } for pid=7742 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 215.107972][ T5864] rc_core: IR keymap rc-hauppauge not found [ 215.114634][ T5864] Registered IR keymap rc-empty [ 215.124525][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.141584][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.275060][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.446784][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.603540][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.610186][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 215.628838][ T5864] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 215.650595][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.654033][ T5864] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 215.681003][ T45] usb 4-1: config 0 descriptor?? [ 215.681278][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.803293][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.032973][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.070012][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.088837][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.118428][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.162957][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.199263][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.220570][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.247471][ T29] audit: type=1400 audit(1739979776.293:466): avc: denied { recv } for pid=5824 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.243 dest=37508 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 216.258029][ T5864] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.272953][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.345888][ T5864] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.356884][ T5864] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.379004][ T5864] usb 2-1: USB disconnect, device number 12 [ 216.442316][ T45] wacom 0003:056A:00D5.0003: Unknown device_type for 'HID 056a:00d5'. Assuming pen. [ 216.455322][ T45] wacom 0003:056A:00D5.0003: hidraw0: USB HID v0.00 Device [HID 056a:00d5] on usb-dummy_hcd.3-1/input0 [ 216.472545][ T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 216.473239][ T45] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D5.0003/input/input14 [ 217.071426][ T45] usb 4-1: USB disconnect, device number 10 [ 217.112400][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 217.164519][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 217.201061][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 217.253089][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 217.264552][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.325522][ T9] usb 5-1: Product: syz [ 217.341868][ T9] usb 5-1: Manufacturer: syz [ 217.346486][ T9] usb 5-1: SerialNumber: syz [ 217.369908][ T9] usb 5-1: config 0 descriptor?? [ 217.375713][ T7761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.423173][ T7761] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.454983][ T9] usb 5-1: ucan: probing device on interface #0 [ 217.602280][ T5817] Bluetooth: hci5: sending frame failed (-49) [ 217.609798][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 218.066788][ T9] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 218.155981][ T9] usb 5-1: USB disconnect, device number 9 [ 218.318043][ T45] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.568034][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 218.625910][ T45] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 218.686669][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.796640][ T45] usb 4-1: config 0 descriptor?? [ 218.810680][ T45] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 220.093041][ T45] gspca_sonixj: reg_w1 err -71 [ 220.102531][ T45] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 220.133462][ T45] usb 4-1: USB disconnect, device number 11 [ 220.715189][ T29] audit: type=1400 audit(1739979780.713:467): avc: denied { ioctl } for pid=7818 comm="syz.2.477" path="socket:[13123]" dev="sockfs" ino=13123 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.740485][ T29] audit: type=1400 audit(1739979780.773:468): avc: denied { read } for pid=7820 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.485069][ T29] audit: type=1400 audit(1739979782.533:469): avc: denied { bind } for pid=7844 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.870151][ T7853] overlay: Unknown parameter 'uid<00000000000000000000' [ 223.318068][ T29] audit: type=1400 audit(1739979783.373:470): avc: denied { ioctl } for pid=7847 comm="syz.3.486" path="/dev/usbmon7" dev="devtmpfs" ino=742 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 225.395493][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 225.426669][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.492'. [ 226.616484][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.762365][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.938074][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 227.217260][ T7897] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 227.239469][ T45] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 227.258151][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.266162][ T45] usb 2-1: Product: syz [ 227.271589][ T45] usb 2-1: Manufacturer: syz [ 227.276193][ T45] usb 2-1: SerialNumber: syz [ 227.282754][ T45] usb 2-1: config 0 descriptor?? [ 227.290234][ T45] ttusb_dec_send_command: command bulk message failed: error -22 [ 227.313823][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.340092][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.350063][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 227.358200][ T45] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 227.359215][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.383433][ T9] usb 5-1: config 0 descriptor?? [ 227.401578][ T29] audit: type=1400 audit(1739979787.463:471): avc: denied { ioctl } for pid=7902 comm="syz.3.501" path="socket:[14340]" dev="sockfs" ino=14340 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.515254][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 227.849896][ T5156] usb 2-1: USB disconnect, device number 13 [ 227.947407][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 227.969642][ T9] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 228.370582][ T9] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 228.381847][ T9] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 228.397720][ T9] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 229.009432][ T9] usb 5-1: USB disconnect, device number 10 [ 229.090672][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.268736][ T8] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 229.283577][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.292990][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 229.435628][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 229.461360][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 229.807041][ T7954] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 230.004640][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.015721][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.034282][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.427765][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.477313][ T7957] 9p: Unknown Cache mode or invalid value m [ 230.485775][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.496394][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.506380][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.556958][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.585496][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.614943][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.626447][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.645461][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.661238][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.719362][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.726933][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.746330][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.767817][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.776597][ T8] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 230.776630][ T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 230.776653][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.804533][ T8] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 230.804560][ T8] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 230.804579][ T8] usb 4-1: Product: syz [ 230.804593][ T8] usb 4-1: Manufacturer: syz [ 230.804607][ T8] usb 4-1: SerialNumber: syz [ 230.806194][ T8] usb 4-1: config 0 descriptor?? [ 230.812612][ T8] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 231.105436][ T5156] usb 4-1: USB disconnect, device number 12 [ 231.115856][ T5156] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 231.945864][ T7993] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 232.418297][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 232.462999][ T7982] syz.4.529: attempt to access beyond end of device [ 232.462999][ T7982] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 232.508906][ T7982] XFS (nbd4): SB validate failed with error -5. [ 232.547857][ T26] block nbd4: Attempted send on invalid socket [ 232.554276][ T26] I/O error, dev nbd4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 232.669211][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.848256][ T8] usb 3-1: device descriptor read/64, error -71 [ 232.918073][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 233.088071][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.098969][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 233.108139][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.116128][ T9] usb 2-1: Product: syz [ 233.130483][ T9] usb 2-1: Manufacturer: syz [ 233.144323][ T9] usb 2-1: SerialNumber: syz [ 233.159882][ T9] usb 2-1: config 0 descriptor?? [ 233.269084][ T8] usb 3-1: device descriptor read/64, error -71 [ 233.398270][ T8] usb usb3-port1: attempt power cycle [ 233.421249][ T9] usb 2-1: USB disconnect, device number 14 [ 233.858118][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 234.488661][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 234.630035][ T8] usb 3-1: device descriptor read/8, error -71 [ 234.672758][ T8017] loop2: detected capacity change from 0 to 7 [ 234.798514][ T5818] Dev loop2: unable to read RDB block 7 [ 234.842955][ T5818] loop2: AHDI p1 [ 234.856819][ T5818] loop2: partition table partially beyond EOD, truncated [ 234.877205][ T8017] Dev loop2: unable to read RDB block 7 [ 234.882825][ T8017] loop2: AHDI p1 [ 234.886594][ T8017] loop2: partition table partially beyond EOD, truncated [ 235.063335][ T29] audit: type=1400 audit(1739979795.123:472): avc: denied { nlmsg_read } for pid=8031 comm="syz.3.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 235.085718][ T5864] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 235.261776][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.306842][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.331299][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.344000][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 235.360293][ T29] audit: type=1400 audit(1739979795.403:473): avc: denied { write } for pid=8039 comm="syz.3.549" path="socket:[15534]" dev="sockfs" ino=15534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 235.386641][ T5864] usb 5-1: can't read configurations, error -71 [ 235.436466][ T8048] sctp: [Deprecated]: syz.0.552 (pid 8048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.436466][ T8048] Use struct sctp_sack_info instead [ 235.598455][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 235.757982][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 235.767320][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.825207][ T45] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 235.833903][ T45] usb 2-1: config 2 has an invalid interface descriptor of length 2, skipping [ 235.844196][ T45] usb 2-1: config 2 has no interface number 0 [ 235.851981][ T45] usb 2-1: config 2 interface 189 has no altsetting 0 [ 235.889286][ T45] usb 2-1: New USB device found, idVendor=4766, idProduct=0001, bcdDevice=d6.55 [ 235.967947][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.994601][ T45] usb 2-1: Product: syz [ 236.009606][ T45] usb 2-1: Manufacturer: syz [ 236.031466][ T45] usb 2-1: SerialNumber: syz [ 236.286811][ T45] usb 2-1: active config #2 != 1 ?? [ 236.332827][ T45] usb 2-1: USB disconnect, device number 15 [ 237.021127][ T8082] Bluetooth: MGMT ver 1.23 [ 237.154305][ T8089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 238.848445][ T29] audit: type=1400 audit(1739979798.903:474): avc: denied { create } for pid=8093 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 239.120316][ T8095] ceph: No mds server is up or the cluster is laggy [ 239.458156][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 239.639240][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 239.784259][ T29] audit: type=1326 audit(1739979799.823:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 239.825728][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.900505][ T29] audit: type=1326 audit(1739979799.823:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 239.940855][ T5866] usb 2-1: config 0 descriptor?? [ 239.959446][ T29] audit: type=1326 audit(1739979799.843:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 239.984600][ T5866] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 240.121130][ T29] audit: type=1326 audit(1739979799.873:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.141779][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.583'. [ 240.144332][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.155599][ T29] audit: type=1326 audit(1739979799.873:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.237054][ T29] audit: type=1326 audit(1739979799.873:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.260276][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.267976][ T29] audit: type=1326 audit(1739979799.873:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.293636][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.303045][ T29] audit: type=1326 audit(1739979799.883:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.326232][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.360273][ T29] audit: type=1326 audit(1739979799.883:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.384426][ T29] audit: type=1326 