last executing test programs: 14.047684157s ago: executing program 4 (id=1662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fefffffffbdbdf2567000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x600d005}, 0x400c004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) sched_setscheduler(r6, 0x3, &(0x7f0000000340)=0x20000000) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmmsg$inet6(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)="e733014f9d164bdf59873884275bcac231625e7e55d40aff89c70ea18defe2bd586ffe73a82f531a1b5e0a6e6ddda1c7505f7c92dccf7b3524e1d40c0dd267f99d66ace6b2ba9eae97c8a7e2675057926dfae09944eb212c13b2e3c87fe5e8190d1ff3848f940bb10ad81b6b6077876c0ed78ed907dbbe0d194732dffc7e0574e1a0df89b82ba56b5c376ecf54308ad42f5112122edbbfbf4b88d79fbe7e353a71e34ca627e68244d1826a80743fa9a3501bd02362bc6b30c1887fc66b7739d76448c7561e0a600930d1b9ee874429b9492f49aa3c148a95b6d537624a814701740edcc58ced2bab58aac59574", 0xed}, {&(0x7f0000000580)="c921c6566fd8722e96b23c9933dfa30c16a1d775491797d2ca971c48d42034de4013bd930e40c618e2ad8c52ed4535e0cc54ec4984f25df1f2eccb2196c82aefeb9c61d55e946bbc689630b69e9ff12b4c9dda91ee954d7738d11e594f521ef907f6c4110f311ae2ac563e308cfe9a178dabc857814df74a67b71027777b4df1e4", 0x81}, {&(0x7f0000000640)="1fa32c0d66f0386cf7ee97f52009432b35f3383d22f3c93200ba1f75a2315aaf8a5a09dc92376ddb56af04", 0x2b}, {&(0x7f0000000880)="4abb2b3e7d3d51153c8c4ff324a3df9944878ad43ca3b98c0118cb6f", 0x1c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x4894) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.976075465s ago: executing program 3 (id=1667): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000340)={0x18, 0x4, 0x4, 0xc}) 11.735282678s ago: executing program 3 (id=1668): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e0000000109022400"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = open(0x0, 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) msgget$private(0x0, 0x31) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x3, @remote, 'veth1_to_team\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$netlink(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x1) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000004c0)={0x3, 0x0, 0x401, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000500)=""/244, 0xf4}], 0x1, 0x61, 0xd) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090027bd7000fedbdf250400000008001a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x2, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x2, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xb, 0x3, 0xe}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x9, 0xdd, "f137af6d740b362170"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x4c, 0xfd, {0x7, 0x25, 0x1, 0xc, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xc, 0x3, 0x65, 0xd, "af8a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xcb, 0x2, 0x1, 0x5, "dd", '`'}, @as_header={0x7, 0x24, 0x1, 0xf4, 0x6, 0x4}, @as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x4}, @as_header={0x7, 0x24, 0x1, 0x10, 0xe, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x6, {0x7, 0x25, 0x1, 0xc, 0x0, 0xb}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0x12, 0x48, 0xdf, 0xd8}, 0xfa, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x5, [{0x27, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, {0xd7, &(0x7f00000007c0)=ANY=[@ANYBLOB="d703a1ff8ec09980f93d26bafee588d7e3941ec594e28754eb8f7e4e4f0cc5888f87b8cefa04eac8884ae478849612f065e386bb196ec773d3a1bb6a6323663330bbb65d4273a20d97cdedd99a2183b25ed8cb32ba6537fc4e6ddafad4260e67cc8a66163c91379af2a6f0f6060e6285b2dc27b623647596ed180b8b529fa36cc1ca572f6d2b9268a8cca79db167a509368f994d6fc174ec9822f63d0da2b8809e213f15b6971658a497ca03bcefabcc766397e2f78b752e4e25a589f3dc498ea72258537a124b000000000000000000000077970f0001000000"]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43e}}]}) 11.546050174s ago: executing program 2 (id=1669): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$MRT(r1, 0x0, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], &(0x7f0000000400)=""/261, 0x26, 0x105, 0x1}, 0x28) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x50400) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x2) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000100)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@empty, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x4de, 0x5, 0x500, 0x8, 0x40004}) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000040)=0x1f) 11.181768034s ago: executing program 4 (id=1670): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r2, r2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x7111, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0xdb}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x71) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4f}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) 10.020047295s ago: executing program 4 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r3, 0xaeb, 0x1) getdents64(r3, 0x0, 0x4f) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r5, 0xe7ce3000) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 9.182350317s ago: executing program 2 (id=1675): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x21800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x237) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x188d}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtfilter={0x1d8, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x9, 0xfff3}, {0xfff2}, {0x10, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x1a8, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x194, 0x6, [@m_tunnel_key={0xb0, 0x17, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x4, 0x6, 0xf, 0x3}, 0x1}}]}, {0x61, 0x6, "fd8ce2494185da65ce7b16fc52f5c95add8bdcd97167a45e0df6b572a9c41375551394d1c3fc086c9ac400e9e06e5c8ec2c5414ad4ccea3fb393ab97de79d9bacf9e20cd5204b7d9782f3dd9ac9baf4ad04ff6b7aadd3c489e450fb1db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0xe0, 0x13, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x3, 0x4, 0x2, 0xa9f}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd25dc}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x53d7, 0x558, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x4}}]}, {0x51, 0x6, "e9c236b6707924e76eaca60e690bc6b11568e3db32503e094a260a2d1631373605221750ff2d8e8cad0f48931c167b9af9b9e074e3d38798e4d4b12ce318825390603530a84f638dc354faf22a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 8.85690308s ago: executing program 3 (id=1677): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket(0x2b, 0x80801, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) readv(r2, &(0x7f0000001900)=[{&(0x7f00000004c0)=""/73, 0x49}], 0x1) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.385086889s ago: executing program 3 (id=1679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0x6, 0x7, 0x2, 0x80009}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"/526, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000f02ffe9ec85fa5769442fddca420151904df28cf570c9571a9c43a52fbd3fd7253938a15b43b4a91dc36cb01dbbd3a5f35f9eaa1bbed44fa23987073aa524c1c2f1aea7d46317f4ed1a28f0abf59d57fad5b474ec47a4af94f482a438eca44cc1d8f32452b97b84fd3c2dfa4bff9a668005fcc6911", @ANYRES8=r3], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) unshare(0x40020000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 8.383726173s ago: executing program 0 (id=1680): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fefffffffbdbdf2567000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x600d005}, 0x400c004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000001c0)=0x0) sched_setscheduler(r6, 0x3, &(0x7f0000000340)=0x20000000) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) sendmmsg$inet6(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)}, {&(0x7f00000003c0)="e733014f9d164bdf59873884275bcac231625e7e55d40aff89c70ea18defe2bd586ffe73a82f531a1b5e0a6e6ddda1c7505f7c92dccf7b3524e1d40c0dd