audit(1739979799.883:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.384441][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 240.384480][ T29] audit: type=1326 audit(1739979799.913:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.494869][ T29] audit: type=1326 audit(1739979799.923:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.524765][ T29] audit: type=1326 audit(1739979799.923:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8123 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe81ad8cde9 code=0x7ffc0000 [ 240.547978][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.631905][ T45] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 240.647203][ T45] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.664535][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 240.671291][ T45] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 240.684394][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.694302][ T45] usb 3-1: config 0 descriptor?? [ 240.811554][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.847641][ T5866] gspca_stv06xx: I2C: Read error writing address: -71 [ 240.859995][ T5866] usb 2-1: USB disconnect, device number 16 [ 240.927763][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.948208][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 240.993710][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.067676][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.085704][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.097443][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.106059][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.115950][ T8] usb 4-1: config 0 has no interfaces? [ 241.124545][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 241.125508][ T45] uclogic 0003:5543:0522.0005: unknown main item tag 0x7 [ 241.133846][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.134304][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.157015][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 241.157681][ T45] uclogic 0003:5543:0522.0005: No inputs registered, leaving [ 241.171723][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.179607][ T8] usb 4-1: config 0 descriptor?? [ 241.181574][ T45] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.04 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 241.294462][ T52] bridge_slave_1: left allmulticast mode [ 241.302903][ T52] bridge_slave_1: left promiscuous mode [ 241.309568][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.321006][ T52] bridge_slave_0: left allmulticast mode [ 241.327308][ T52] bridge_slave_0: left promiscuous mode [ 241.333030][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.374657][ T5156] usb 3-1: USB disconnect, device number 15 [ 241.437524][ T8140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.475388][ T8140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.555767][ T5864] usb 4-1: USB disconnect, device number 13 [ 241.746360][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.763498][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.783648][ T8156] syz.4.594: attempt to access beyond end of device [ 241.783648][ T8156] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 241.785999][ T52] bond0 (unregistering): Released all slaves [ 241.809921][ T8156] XFS (nbd4): SB validate failed with error -5. [ 241.813532][ T52] bond1 (unregistering): Released all slaves [ 241.828470][ T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.843969][ T26] block nbd4: Attempted send on invalid socket [ 241.850341][ T26] I/O error, dev nbd4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 241.988351][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 241.994792][ T45] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 242.011139][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.019566][ T5156] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 242.038013][ T45] usb 2-1: config 0 descriptor?? [ 242.179488][ T5156] usb 4-1: Using ep0 maxpacket: 8 [ 242.186222][ T5156] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 242.195705][ T5156] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 242.211319][ T5156] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 242.228170][ T5156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.241378][ T5156] usb 4-1: Product: syz [ 242.245593][ T5156] usb 4-1: Manufacturer: syz [ 242.266103][ T5156] usb 4-1: SerialNumber: syz [ 242.272714][ T8146] chnl_net:caif_netlink_parms(): no params data found [ 242.582039][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 242.635027][ T45] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 242.681256][ T45] asix 2-1:0.0: probe with driver asix failed with error -61 [ 242.717510][ T5156] usb 4-1: USB disconnect, device number 14 [ 242.729741][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.761914][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.780401][ T8146] bridge_slave_0: entered allmulticast mode [ 242.798774][ T8146] bridge_slave_0: entered promiscuous mode [ 242.841739][ T45] usb 2-1: USB disconnect, device number 17 [ 242.870569][ T52] hsr_slave_0: left promiscuous mode [ 242.900587][ T52] hsr_slave_1: left promiscuous mode [ 242.908362][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.920012][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.938533][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.945936][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.968399][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.983010][ T52] veth1_macvtap: left promiscuous mode [ 242.993742][ T52] veth0_macvtap: left promiscuous mode [ 242.999523][ T52] veth1_vlan: left promiscuous mode [ 243.006072][ T52] veth0_vlan: left promiscuous mode [ 243.148745][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 243.157058][ T8] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.170736][ T8] usb 5-1: config 0 has no interface number 0 [ 243.176930][ T8] usb 5-1: config 0 interface 184 has no altsetting 0 [ 243.191053][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.208068][ T5817] Bluetooth: hci3: command tx timeout [ 243.215342][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.252573][ T8] usb 5-1: Product: syz [ 243.256760][ T8] usb 5-1: Manufacturer: syz [ 243.281463][ T8] usb 5-1: SerialNumber: syz [ 243.315487][ T8] usb 5-1: config 0 descriptor?? [ 243.338338][ T8] smsc75xx v1.0.0 [ 243.767541][ T52] team0 (unregistering): Port device team_slave_1 removed [ 243.796981][ T52] team0 (unregistering): Port device team_slave_0 removed [ 243.954875][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 243.969600][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 243.980167][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.990052][ T8] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 244.001512][ T8] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.031152][ T8] usb 5-1: USB disconnect, device number 13 [ 244.103731][ T8146] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.111022][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.118202][ T8146] bridge_slave_1: entered allmulticast mode [ 244.124642][ T8146] bridge_slave_1: entered promiscuous mode [ 244.150707][ T5864] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 244.166388][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.187584][ T5864] usb 3-1: config 0 descriptor?? [ 244.196826][ T5864] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 244.206680][ T8146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.231068][ T8146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.340635][ T8146] team0: Port device team_slave_0 added [ 244.349601][ T8146] team0: Port device team_slave_1 added [ 244.432327][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.438597][ T5864] gspca_sunplus: reg_w_riv err -71 [ 244.446004][ T5864] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 244.457478][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.471334][ T5864] usb 3-1: USB disconnect, device number 16 [ 244.483723][ T8146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.525396][ T8146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.547946][ T8146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.864396][ T8146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.965436][ T8217] ceph: No mds server is up or the cluster is laggy [ 245.021223][ T52] IPVS: stop unused estimator thread 0... [ 245.095880][ T8146] hsr_slave_0: entered promiscuous mode [ 245.108826][ T8146] hsr_slave_1: entered promiscuous mode [ 245.125059][ T8146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.160819][ T8146] Cannot create hsr debugfs directory [ 245.186507][ T8231] loop6: detected capacity change from 0 to 524287999 [ 245.208040][ T5864] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 245.240382][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.249682][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.267724][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.276877][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 245.285113][ T8233] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.298036][ T5817] Bluetooth: hci3: command tx timeout [ 245.298158][ T8233] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.325479][ T8236] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 245.340425][ T8231] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.356167][ T8231] Buffer I/O error on dev loop6, logical block 1, async page read [ 245.364588][ T8233] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 245.381714][ T5864] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 245.393067][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.408647][ T8231] Dev loop6: unable to read RDB block 8 [ 245.414379][ T8231] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 245.429950][ T5864] usb 3-1: config 0 descriptor?? [ 245.435134][ T8233] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 245.445796][ T5864] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 245.456640][ T8231] Buffer I/O error on dev loop6, logical block 3, async page read [ 245.466516][ T8231] loop6: unable to read partition table [ 245.476889][ T8231] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 245.517356][ T8236] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.878264][ T5864] gspca_sunplus: reg_w_riv err -71 [ 245.886171][ T8146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.909407][ T8146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.912441][ T5864] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 245.929551][ T8146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.437952][ T8252] overlay: Unknown parameter 'uid<00000000000000000000' [ 246.881783][ T8146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.888244][ T5864] usb 3-1: USB disconnect, device number 17 [ 246.961087][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 246.961099][ T29] audit: type=1400 audit(1739979807.023:502): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 247.068815][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 247.210160][ T8146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.246560][ T29] audit: type=1400 audit(1739979807.303:503): avc: denied { ioctl } for pid=8266 comm="syz.4.614" path="socket:[16371]" dev="sockfs" ino=16371 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 247.428410][ T5817] Bluetooth: hci3: command tx timeout [ 247.443338][ T8275] syz.1.612: attempt to access beyond end of device [ 247.443338][ T8275] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 247.461035][ T8146] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.525248][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.532354][ T6691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.542853][ T8275] XFS (nbd1): SB validate failed with error -5. [ 247.557944][ T5156] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 247.598300][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.606063][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.624552][ T29] audit: type=1400 audit(1739979807.683:504): avc: denied { egress } for pid=5866 comm="kworker/0:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 247.669268][ T8284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4248040714 (33984325712 ns) > initial count (13785393824 ns). Using initial count to start timer. [ 247.709640][ T29] audit: type=1400 audit(1739979807.683:505): avc: denied { sendto } for pid=5866 comm="kworker/0:4" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 247.748052][ T5156] usb 4-1: Using ep0 maxpacket: 16 [ 247.787492][ T8146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.830341][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.869061][ T8291] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3623781144 (115960996608 ns) > initial count (105833777824 ns). Using initial count to start timer. [ 247.895561][ T8146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.148567][ T5156] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.211358][ T5156] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 248.307129][ T5156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.325953][ T8146] veth0_vlan: entered promiscuous mode [ 248.374053][ T5156] usb 4-1: config 0 descriptor?? [ 248.393136][ T8146] veth1_vlan: entered promiscuous mode [ 248.516006][ T8146] veth0_macvtap: entered promiscuous mode [ 248.524025][ T29] audit: type=1400 audit(1739979808.583:506): avc: denied { connect } for pid=8306 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 248.555981][ T8146] veth1_macvtap: entered promiscuous mode [ 248.590817][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.639573][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.688070][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.718073][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.748116][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.760377][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.780481][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.839986][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.841300][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.853072][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.873623][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.907491][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.918590][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.929521][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929548][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929569][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929587][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929605][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929624][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.929644][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 248.939384][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.993626][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.006797][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.019146][ T8146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.019313][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 249.047709][ T8146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.069533][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 249.077104][ T5156] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 249.118867][ T8146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.173827][ T8146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.188134][ T5156] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 249.192859][ T8146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.195768][ T5156] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 249.254831][ T8146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.282637][ T5156] usb 4-1: USB disconnect, device number 15 [ 249.302048][ T8146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.359193][ T29] audit: type=1400 audit(1739979809.413:507): avc: denied { relabelfrom } for pid=8318 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 249.430954][ T29] audit: type=1400 audit(1739979809.423:508): avc: denied { relabelto } for pid=8318 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 249.450711][ T5817] Bluetooth: hci3: command tx timeout [ 250.098151][ T5864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 250.482011][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.492547][ T5864] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.501642][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.511959][ T5864] usb 2-1: config 0 descriptor?? [ 250.526437][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 250.943965][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.955186][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.964500][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.972561][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.980606][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 251.195512][ T5864] pwc: recv_control_msg error -71 req 02 val 2000 [ 251.218343][ T5864] pwc: recv_control_msg error -71 req 02 val 2100 [ 251.235035][ T5864] pwc: recv_control_msg error -71 req 04 val 1500 [ 251.245932][ T5864] pwc: recv_control_msg error -71 req 02 val 2500 [ 251.266649][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 251.283410][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 251.295233][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 251.304364][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 251.311645][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 251.319179][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.332761][ T5864] pwc: Registered as video103. [ 251.338488][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 251.350865][ T5864] usb 2-1: USB disconnect, device number 18 [ 251.358108][ T8360] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 251.458801][ T8363] netlink: 'syz.2.639': attribute type 4 has an invalid length. [ 251.852139][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.864726][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.885759][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.629'. [ 251.915608][ T29] audit: type=1400 audit(1739979811.973:509): avc: denied { setopt } for pid=8368 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 251.977377][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.986283][ T29] audit: type=1400 audit(1739979811.973:510): avc: denied { ioctl } for pid=8368 comm="syz.4.630" path="socket:[17501]" dev="sockfs" ino=17501 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.026942][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.092517][ T29] audit: type=1400 audit(1739979812.143:511): avc: denied { mounton } for pid=8146 comm="syz-executor" path="/root/syzkaller.Vn1uML/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 252.258478][ T29] audit: type=1400 audit(1739979812.153:512): avc: denied { mount } for pid=8146 comm="syz-executor" name="/" dev="gadgetfs" ino=7662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 252.936562][ T29] audit: type=1400 audit(1739979812.993:513): avc: denied { connect } for pid=8401 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 252.987844][ T29] audit: type=1400 audit(1739979813.043:514): avc: denied { read } for pid=8401 comm="syz.3.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 253.008038][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.138016][ T45] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 253.251691][ T29] audit: type=1400 audit(1739979813.313:515): avc: denied { load_policy } for pid=8422 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 253.251986][ T8423] SELinux: policydb version 133 does not match my version range 15-34 [ 253.302684][ T45] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 253.315506][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.316683][ T8423] SELinux: failed to load policy [ 253.327788][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.345250][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.353800][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.368463][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.382958][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.391868][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.404539][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.422790][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.434160][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.450190][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.536201][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.554684][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.565641][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.584478][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.616318][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.732958][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.745718][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.757577][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.767222][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 253.786444][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 253.804123][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.295287][ T45] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.306336][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.314652][ T45] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 254.325264][ T45] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 254.334910][ T45] usb 5-1: Product: syz [ 254.346409][ T45] usb 5-1: Manufacturer: syz [ 254.356289][ T45] usb 5-1: SerialNumber: syz [ 254.368160][ T45] usb 5-1: config 0 descriptor?? [ 254.386420][ T45] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 254.394172][ T29] audit: type=1400 audit(1739979814.443:516): avc: denied { mount } for pid=8453 comm="syz.2.650" name="/" dev="ramfs" ino=17588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 254.424345][ T8454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.448430][ T8454] overlayfs: failed to set xattr on upper [ 254.473595][ T29] audit: type=1400 audit(1739979814.463:517): avc: denied { mounton } for pid=8453 comm="syz.2.650" path="/124/file0/bus" dev="ramfs" ino=16890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 254.496036][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.506239][ T8454] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.619204][ T8454] overlayfs: ...falling back to metacopy=off. [ 254.661569][ T29] audit: type=1400 audit(1739979814.693:518): avc: denied { read write } for pid=8457 comm="syz.3.649" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.763846][ T8454] overlayfs: ...falling back to index=off. [ 254.775226][ T29] audit: type=1400 audit(1739979814.693:519): avc: denied { open } for pid=8457 comm="syz.3.649" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 255.068380][ T8454] overlayfs: ...falling back to uuid=null. [ 255.375476][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.908103][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 256.098316][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.198835][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.355032][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.403381][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.451656][ T8475] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 256.470799][ T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.512725][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 256.737499][ T5864] usb 5-1: USB disconnect, device number 14 [ 256.744802][ T25] usb 4-1: USB disconnect, device number 16 [ 256.793808][ T5864] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 258.663450][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 258.684407][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 258.738152][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.661'. [ 259.088588][ T8514] nbd0: detected capacity change from 0 to 256 [ 259.122918][ T5817] block nbd0: Receive control failed (result -104) [ 260.243270][ T8546] syz.2.664: attempt to access beyond end of device [ 260.243270][ T8546] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 260.260126][ T8546] XFS (nbd2): SB validate failed with error -5. [ 261.990843][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 261.990858][ T29] audit: type=1400 audit(1739979822.059:522): avc: denied { write } for pid=8559 comm="syz.5.670" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 261.991093][ T8560] random: crng reseeded on system resumption [ 261.996933][ T29] audit: type=1400 audit(1739979822.059:523): avc: denied { open } for pid=8559 comm="syz.5.670" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.205728][ T29] audit: type=1400 audit(1739979822.269:524): avc: denied { ioctl } for pid=8559 comm="syz.5.670" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 263.618001][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 263.742831][ T29] audit: type=1400 audit(1739979823.809:525): avc: denied { bind } for pid=8600 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.785606][ T29] audit: type=1400 audit(1739979823.809:526): avc: denied { listen } for pid=8600 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.998051][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 264.819316][ T29] audit: type=1400 audit(1739979824.879:527): avc: denied { write } for pid=8600 comm="syz.2.677" path="socket:[17126]" dev="sockfs" ino=17126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.831889][ T25] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 264.906476][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 264.918736][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.976119][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.112283][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.167397][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.371901][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.716001][ T25] usb 5-1: usb_control_msg returned -32 [ 265.722069][ T25] usbtmc 5-1:16.0: can't read capabilities [ 265.850782][ T8626] netlink: 'syz.1.684': attribute type 21 has an invalid length. [ 265.858800][ T8626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.684'. [ 266.470461][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 266.498214][ T8629] usbtmc 5-1:16.0: Unable to send data, error -71 [ 266.536223][ T25] usb 5-1: USB disconnect, device number 15 [ 266.558534][ T5817] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 273.525293][ T8725] syz.1.705: attempt to access beyond end of device [ 273.525293][ T8725] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 273.539720][ T8725] XFS (nbd1): SB validate failed with error -5. [ 274.104628][ T8748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8748 comm=syz.3.706 [ 275.138244][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 275.335397][ T5866] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.411679][ T5866] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 275.455721][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 275.511903][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.575853][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 275.677965][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 276.043377][ T8765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.198360][ T5866] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 276.305950][ T5866] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.315159][ T8] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 276.323381][ T8] usb 4-1: config 0 has no interface number 0 [ 276.329675][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.337689][ T5866] usb 3-1: Product: syz [ 276.357101][ T8] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 276.389366][ T5866] usb 3-1: Manufacturer: syz [ 276.399591][ T8] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 276.416534][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 276.587643][ T5866] cdc_wdm 3-1:1.0: skipping garbage [ 276.877907][ T8] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 276.898259][ T5866] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 276.915418][ T5866] cdc_wdm 3-1:1.0: Unknown control protocol [ 276.927926][ T8] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 276.962419][ T5866] usb 3-1: USB disconnect, device number 18 [ 277.003543][ T8] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 277.045720][ T8] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 277.057897][ T8] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 277.138007][ T8] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.165646][ T8] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.198256][ T5817] Bluetooth: hci3: unexpected event 0x0b length: 1 < 11 [ 277.205342][ T8] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 277.214867][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.214887][ T8] usb 4-1: Product: syz [ 277.214901][ T8] usb 4-1: Manufacturer: syz [ 277.214915][ T8] usb 4-1: SerialNumber: syz [ 277.216729][ T8] usb 4-1: config 0 descriptor?? [ 277.217694][ T8759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 277.229131][ T8] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 277.229146][ T8] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 277.411765][ T5866] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 277.438810][ T8] usb 4-1: USB disconnect, device number 17 [ 278.425488][ T5866] usb 3-1: device not accepting address 19, error -71 [ 280.059327][ T8829] syz.5.722: attempt to access beyond end of device [ 280.059327][ T8829] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 280.550793][ T8829] XFS (nbd5): SB validate failed with error -5. [ 280.569463][ T8847] SELinux: Context Ü is not valid (left unmapped). [ 281.348002][ T5866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 282.138025][ T5866] usb 2-1: device descriptor read/64, error -71 [ 282.387964][ T5866] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 282.597977][ T5866] usb 2-1: device descriptor read/64, error -71 [ 283.298212][ T5866] usb usb2-port1: attempt power cycle [ 284.235761][ T5866] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 284.428563][ T5866] usb 2-1: device descriptor read/8, error -71 [ 284.717739][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 284.768010][ T8898] bridge_slave_1: left allmulticast mode [ 284.790665][ T8898] bridge_slave_1: left promiscuous mode [ 284.798265][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.813914][ T8898] bridge_slave_0: left allmulticast mode [ 284.823858][ T8898] bridge_slave_0: left promiscuous mode [ 284.830444][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.998571][ T8907] vlan2: entered promiscuous mode [ 285.024135][ T8907] vlan2: entered allmulticast mode [ 285.046675][ T8907] hsr_slave_1: entered allmulticast mode [ 286.312648][ T29] audit: type=1400 audit(1739979846.379:528): avc: denied { append } for pid=8933 comm="syz.2.741" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.778074][ T29] audit: type=1400 audit(1739979846.839:529): avc: denied { connect } for pid=8941 comm="syz.5.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.824657][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.742'. [ 287.486231][ T29] audit: type=1400 audit(1739979847.419:530): avc: denied { write } for pid=8941 comm="syz.5.743" path="socket:[18650]" dev="sockfs" ino=18650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.422321][ T26] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 30 seconds [ 291.429908][ T8993] veth1_to_hsr: entered promiscuous mode [ 291.972192][ T8982] veth1_to_hsr: left promiscuous mode [ 292.146322][ T29] audit: type=1400 audit(1739979852.179:531): avc: denied { create } for pid=8987 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 293.317351][ T9011] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 294.095228][ T29] audit: type=1400 audit(1739979854.149:532): avc: denied { watch } for pid=9012 comm="syz.2.758" path="/148" dev="tmpfs" ino=824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 294.607262][ T45] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 294.907918][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 294.919247][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 295.696426][ T45] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 295.806405][ T45] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 296.810433][ T45] usb 2-1: Product: syz [ 296.814637][ T45] usb 2-1: Manufacturer: syz [ 296.965704][ T45] usb 2-1: SerialNumber: syz [ 297.149141][ T45] usb 2-1: config 0 descriptor?? [ 297.177588][ T29] audit: type=1400 audit(1739979857.239:533): avc: denied { lock } for pid=9042 comm="syz.1.766" path="socket:[18884]" dev="sockfs" ino=18884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 297.220805][ T45] usb 2-1: can't set config #0, error -71 [ 297.250500][ T45] usb 2-1: USB disconnect, device number 23 [ 297.597959][ T5864] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 297.779215][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.799894][ T5864] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.836557][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.862336][ T5864] usb 6-1: config 0 descriptor?? [ 297.878063][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 298.149979][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 298.436321][ T5866] usb 3-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 298.496272][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.549046][ T5866] usb 3-1: config 0 descriptor?? [ 298.654315][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 298.676070][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.366200][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.379869][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.381337][ T9057] »»»»»»: renamed from lo (while UP) [ 299.387259][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 299.458047][ T5864] pwc: recv_control_msg error -32 req 04 val 1400 [ 299.498299][ T5864] pwc: recv_control_msg error -32 req 02 val 2000 [ 299.540954][ T5864] pwc: recv_control_msg error -32 req 02 val 2100 [ 299.550916][ T29] audit: type=1400 audit(1739979859.609:534): avc: denied { ioctl } for pid=9056 comm="syz.2.770" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 299.586678][ T5866] usb 3-1: string descriptor 0 read error: -71 [ 299.598522][ T5864] pwc: recv_control_msg error -32 req 04 val 1500 [ 299.621286][ T5866] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 299.649326][ T5864] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.192382][ T5866] usb 3-1: USB disconnect, device number 21 [ 300.399204][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 300.418313][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.440398][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 300.447200][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 300.460559][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.799948][ T5864] pwc: Registered as video103. [ 300.843426][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 301.120161][ T5864] usb 6-1: USB disconnect, device number 2 [ 302.607477][ T29] audit: type=1400 audit(1739979862.109:535): avc: denied { read } for pid=9091 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 303.077056][ T9103] SELinux: security policydb version 17 (MLS) not backwards compatible [ 303.085870][ T9103] SELinux: failed to load policy [ 303.092636][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.107207][ T29] audit: type=1400 audit(1739979863.149:536): avc: denied { create } for pid=9095 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.285710][ T29] audit: type=1400 audit(1739979863.149:537): avc: denied { write } for pid=9095 comm="syz.3.780" path="socket:[18291]" dev="sockfs" ino=18291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.425774][ T29] audit: type=1400 audit(1739979863.149:538): avc: denied { nlmsg_write } for pid=9095 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 304.230196][ T9110] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 304.246334][ T9110] kvm: pic: non byte read [ 304.251013][ T9110] kvm: pic: level sensitive irq not supported [ 304.251068][ T9110] kvm: pic: non byte read [ 307.887784][ T29] audit: type=1400 audit(1739979867.349:539): avc: denied { mount } for pid=9143 comm="syz.4.793" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 308.315862][ T29] audit: type=1400 audit(1739979868.229:540): avc: denied { bind } for pid=9150 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.374661][ T29] audit: type=1400 audit(1739979868.229:541): avc: denied { write } for pid=9150 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.360118][ T29] audit: type=1400 audit(1739979869.329:542): avc: denied { create } for pid=9169 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 309.598022][ T29] audit: type=1400 audit(1739979869.649:543): avc: denied { write } for pid=9169 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.655429][ T29] audit: type=1400 audit(1739979869.649:544): avc: denied { read } for pid=5175 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 309.805191][ T29] audit: type=1400 audit(1739979869.649:545): avc: denied { search } for pid=5175 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.415439][ T29] audit: type=1400 audit(1739979869.649:546): avc: denied { append } for pid=5175 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.610416][ T29] audit: type=1400 audit(1739979869.649:547): avc: denied { open } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 310.658171][ T29] audit: type=1400 audit(1739979869.649:548): avc: denied { getattr } for pid=5175 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.117625][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 313.135688][ T29] audit: type=1400 audit(1739979873.179:583): avc: denied { setopt } for pid=9202 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.459420][ T29] audit: type=1400 audit(1739979873.179:584): avc: denied { connect } for pid=9202 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.978015][ T29] audit: type=1400 audit(1739979874.029:585): avc: denied { create } for pid=9213 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.385708][ T9216] ceph: No mds server is up or the cluster is laggy [ 314.762151][ T29] audit: type=1400 audit(1739979874.539:586): avc: denied { create } for pid=9213 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 314.878024][ T29] audit: type=1400 audit(1739979874.669:587): avc: denied { write } for pid=9213 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.198030][ T29] audit: type=1400 audit(1739979875.209:588): avc: denied { read } for pid=9221 comm="syz.1.812" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 315.818545][ T29] audit: type=1400 audit(1739979875.209:589): avc: denied { open } for pid=9221 comm="syz.1.812" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 315.945849][ T29] audit: type=1400 audit(1739979875.219:590): avc: denied { ioctl } for pid=9221 comm="syz.1.812" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 316.427386][ T29] audit: type=1400 audit(1739979875.609:591): avc: denied { egress } for pid=9221 comm="syz.1.812" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 316.632013][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'. [ 316.812128][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.829463][ T29] audit: type=1400 audit(1739979875.609:592): avc: denied { sendto } for pid=9221 comm="syz.1.812" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 318.597526][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 318.610262][ T29] audit: type=1400 audit(1739979878.659:604): avc: denied { create } for pid=9243 comm="syz.3.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 319.986966][ T29] audit: type=1400 audit(1739979880.049:605): avc: denied { map_read map_write } for pid=9251 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.035689][ T26] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 60 seconds [ 320.175347][ T9256] program syz.2.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.376002][ T29] audit: type=1400 audit(1739979880.219:606): avc: denied { create } for pid=9251 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 320.516132][ T29] audit: type=1400 audit(1739979880.229:607): avc: denied { setopt } for pid=9251 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 321.656827][ T29] audit: type=1400 audit(1739979880.239:608): avc: denied { connect } for pid=9253 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.062505][ T29] audit: type=1400 audit(1739979880.239:609): avc: denied { read write } for pid=9253 comm="syz.2.819" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 322.097023][ T29] audit: type=1400 audit(1739979880.239:610): avc: denied { open } for pid=9253 comm="syz.2.819" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 322.172719][ T29] audit: type=1400 audit(1739979880.799:611): avc: denied { create } for pid=9257 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.259772][ T29] audit: type=1400 audit(1739979880.799:612): avc: denied { bind } for pid=9257 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.356552][ T29] audit: type=1400 audit(1739979880.809:613): avc: denied { accept } for pid=9257 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.718094][ T5864] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 322.889340][ T5864] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 322.905523][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.938916][ T5864] usb 5-1: config 0 descriptor?? [ 322.966061][ T5864] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 322.987317][ T5864] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 323.315177][ T45] usb 5-1: USB disconnect, device number 16 [ 324.112986][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 324.113001][ T29] audit: type=1400 audit(1739979884.179:632): avc: denied { create } for pid=9290 comm="syz.2.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.384733][ T29] audit: type=1400 audit(1739979884.449:633): avc: denied { accept } for pid=9294 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 324.716838][ T29] audit: type=1400 audit(1739979884.449:634): avc: denied { setopt } for pid=9294 comm="syz.3.830" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 324.742977][ T29] audit: type=1400 audit(1739979884.779:635): avc: denied { ioctl } for pid=9292 comm="syz.1.829" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.816076][ T29] audit: type=1400 audit(1739979884.879:636): avc: denied { execute } for pid=9301 comm="syz.4.831" name="file2" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.840292][ T29] audit: type=1400 audit(1739979884.879:637): avc: denied { execute_no_trans } for pid=9301 comm="syz.4.831" path="/151/file2" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.868773][ T29] audit: type=1400 audit(1739979884.879:638): avc: denied { setopt } for pid=9301 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 324.890141][ T29] audit: type=1400 audit(1739979884.929:639): avc: denied { read write } for pid=9301 comm="syz.4.831" name="radio7" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.060752][ T29] audit: type=1400 audit(1739979884.929:640): avc: denied { open } for pid=9301 comm="syz.4.831" path="/dev/radio7" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 325.318105][ T29] audit: type=1400 audit(1739979885.159:641): avc: denied { read } for pid=9301 comm="syz.4.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 325.856591][ T45] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 325.948500][ T9314] syz.5.834: attempt to access beyond end of device [ 325.948500][ T9314] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 326.097740][ T9314] XFS (nbd5): SB validate failed with error -5. [ 326.183103][ T9324] qnx6: unable to set blocksize [ 326.211332][ T45] usb 2-1: config 0 has no interfaces? [ 326.728205][ T45] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 326.737435][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.038355][ T45] usb 2-1: Product: syz [ 327.042529][ T45] usb 2-1: Manufacturer: syz [ 327.128241][ T45] usb 2-1: SerialNumber: syz [ 327.143464][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 327.158852][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 327.181572][ T9333] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.579325][ T45] usb 2-1: config 0 descriptor?? [ 330.508687][ T5864] usb 2-1: USB disconnect, device number 24 [ 330.742198][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 330.742215][ T29] audit: type=1400 audit(1739979890.809:658): avc: denied { setopt } for pid=9366 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.438220][ T29] audit: type=1400 audit(1739979891.469:659): avc: denied { bind } for pid=9366 comm="syz.4.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 331.595618][ T29] audit: type=1400 audit(1739979891.469:660): avc: denied { name_bind } for pid=9366 comm="syz.4.845" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 331.621116][ T29] audit: type=1400 audit(1739979891.469:661): avc: denied { node_bind } for pid=9366 comm="syz.4.845" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 331.897700][ T29] audit: type=1400 audit(1739979891.849:662): avc: denied { name_bind } for pid=9379 comm="syz.5.848" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 334.123577][ T29] audit: type=1400 audit(1739979891.849:663): avc: denied { node_bind } for pid=9379 comm="syz.5.848" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 334.200148][ T29] audit: type=1400 audit(1739979891.859:664): avc: denied { ioctl } for pid=9379 comm="syz.5.848" path="socket:[19785]" dev="sockfs" ino=19785 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.271153][ T5193] udevd[5193]: worker [5808] /devices/virtual/block/nbd0 is taking a long time [ 334.450802][ T9388] hfs: can't find a HFS filesystem on dev nullb0 [ 336.074756][ T29] audit: type=1400 audit(1739979896.089:665): avc: denied { ioctl } for pid=9397 comm="syz.1.853" path="socket:[20686]" dev="sockfs" ino=20686 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 336.099602][ T45] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.113517][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.674301][ T45] usb 6-1: device descriptor read/64, error -71 [ 336.704503][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.412981][ T9408] xt_recent: Unsupported userspace flags (000000da) [ 337.428516][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.523654][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.537916][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.553529][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.567937][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.606351][ T25] usb 5-1: Product: syz [ 337.610731][ T25] usb 5-1: Manufacturer: syz [ 337.648005][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 337.698222][ T29] audit: type=1400 audit(1739979897.739:666): avc: denied { read } for pid=9406 comm="syz.2.855" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.094889][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 338.149170][ T29] audit: type=1400 audit(1739979897.739:667): avc: denied { open } for pid=9406 comm="syz.2.855" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.157595][ T45] usb 6-1: device descriptor read/64, error -71 [ 338.220305][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 338.320995][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 338.326943][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 338.367645][ T9419] program syz.3.857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.377749][ T9419] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 338.474641][ T45] usb usb6-port1: attempt power cycle [ 338.528081][ T5866] usb 5-1: USB disconnect, device number 17 [ 338.555570][ T29] audit: type=1400 audit(1739979898.609:668): avc: denied { write } for pid=9418 comm="syz.5.859" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 339.570048][ T29] audit: type=1400 audit(1739979898.829:669): avc: denied { name_bind } for pid=9416 comm="syz.2.858" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 339.573632][ T9428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.696359][ T9441] can0: slcan on ttyS3. [ 340.885678][ T9441] block device autoloading is deprecated and will be removed. [ 341.419166][ T9432] can0 (unregistered): slcan off ttyS3. [ 341.617399][ T29] audit: type=1400 audit(1739979901.679:670): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 341.923681][ T29] audit: type=1400 audit(1739979901.959:671): avc: denied { setopt } for pid=9444 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.378357][ T29] audit: type=1400 audit(1739979901.959:672): avc: denied { ioctl } for pid=9444 comm="syz.2.864" path="socket:[19903]" dev="sockfs" ino=19903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 342.711321][ T29] audit: type=1400 audit(1739979901.969:673): avc: denied { write } for pid=9444 comm="syz.2.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.798118][ T29] audit: type=1400 audit(1739979902.839:674): avc: denied { bind } for pid=9453 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.954779][ T29] audit: type=1400 audit(1739979902.839:675): avc: denied { write } for pid=9453 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.890555][ T29] audit: type=1400 audit(1739979902.839:676): avc: denied { read } for pid=9453 comm="syz.2.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 344.248277][ T29] audit: type=1400 audit(1739979903.939:677): avc: denied { setopt } for pid=9457 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.377903][ T29] audit: type=1400 audit(1739979903.949:678): avc: denied { write } for pid=9457 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 344.550890][ T29] audit: type=1400 audit(1739979903.999:679): avc: denied { create } for pid=9457 comm="syz.4.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.868397][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 347.868411][ T29] audit: type=1400 audit(1739979907.459:686): avc: denied { map } for pid=9494 comm="syz.2.876" path="socket:[19971]" dev="sockfs" ino=19971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 348.218644][ T9501] can0: slcan on ttyS3. [ 348.669283][ T29] audit: type=1400 audit(1739979908.309:687): avc: denied { ioctl } for pid=9498 comm="syz.5.877" path="socket:[19994]" dev="sockfs" ino=19994 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 348.869168][ T9498] can0 (unregistered): slcan off ttyS3. [ 348.941395][ T29] audit: type=1400 audit(1739979908.769:688): avc: denied { search } for pid=5487 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.272205][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 350.957322][ T26] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 90 seconds [ 351.139613][ T29] audit: type=1400 audit(1739979908.769:689): avc: denied { read } for pid=5487 comm="dhcpcd" name="n118" dev="tmpfs" ino=4679 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.225716][ T9527] dlm: Unknown command passed to DLM device : 64 [ 351.225716][ T9527] [ 352.177701][ T29] audit: type=1400 audit(1739979908.769:690): avc: denied { open } for pid=5487 comm="dhcpcd" path="/run/udev/data/n118" dev="tmpfs" ino=4679 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.262867][ T29] audit: type=1400 audit(1739979908.769:691): avc: denied { getattr } for pid=5487 comm="dhcpcd" path="/run/udev/data/n118" dev="tmpfs" ino=4679 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 353.192120][ T5866] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 353.199783][ T29] audit: type=1400 audit(1739979908.879:692): avc: denied { read } for pid=9509 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.350965][ T5866] usb 6-1: device descriptor read/64, error -71 [ 353.531696][ T29] audit: type=1400 audit(1739979908.879:693): avc: denied { open } for pid=9509 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.591666][ T29] audit: type=1400 audit(1739979908.879:694): avc: denied { getattr } for pid=9509 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.675143][ T29] audit: type=1400 audit(1739979909.079:695): avc: denied { write } for pid=9512 comm="syz.5.880" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 353.768469][ T5866] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 353.866915][ T9553] --map-set only usable from mangle table [ 354.088038][ T5866] usb 6-1: device descriptor read/64, error -71 [ 354.144053][ T29] audit: type=1400 audit(1739979909.409:696): avc: denied { read write } for pid=9512 comm="syz.5.880" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.179834][ T29] audit: type=1400 audit(1739979909.409:697): avc: denied { open } for pid=9512 comm="syz.5.880" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.218867][ T5866] usb usb6-port1: attempt power cycle [ 354.521802][ T29] audit: type=1400 audit(1739979909.419:698): avc: denied { map } for pid=9512 comm="syz.5.880" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.653030][ T29] audit: type=1400 audit(1739979909.419:699): avc: denied { execute } for pid=9512 comm="syz.5.880" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.687395][ T29] audit: type=1400 audit(1739979909.999:700): avc: denied { recv } for pid=9512 comm="syz.5.880" saddr=10.128.0.169 src=42020 daddr=10.128.0.243 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 355.325737][ T5866] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 355.421598][ T29] audit: type=1400 audit(1739979911.289:701): avc: denied { create } for pid=9522 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 355.627918][ T5866] usb 6-1: device not accepting address 8, error -71 [ 355.828508][ T9576] syz.1.890: attempt to access beyond end of device [ 355.828508][ T9576] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 355.841281][ T9576] qnx6: unable to read the first superblock [ 355.847279][ T9576] syz.1.890: attempt to access beyond end of device [ 355.847279][ T9576] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 355.860018][ T9576] qnx6: unable to read the first superblock [ 355.865900][ T9576] qnx6: unable to read the first superblock [ 358.141549][ T5156] IPVS: starting estimator thread 0... [ 358.331178][ T9607] IPVS: using max 37 ests per chain, 88800 per kthread [ 358.563939][ T9618] dlm: Unknown command passed to DLM device : 64 [ 358.563939][ T9618] [ 358.617952][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 358.617982][ T29] audit: type=1400 audit(1739979918.629:800): avc: denied { create } for pid=9613 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.244183][ T29] audit: type=1400 audit(1739979918.629:801): avc: denied { write } for pid=9613 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.312570][ T29] audit: type=1400 audit(1739979918.629:802): avc: denied { append } for pid=9613 comm="syz.1.896" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 359.335525][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.542463][ T29] audit: type=1400 audit(1739979919.269:803): avc: denied { write } for pid=9571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1707 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.565467][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.624070][ T29] audit: type=1400 audit(1739979919.269:804): avc: denied { add_name } for pid=9571 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.846414][ T29] audit: type=1400 audit(1739979919.269:805): avc: denied { create } for pid=9571 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 359.868682][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.457956][ T29] audit: type=1400 audit(1739979919.269:806): avc: denied { write } for pid=9571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=4726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.483953][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.495630][ T29] audit: type=1400 audit(1739979919.269:807): avc: denied { append } for pid=9571 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=4726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 360.519715][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.527281][ T29] audit: type=1400 audit(1739979919.379:808): avc: denied { write } for pid=9617 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 360.705400][ T29] audit: type=1400 audit(1739979919.379:809): avc: denied { create } for pid=9617 comm="syz.3.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.979626][ T9655] netlink: 148 bytes leftover after parsing attributes in process `syz.3.902'. [ 364.581026][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 364.581041][ T29] audit: type=1400 audit(1739979924.649:883): avc: denied { read } for pid=9661 comm="syz.3.904" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 365.502069][ T29] audit: type=1400 audit(1739979924.649:884): avc: denied { open } for pid=9661 comm="syz.3.904" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 366.337048][ T29] audit: type=1400 audit(1739979925.919:885): avc: denied { create } for pid=9667 comm="syz.5.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.245420][ T29] audit: type=1400 audit(1739979928.309:886): avc: denied { append } for pid=9683 comm="syz.3.911" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 369.219429][ T29] audit: type=1400 audit(1739979928.389:887): avc: denied { write } for pid=9679 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 369.239322][ T29] audit: type=1400 audit(1739979928.469:888): avc: denied { write } for pid=9679 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.260813][ T29] audit: type=1400 audit(1739979928.469:889): avc: denied { read } for pid=9679 comm="syz.1.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.778509][ T9691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.267882][ T29] audit: type=1400 audit(1739979929.849:890): avc: denied { setopt } for pid=9683 comm="syz.3.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.299369][ T29] audit: type=1400 audit(1739979930.269:891): avc: denied { read } for pid=9683 comm="syz.3.911" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 370.409974][ T29] audit: type=1400 audit(1739979930.269:892): avc: denied { open } for pid=9683 comm="syz.3.911" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 370.459797][ T29] audit: type=1400 audit(1739979930.279:893): avc: denied { ioctl } for pid=9683 comm="syz.3.911" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 370.640199][ T29] audit: type=1400 audit(1739979930.709:894): avc: denied { prog_run } for pid=9696 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 371.658759][ T29] audit: type=1400 audit(1739979930.749:895): avc: denied { read write } for pid=9698 comm="syz.3.914" name="vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 371.681902][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.893882][ T29] audit: type=1400 audit(1739979930.749:896): avc: denied { open } for pid=9698 comm="syz.3.914" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 371.916912][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.158241][ T29] audit: type=1400 audit(1739979930.749:897): avc: denied { create } for pid=9698 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 372.222909][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.229745][ T29] audit: type=1400 audit(1739979931.219:898): avc: denied { module_request } for pid=9696 comm="syz.4.915" kmod="ipt_ipvs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 372.251250][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.252417][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.267076][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.274495][ T5827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 373.078001][ T9725] netlink: 148 bytes leftover after parsing attributes in process `syz.5.917'. [ 373.236778][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.237938][ T29] audit: type=1400 audit(1739979931.499:900): avc: denied { ioctl } for pid=9698 comm="syz.3.914" path="/dev/vbi3" dev="devtmpfs" ino=966 ioctlcmd=0x5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 375.008778][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 375.420803][ T9716] chnl_net:caif_netlink_parms(): no params data found [ 375.683738][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 375.683781][ T29] audit: type=1400 audit(1739979935.679:916): avc: denied { create } for pid=9744 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 375.973940][ T5817] Bluetooth: hci5: command tx timeout [ 375.990048][ T29] audit: type=1400 audit(1739979935.709:917): avc: denied { connect } for pid=9744 comm="syz.3.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 376.012103][ T29] audit: type=1400 audit(1739979935.709:918): avc: denied { name_connect } for pid=9744 comm="syz.3.924" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 376.035213][ T29] audit: type=1400 audit(1739979936.079:919): avc: denied { read } for pid=5487 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 376.240665][ T29] audit: type=1400 audit(1739979936.299:920): avc: denied { name_bind } for pid=9729 comm="syz.5.920" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 376.391873][ T29] audit: type=1400 audit(1739979936.299:921): avc: denied { mounton } for pid=9729 comm="syz.5.920" path="/56/bus" dev="tmpfs" ino=314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 376.401235][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.874308][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.881612][ T9716] bridge_slave_0: entered allmulticast mode [ 376.888696][ T9716] bridge_slave_0: entered promiscuous mode [ 376.896095][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.904449][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.924994][ T9716] bridge_slave_1: entered allmulticast mode [ 376.931129][ T29] audit: type=1400 audit(1739979936.359:922): avc: denied { write } for pid=9729 comm="syz.5.920" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 376.933227][ T9716] bridge_slave_1: entered promiscuous mode [ 376.955142][ T29] audit: type=1400 audit(1739979936.429:923): avc: denied { create } for pid=9729 comm="syz.5.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 377.242003][ T9716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.362421][ T9716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.533668][ T9716] team0: Port device team_slave_0 added [ 377.542198][ T9716] team0: Port device team_slave_1 added [ 377.670687][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.008590][ T5817] Bluetooth: hci5: command tx timeout [ 378.016775][ T29] audit: type=1400 audit(1739979937.869:924): avc: denied { create } for pid=9764 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 378.078096][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.197306][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 379.060834][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.697042][ T9716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.719577][ T29] audit: type=1400 audit(1739979937.869:925): avc: denied { listen } for pid=9764 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 379.750689][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.757652][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.905521][ T9716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.134055][ T5817] Bluetooth: hci5: command tx timeout [ 380.415248][ T5817] Bluetooth: hci3: command tx timeout [ 380.417605][ T9789] netlink: 148 bytes leftover after parsing attributes in process `syz.5.932'. [ 380.881449][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 380.881462][ T29] audit: type=1400 audit(1739979940.629:931): avc: denied { accept } for pid=9781 comm="syz.4.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 381.401543][ T29] audit: type=1400 audit(1739979940.829:932): avc: denied { mount } for pid=9778 comm="syz.3.931" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 381.423276][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.690912][ T9791] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 381.717694][ T29] audit: type=1400 audit(1739979941.099:933): avc: denied { append } for pid=9781 comm="syz.4.933" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.025723][ T6142] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 120 seconds [ 382.037223][ T29] audit: type=1400 audit(1739979941.179:934): avc: denied { create } for pid=9781 comm="syz.4.933" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 382.060845][ T29] audit: type=1400 audit(1739979941.179:935): avc: denied { map } for pid=9781 comm="syz.4.933" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.055939][ T29] audit: type=1400 audit(1739979941.179:936): avc: denied { read write } for pid=9781 comm="syz.4.933" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.433379][ T29] audit: type=1400 audit(1739979941.199:937): avc: denied { write } for pid=9781 comm="syz.4.933" path="socket:[20473]" dev="sockfs" ino=20473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 383.457439][ T5817] Bluetooth: hci5: command tx timeout [ 383.462912][ T29] audit: type=1400 audit(1739979941.819:938): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 383.550814][ T9716] hsr_slave_0: entered promiscuous mode [ 383.755387][ T9716] hsr_slave_1: entered promiscuous mode [ 383.768361][ T9716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.775930][ T9716] Cannot create hsr debugfs directory [ 385.283866][ T29] audit: type=1400 audit(1739979945.349:939): avc: denied { create } for pid=9819 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.069198][ T9826] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 386.118939][ T29] audit: type=1400 audit(1739979945.689:940): avc: denied { create } for pid=9819 comm="syz.3.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 387.129196][ T9716] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.339700][ T9716] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.998158][ T9845] netlink: 148 bytes leftover after parsing attributes in process `syz.5.946'. [ 388.007886][ T9846] netlink: 148 bytes leftover after parsing attributes in process `syz.3.945'. [ 388.179527][ T29] audit: type=1400 audit(1739979948.249:941): avc: denied { create } for pid=9833 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.516831][ T9834] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.532536][ T9716] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 388.549801][ T9716] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 388.551270][ T29] audit: type=1400 audit(1739979948.619:942): avc: denied { mounton } for pid=9833 comm="syz.4.944" path="/178/file0" dev="tmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 389.881078][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.950'. [ 389.932806][ T9716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.195666][ T9716] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.225560][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.232666][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.242476][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.249559][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.317959][ T29] audit: type=1400 audit(1739979950.379:943): avc: denied { sys_module } for pid=9716 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 391.449958][ T9716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.872897][ T29] audit: type=1400 audit(1739979950.919:944): avc: denied { unlink } for pid=9869 comm="syz.1.951" name="#1c" dev="tmpfs" ino=1061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 391.918957][ T29] audit: type=1400 audit(1739979950.939:945): avc: denied { mount } for pid=9869 comm="syz.1.951" name="/" dev="overlay" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 391.943458][ T9876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 392.938140][ T29] audit: type=1400 audit(1739979952.109:946): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 393.918204][ T29] audit: type=1400 audit(1739979952.319:947): avc: denied { read } for pid=9867 comm="syz.5.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 396.059728][ T9716] veth0_vlan: entered promiscuous mode [ 396.073203][ T9716] veth1_vlan: entered promiscuous mode [ 396.099371][ T9716] veth0_macvtap: entered promiscuous mode [ 397.073801][ T9716] veth1_macvtap: entered promiscuous mode [ 397.109210][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.119906][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.138610][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 397.815605][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.830080][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.843295][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.861634][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.874769][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.886865][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.092538][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.289422][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.437131][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.455391][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.470083][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.480695][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.491431][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.506781][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.518370][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.529464][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.540151][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.550037][ T9716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.560711][ T9716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.241631][ T29] audit: type=1400 audit(1739979958.789:948): avc: denied { read } for pid=9933 comm="syz.3.965" path="socket:[21963]" dev="sockfs" ino=21963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 399.251770][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.307767][ T9716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.320562][ T9716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.336909][ T9716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.469304][ T9716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.697687][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 401.140888][ T29] audit: type=1400 audit(1739979961.169:949): avc: denied { watch } for pid=9955 comm="syz.3.970" path="/208/file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 402.118028][ T9963] overlayfs: failed to resolve './file1': -2 [ 402.163101][ T29] audit: type=1400 audit(1739979961.169:950): avc: denied { watch_sb watch_reads } for pid=9955 comm="syz.3.970" path="/208/file0" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.614895][ T9957] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3256431472 (26051451776 ns) > initial count (24997152112 ns). Using initial count to start timer. [ 402.722079][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 403.353722][ T29] audit: type=1400 audit(1739979963.409:951): avc: denied { ioctl } for pid=9971 comm="syz.1.973" path="socket:[22909]" dev="sockfs" ino=22909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.378413][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.385829][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.398118][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.750726][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.759624][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.784895][ T29] audit: type=1400 audit(1739979964.849:952): avc: denied { mounton } for pid=9716 comm="syz-executor" path="/root/syzkaller.CLkz1g/syz-tmp" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 405.441576][ T29] audit: type=1400 audit(1739979965.509:953): avc: denied { mount } for pid=9716 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 405.583576][ T29] audit: type=1400 audit(1739979965.509:954): avc: denied { mounton } for pid=9716 comm="syz-executor" path="/root/syzkaller.CLkz1g/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 406.497906][ T29] audit: type=1400 audit(1739979965.509:955): avc: denied { mounton } for pid=9716 comm="syz-executor" path="/root/syzkaller.CLkz1g/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 406.562801][ T29] audit: type=1400 audit(1739979965.589:956): avc: denied { mounton } for pid=9716 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 406.596251][ T29] audit: type=1400 audit(1739979965.589:957): avc: denied { mount } for pid=9716 comm="syz-executor" name="/" dev="gadgetfs" ino=7662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 406.624198][ T29] audit: type=1400 audit(1739979965.649:958): avc: denied { mounton } for pid=9716 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 407.096732][ T29] audit: type=1400 audit(1739979965.649:959): avc: denied { mount } for pid=9716 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 407.121441][ T29] audit: type=1400 audit(1739979966.109:960): avc: denied { write } for pid=9971 comm="syz.1.973" name="kcm" dev="proc" ino=4026533274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 408.258477][ T29] audit: type=1400 audit(1739979968.249:961): avc: denied { read } for pid=10006 comm="syz.6.913" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 409.559384][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'. [ 410.804969][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.986'. [ 412.722301][ T6142] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 150 seconds [ 413.757858][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'. [ 414.498146][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 414.498184][ T29] audit: type=1400 audit(1739979974.539:965): avc: denied { create } for pid=10054 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 414.787985][ T29] audit: type=1400 audit(1739979974.539:966): avc: denied { bind } for pid=10054 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 414.881109][ T29] audit: type=1400 audit(1739979974.539:967): avc: denied { name_bind } for pid=10054 comm="syz.3.993" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 414.903737][ T29] audit: type=1400 audit(1739979974.539:968): avc: denied { node_bind } for pid=10054 comm="syz.3.993" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 414.979675][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 418.956442][T10094] dlm: Unknown command passed to DLM device : 64 [ 418.956442][T10094] [ 419.879070][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 422.052920][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1001'. [ 425.534879][T10133] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 427.585824][T10135] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd1": -EINTR [ 433.359923][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 436.842436][ T29] audit: type=1400 audit(1739979996.909:969): avc: denied { bind } for pid=10213 comm="syz.6.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 438.218061][ T29] audit: type=1400 audit(1739979998.239:970): avc: denied { create } for pid=10213 comm="syz.6.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 439.658912][ T29] audit: type=1400 audit(1739979999.729:971): avc: denied { mount } for pid=10227 comm="syz.3.1030" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 439.928493][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.320564][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1033'. [ 443.226354][T10254] syz.4.1036: attempt to access beyond end of device [ 443.226354][T10254] nbd4: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 443.259531][T10254] XFS (nbd4): SB validate failed with error -5. [ 443.341444][ T10] block nbd4: Attempted send on invalid socket [ 443.348853][ T10] I/O error, dev nbd4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 443.607304][T10053] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 180 seconds [ 443.774497][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1040'. [ 445.897880][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1044'. [ 447.856945][ T29] audit: type=1400 audit(1739980007.889:972): avc: denied { append } for pid=10302 comm="syz.4.1048" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 448.120010][ T29] audit: type=1400 audit(1739980008.179:973): avc: denied { bind } for pid=10302 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 448.884727][ T29] audit: type=1400 audit(1739980008.179:974): avc: denied { node_bind } for pid=10302 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 448.917987][ T29] audit: type=1400 audit(1739980008.179:975): avc: denied { write } for pid=10302 comm="syz.4.1048" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.287392][ T29] audit: type=1400 audit(1739980009.349:976): avc: denied { mount } for pid=10316 comm="syz.1.1050" name="/" dev="ocfs2_dlmfs" ino=23617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 449.739635][ T29] audit: type=1400 audit(1739980009.809:977): avc: denied { ioctl } for pid=10318 comm="syz.6.1052" path="socket:[23620]" dev="sockfs" ino=23620 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.907288][ T29] audit: type=1400 audit(1739980009.809:978): avc: denied { setopt } for pid=10318 comm="syz.6.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 450.438167][T10329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3256431472 (26051451776 ns) > initial count (24997152112 ns). Using initial count to start timer. [ 454.005070][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 455.205100][T10354] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd1": -EINTR [ 455.374508][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 458.346045][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1065'. [ 465.002323][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1080'. [ 465.892246][ T29] audit: type=1400 audit(1739980025.949:979): avc: denied { create } for pid=10432 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 466.008161][ T29] audit: type=1400 audit(1739980025.959:980): avc: denied { write } for pid=10432 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 466.071690][T10450] syz.1.1079: attempt to access beyond end of device [ 466.071690][T10450] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 466.847620][T10450] XFS (nbd1): SB validate failed with error -5. [ 469.021013][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1088'. [ 474.334282][T10053] block nbd0: Possible stuck request ffff888025b0e000: control (read@0,4096B). Runtime 210 seconds [ 481.770733][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 481.869475][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 483.159330][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 483.508026][ T29] audit: type=1400 audit(1739980043.569:981): avc: denied { mount } for pid=10592 comm="syz.3.1116" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 484.979150][ T29] audit: type=1400 audit(1739980045.049:982): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 485.008982][T10606] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1118'. [ 489.221943][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1127'. [ 489.992094][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 491.064052][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1133'. [ 498.167908][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 498.949233][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1149'. [ 500.617236][ T29] audit: type=1400 audit(1739980060.659:983): avc: denied { setopt } for pid=10742 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 501.064052][ T25] IPVS: starting estimator thread 0... [ 501.064689][ T29] audit: type=1400 audit(1739980060.669:984): avc: denied { connect } for pid=10742 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.129974][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.315393][ T29] audit: type=1400 audit(1739980060.749:985): avc: denied { getopt } for pid=10742 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.391895][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 501.428033][T10746] IPVS: using max 27 ests per chain, 64800 per kthread [ 501.850324][ T30] INFO: task syz.2.891:9569 blocked for more than 143 seconds. [ 501.876456][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 501.927499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.952671][ T30] task:syz.2.891 state:D stack:27984 pid:9569 tgid:9563 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 501.964727][ T30] Call Trace: [ 501.968050][ T30] [ 501.971045][ T30] __schedule+0xf43/0x5890 [ 501.976989][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 501.982991][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 501.988274][ T30] ? __pfx___schedule+0x10/0x10 [ 501.993235][ T30] ? schedule+0x298/0x350 [ 501.997574][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.003078][ T30] ? __mutex_trylock_common+0x78/0x250 [ 502.018006][ T30] ? lock_acquire+0x2f/0xb0 [ 502.022585][ T30] ? schedule+0x1fd/0x350 [ 502.026922][ T30] schedule+0xe7/0x350 [ 502.033584][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.051656][ T30] __mutex_lock+0x6bd/0xb10 [ 502.056216][ T30] ? sync_bdevs+0xfd/0x360 [ 502.071195][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.076315][ T30] ? sync_bdevs+0xc7/0x360 [ 502.092405][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 502.108057][ T30] ? iput+0xd3/0x890 [ 502.111981][ T30] ? sync_bdevs+0xfd/0x360 [ 502.116400][ T30] sync_bdevs+0xfd/0x360 [ 502.130594][ T30] ksys_sync+0xb3/0x150 [ 502.134933][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 502.166329][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 502.234774][ T30] ? do_syscall_64+0x91/0x250 [ 502.291292][ T30] __do_sys_sync+0xe/0x20 [ 502.295845][ T30] do_syscall_64+0xcd/0x250 [ 502.345422][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.405808][ T30] RIP: 0033:0x7f888898cde9 [ 502.451090][ T30] RSP: 002b:00007f8889716038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 502.488034][ T30] RAX: ffffffffffffffda RBX: 00007f8888ba6080 RCX: 00007f888898cde9 [ 502.506295][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.531466][ T30] RBP: 00007f8888ba6080 R08: 0000000000000000 R09: 0000000000000000 [ 502.545311][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.574380][ T30] R13: 0000000000000001 R14: 00007f8888ba6080 R15: 00007fff276f58a8 [ 502.594595][ T30] [ 502.613777][ T30] INFO: task syz.2.891:9574 blocked for more than 144 seconds. [ 502.688593][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 502.696259][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.737860][ T30] task:syz.2.891 state:D stack:28304 pid:9574 tgid:9563 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 502.767834][ T30] Call Trace: [ 502.771181][ T30] [ 502.774115][ T30] __schedule+0xf43/0x5890 [ 502.778607][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.787878][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 502.793120][ T30] ? __pfx___schedule+0x10/0x10 [ 502.807831][ T30] ? schedule+0x298/0x350 [ 502.812236][ T30] ? __pfx_lock_release+0x10/0x10 [ 502.817273][ T30] ? __mutex_trylock_common+0x78/0x250 [ 502.827902][ T30] ? lock_acquire+0x2f/0xb0 [ 502.832424][ T30] ? schedule+0x1fd/0x350 [ 502.847097][ T30] schedule+0xe7/0x350 [ 502.851445][ T30] schedule_preempt_disabled+0x13/0x30 [ 502.867743][ T30] __mutex_lock+0x6bd/0xb10 [ 502.872501][ T30] ? sync_bdevs+0xfd/0x360 [ 502.876931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 502.888068][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 502.903507][ T30] ? iput+0xd3/0x890 [ 502.907423][ T30] ? sync_bdevs+0xfd/0x360 [ 502.922659][ T30] sync_bdevs+0xfd/0x360 [ 502.937063][ T30] ksys_sync+0xb3/0x150 [ 502.946478][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 502.954927][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 502.969255][ T30] ? do_syscall_64+0x91/0x250 [ 502.973956][ T30] __do_sys_sync+0xe/0x20 [ 502.988072][ T30] do_syscall_64+0xcd/0x250 [ 502.992655][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.007853][ T30] RIP: 0033:0x7f888898cde9 [ 503.012281][ T30] RSP: 002b:00007f88867f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 503.029613][ T30] RAX: ffffffffffffffda RBX: 00007f8888ba6160 RCX: 00007f888898cde9 [ 503.037653][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.045976][ T30] RBP: 00007f8888ba6160 R08: 0000000000000000 R09: 0000000000000000 [ 503.054373][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.063242][ T30] R13: 0000000000000001 R14: 00007f8888ba6160 R15: 00007fff276f58a8 [ 503.071500][ T30] [ 503.080056][ T30] INFO: task syz.2.891:9580 blocked for more than 145 seconds. [ 503.087605][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 503.095564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.106459][ T30] task:syz.2.891 state:D stack:28656 pid:9580 tgid:9563 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 503.121643][ T30] Call Trace: [ 503.124925][ T30] [ 503.128156][ T30] __schedule+0xf43/0x5890 [ 503.132612][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.137862][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.143089][ T30] ? __pfx___schedule+0x10/0x10 [ 503.147983][ T30] ? schedule+0x298/0x350 [ 503.152307][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.157314][ T30] ? __mutex_trylock_common+0x78/0x250 [ 503.163283][ T30] ? lock_acquire+0x2f/0xb0 [ 503.167826][ T30] ? schedule+0x1fd/0x350 [ 503.172151][ T30] schedule+0xe7/0x350 [ 503.176203][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.181688][ T30] __mutex_lock+0x6bd/0xb10 [ 503.186191][ T30] ? sync_bdevs+0xfd/0x360 [ 503.190999][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.196037][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 503.201347][ T30] ? iput+0xd3/0x890 [ 503.205238][ T30] ? sync_bdevs+0xfd/0x360 [ 503.209704][ T30] sync_bdevs+0xfd/0x360 [ 503.213955][ T30] ksys_sync+0xb3/0x150 [ 503.218152][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 503.222925][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 503.228336][ T30] ? do_syscall_64+0x91/0x250 [ 503.233042][ T30] __do_sys_sync+0xe/0x20 [ 503.237373][ T30] do_syscall_64+0xcd/0x250 [ 503.243618][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.249529][ T30] RIP: 0033:0x7f888898cde9 [ 503.253936][ T30] RSP: 002b:00007f88863d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 503.262566][ T30] RAX: ffffffffffffffda RBX: 00007f8888ba6240 RCX: 00007f888898cde9 [ 503.270927][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.278959][ T30] RBP: 00007f8888ba6240 R08: 0000000000000000 R09: 0000000000000000 [ 503.286922][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.294963][ T30] R13: 0000000000000001 R14: 00007f8888ba6240 R15: 00007fff276f58a8 [ 503.302963][ T30] [ 503.305981][ T30] INFO: task syz.2.891:9586 blocked for more than 145 seconds. [ 503.316707][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 503.324364][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.333059][ T30] task:syz.2.891 state:D stack:28656 pid:9586 tgid:9563 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 503.345014][ T30] Call Trace: [ 503.348411][ T30] [ 503.351336][ T30] __schedule+0xf43/0x5890 [ 503.355731][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.360955][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.366653][ T30] ? __pfx___schedule+0x10/0x10 [ 503.371532][ T30] ? schedule+0x298/0x350 [ 503.375863][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.380953][ T30] ? __mutex_trylock_common+0x78/0x250 [ 503.386411][ T30] ? lock_acquire+0x2f/0xb0 [ 503.390951][ T30] ? schedule+0x1fd/0x350 [ 503.395275][ T30] schedule+0xe7/0x350 [ 503.399404][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.404855][ T30] __mutex_lock+0x6bd/0xb10 [ 503.409364][ T30] ? sync_bdevs+0xfd/0x360 [ 503.413773][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.418821][ T30] ? sync_bdevs+0xc7/0x360 [ 503.423232][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 503.428534][ T30] ? iput+0xd3/0x890 [ 503.432425][ T30] ? sync_bdevs+0xfd/0x360 [ 503.436817][ T30] sync_bdevs+0xfd/0x360 [ 503.441082][ T30] ksys_sync+0xb3/0x150 [ 503.445227][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 503.450081][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 503.455368][ T30] ? do_syscall_64+0x91/0x250 [ 503.460176][ T30] __do_sys_sync+0xe/0x20 [ 503.464497][ T30] do_syscall_64+0xcd/0x250 [ 503.469486][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.475389][ T30] RIP: 0033:0x7f888898cde9 [ 503.479849][ T30] RSP: 002b:00007f8885fb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 503.488290][ T30] RAX: ffffffffffffffda RBX: 00007f8888ba6320 RCX: 00007f888898cde9 [ 503.496260][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.504258][ T30] RBP: 00007f8888ba6320 R08: 0000000000000000 R09: 0000000000000000 [ 503.512255][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.520251][ T30] R13: 0000000000000001 R14: 00007f8888ba6320 R15: 00007fff276f58a8 [ 503.528389][ T30] [ 503.531406][ T30] INFO: task syz.2.891:9589 blocked for more than 145 seconds. [ 503.539284][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 503.546888][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.557662][ T30] task:syz.2.891 state:D stack:27856 pid:9589 tgid:9563 ppid:5818 task_flags:0x400040 flags:0x00004004 [ 503.574706][ T30] Call Trace: [ 503.578000][ T30] [ 503.580923][ T30] __schedule+0xf43/0x5890 [ 503.585323][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.592962][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 503.598181][ T30] ? __pfx___schedule+0x10/0x10 [ 503.603030][ T30] ? schedule+0x298/0x350 [ 503.607349][ T30] ? __pfx_lock_release+0x10/0x10 [ 503.614803][ T30] ? __mutex_trylock_common+0x78/0x250 [ 503.620276][ T30] ? lock_acquire+0x2f/0xb0 [ 503.624783][ T30] ? schedule+0x1fd/0x350 [ 503.631523][ T30] schedule+0xe7/0x350 [ 503.635572][ T30] schedule_preempt_disabled+0x13/0x30 [ 503.641316][ T30] __mutex_lock+0x6bd/0xb10 [ 503.645814][ T30] ? sync_bdevs+0xfd/0x360 [ 503.652706][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 503.657723][ T30] ? sync_bdevs+0xc7/0x360 [ 503.662144][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 503.667421][ T30] ? iput+0xd3/0x890 [ 503.674815][ T30] ? sync_bdevs+0xfd/0x360 [ 503.680796][ T30] sync_bdevs+0xfd/0x360 [ 503.685045][ T30] ksys_sync+0xb3/0x150 [ 503.689287][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 503.694042][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 503.699338][ T30] ? do_syscall_64+0x91/0x250 [ 503.704009][ T30] __do_sys_sync+0xe/0x20 [ 503.708371][ T30] do_syscall_64+0xcd/0x250 [ 503.712869][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.718776][ T30] RIP: 0033:0x7f888898cde9 [ 503.723181][ T30] RSP: 002b:00007f8885b8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 503.731623][ T30] RAX: ffffffffffffffda RBX: 00007f8888ba6400 RCX: 00007f888898cde9 [ 503.739595][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.747555][ T30] RBP: 00007f8888ba6400 R08: 0000000000000000 R09: 0000000000000000 [ 503.755557][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.763539][ T30] R13: 0000000000000001 R14: 00007f8888ba6400 R15: 00007fff276f58a8 [ 503.771591][ T30] [ 503.774806][ T30] [ 503.774806][ T30] Showing all locks held in the system: [ 503.782952][ T30] 2 locks held by kworker/u8:1/12: [ 503.788251][ T30] 1 lock held by khungtaskd/30: [ 503.793098][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 503.803077][ T30] 5 locks held by kworker/u8:8/4138: [ 503.808410][ T30] 2 locks held by getty/5574: [ 503.813071][ T30] #0: ffff888036c820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 503.822812][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 503.832936][ T30] 1 lock held by udevd/5808: [ 503.837495][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 503.846827][ T30] 1 lock held by syz.2.891/9565: [ 503.851766][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.861081][ T30] 1 lock held by syz.2.891/9569: [ 503.866003][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.875328][ T30] 1 lock held by syz.2.891/9574: [ 503.880631][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.889999][ T30] 1 lock held by syz.2.891/9580: [ 503.894919][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.904362][ T30] 1 lock held by syz.2.891/9586: [ 503.909365][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.918734][ T30] 1 lock held by syz.2.891/9589: [ 503.923669][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.933089][ T30] 1 lock held by syz.2.891/9591: [ 503.938280][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.947608][ T30] 1 lock held by syz.2.891/9595: [ 503.952577][ T30] #0: ffff8880259b14c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 503.961965][ T30] [ 503.964281][ T30] ============================================= [ 503.964281][ T30] [ 503.972698][ T30] NMI backtrace for cpu 0 [ 503.972708][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 503.972724][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.972733][ T30] Call Trace: [ 503.972738][ T30] [ 503.972743][ T30] dump_stack_lvl+0x116/0x1f0 [ 503.972765][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 503.972789][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 503.972811][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 503.972835][ T30] watchdog+0xf62/0x12b0 [ 503.972860][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.972882][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 503.972901][ T30] ? __kthread_parkme+0x148/0x220 [ 503.972925][ T30] ? __pfx_watchdog+0x10/0x10 [ 503.972949][ T30] kthread+0x3af/0x750 [ 503.972969][ T30] ? __pfx_kthread+0x10/0x10 [ 503.972992][ T30] ? __pfx_kthread+0x10/0x10 [ 503.973011][ T30] ret_from_fork+0x45/0x80 [ 503.973032][ T30] ? __pfx_kthread+0x10/0x10 [ 503.973053][ T30] ret_from_fork_asm+0x1a/0x30 [ 503.973082][ T30] [ 503.973088][ T30] Sending NMI from CPU 0 to CPUs 1: [ 504.085293][ C1] NMI backtrace for cpu 1 [ 504.085304][ C1] CPU: 1 UID: 0 PID: 4138 Comm: kworker/u8:8 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 504.085319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 504.085328][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 504.085347][ C1] RIP: 0010:unwind_next_frame+0x10f/0x20c0 [ 504.085368][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 94 09 00 00 41 f6 86 88 00 00 00 03 0f 85 71 02 00 00 <4d> 8d 75 35 48 b8 00 00 00 00 00 fc ff df 4c 89 f2 48 c1 ea 03 0f [ 504.085380][ C1] RSP: 0018:ffffc9000eac6d38 EFLAGS: 00000246 [ 504.085390][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffffffff3517b14 [ 504.085399][ C1] RDX: 1ffff92001d58dbf RSI: ffffffff8aa8186d RDI: 0000000000000001 [ 504.085407][ C1] RBP: ffffc9000eac6df0 R08: ffffc9000eac6ddc R09: ffffffff919f6144 [ 504.085415][ C1] R10: ffffc9000eac6da8 R11: 000000000009ce9d R12: ffffc9000eac6df8 [ 504.085423][ C1] R13: ffffc9000eac6da8 R14: 0000000000000000 R15: ffff888033b92440 [ 504.085432][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 504.085445][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.085454][ C1] CR2: 00007fd03a178ab8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 504.085462][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.085469][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 504.085477][ C1] Call Trace: [ 504.085481][ C1] [ 504.085486][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 504.085505][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 504.085521][ C1] ? nmi_handle+0x1ac/0x5d0 [ 504.085538][ C1] ? unwind_next_frame+0x10f/0x20c0 [ 504.085556][ C1] ? default_do_nmi+0x6a/0x160 [ 504.085573][ C1] ? exc_nmi+0x170/0x1e0 [ 504.085588][ C1] ? end_repeat_nmi+0xf/0x53 [ 504.085607][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 504.085622][ C1] ? unwind_next_frame+0x10f/0x20c0 [ 504.085639][ C1] ? unwind_next_frame+0x10f/0x20c0 [ 504.085657][ C1] ? unwind_next_frame+0x10f/0x20c0 [ 504.085674][ C1] [ 504.085678][ C1] [ 504.085682][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 504.085697][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 504.085712][ C1] arch_stack_walk+0x95/0x100 [ 504.085725][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 504.085740][ C1] stack_trace_save+0x95/0xd0 [ 504.085753][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 504.085766][ C1] ? __pfx_mark_lock+0x10/0x10 [ 504.085783][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 504.085800][ C1] kasan_save_stack+0x33/0x60 [ 504.085811][ C1] ? kasan_save_stack+0x33/0x60 [ 504.085822][ C1] ? kasan_save_track+0x14/0x30 [ 504.085833][ C1] ? kasan_save_free_info+0x3b/0x60 [ 504.085848][ C1] ? __kasan_slab_free+0x51/0x70 [ 504.085860][ C1] ? kfree+0x2c4/0x4d0 [ 504.085876][ C1] ? ieee80211_inform_bss+0x76e/0x1100 [ 504.085893][ C1] ? cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 504.085918][ C1] ? cfg80211_inform_bss_data+0x205/0x3ba0 [ 504.085930][ C1] ? cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 504.085943][ C1] ? ieee80211_bss_info_update+0x311/0xab0 [ 504.085959][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 504.085975][ C1] ? ieee80211_iface_work+0xc15/0xf50 [ 504.085991][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 504.086017][ C1] kasan_save_track+0x14/0x30 [ 504.086028][ C1] kasan_save_free_info+0x3b/0x60 [ 504.086043][ C1] __kasan_slab_free+0x51/0x70 [ 504.086055][ C1] kfree+0x2c4/0x4d0 [ 504.086071][ C1] ? mark_held_locks+0x9f/0xe0 [ 504.086085][ C1] ? ieee80211_inform_bss+0x76e/0x1100 [ 504.086102][ C1] ieee80211_inform_bss+0x76e/0x1100 [ 504.086120][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 504.086138][ C1] ? lock_acquire+0x2f/0xb0 [ 504.086152][ C1] ? cfg80211_inform_single_bss_data+0x794/0x1df0 [ 504.086171][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 504.086187][ C1] cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 504.086200][ C1] ? unwind_next_frame+0xe5d/0x20c0 [ 504.086219][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 504.086237][ C1] ? ieee802_11_parse_elems_full+0xf2/0x18c0 [ 504.086255][ C1] ? stack_trace_save+0x95/0xd0 [ 504.086267][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 504.086280][ C1] ? __pfx_mark_lock+0x10/0x10 [ 504.086294][ C1] ? stack_depot_save_flags+0x28/0x9c0 [ 504.086313][ C1] ? cfg80211_inform_bss_data+0x205/0x3ba0 [ 504.086326][ C1] cfg80211_inform_bss_data+0x205/0x3ba0 [ 504.086339][ C1] ? mark_lock+0xb5/0xc60 [ 504.086352][ C1] ? __kmalloc_noprof+0x21c/0x510 [ 504.086364][ C1] ? ieee802_11_parse_elems_full+0xf2/0x18c0 [ 504.086380][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc4f/0x2f50 [ 504.086396][ C1] ? cfg80211_wiphy_work+0x3ed/0x570 [ 504.086410][ C1] ? __pfx_mark_lock+0x10/0x10 [ 504.086425][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 504.086440][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 504.086454][ C1] ? hlock_class+0x4e/0x130 [ 504.086467][ C1] ? mark_lock+0xb5/0xc60 [ 504.086483][ C1] ? hlock_class+0x4e/0x130 [ 504.086495][ C1] ? __lock_acquire+0xcc5/0x3c40 [ 504.086515][ C1] ? hlock_class+0x4e/0x130 [ 504.086529][ C1] ? find_held_lock+0x2d/0x110 [ 504.086542][ C1] ? ieee80211_bss_info_update+0x2cb/0xab0 [ 504.086560][ C1] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 504.086575][ C1] ieee80211_bss_info_update+0x311/0xab0 [ 504.086592][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 504.086609][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1862/0x2f50 [ 504.086627][ C1] ? ieee80211_mandatory_rates+0x1ab/0x220 [ 504.086647][ C1] ieee80211_ibss_rx_queued_mgmt+0x189c/0x2f50 [ 504.086664][ C1] ? hlock_class+0x4e/0x130 [ 504.086679][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 504.086696][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 504.086711][ C1] ? find_held_lock+0x2d/0x110 [ 504.086723][ C1] ? find_held_lock+0x2d/0x110 [ 504.086736][ C1] ? kcov_remote_start+0x370/0x6e0 [ 504.086756][ C1] ? mark_held_locks+0x9f/0xe0 [ 504.086771][ C1] ? kcov_remote_start+0x3cf/0x6e0 [ 504.086791][ C1] ieee80211_iface_work+0xc15/0xf50 [ 504.086810][ C1] cfg80211_wiphy_work+0x3ed/0x570 [ 504.086825][ C1] process_one_work+0x9c5/0x1ba0 [ 504.086844][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 504.086858][ C1] ? __pfx_process_one_work+0x10/0x10 [ 504.086875][ C1] ? assign_work+0x1a0/0x250 [ 504.086891][ C1] worker_thread+0x6c8/0xf00 [ 504.086908][ C1] ? __kthread_parkme+0x148/0x220 [ 504.086921][ C1] ? __pfx_worker_thread+0x10/0x10 [ 504.086937][ C1] kthread+0x3af/0x750 [ 504.086950][ C1] ? __pfx_kthread+0x10/0x10 [ 504.086963][ C1] ? lock_acquire+0x2f/0xb0 [ 504.086980][ C1] ? __pfx_kthread+0x10/0x10 [ 504.086994][ C1] ret_from_fork+0x45/0x80 [ 504.087008][ C1] ? __pfx_kthread+0x10/0x10 [ 504.087022][ C1] ret_from_fork_asm+0x1a/0x30 [ 504.087039][ C1] [ 504.087585][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 504.761084][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 504.771561][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 504.781594][ T30] Call Trace: [ 504.784853][ T30] [ 504.787764][ T30] dump_stack_lvl+0x3d/0x1f0 [ 504.792343][ T30] panic+0x71d/0x800 [ 504.796219][ T30] ? __pfx_panic+0x10/0x10 [ 504.800615][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 504.805970][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 504.811932][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 504.817286][ T30] ? watchdog+0xdcc/0x12b0 [ 504.821686][ T30] ? watchdog+0xdbf/0x12b0 [ 504.826088][ T30] watchdog+0xddd/0x12b0 [ 504.830320][ T30] ? __pfx_watchdog+0x10/0x10 [ 504.834980][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.840162][ T30] ? __kthread_parkme+0x148/0x220 [ 504.845166][ T30] ? __pfx_watchdog+0x10/0x10 [ 504.849829][ T30] kthread+0x3af/0x750 [ 504.853881][ T30] ? __pfx_kthread+0x10/0x10 [ 504.858457][ T30] ? __pfx_kthread+0x10/0x10 [ 504.863027][ T30] ret_from_fork+0x45/0x80 [ 504.867425][ T30] ? __pfx_kthread+0x10/0x10 [ 504.871995][ T30] ret_from_fork_asm+0x1a/0x30 [ 504.876743][ T30] [ 504.879924][ T30] Kernel Offset: disabled [ 504.884222][ T30] Rebooting in 86400 seconds..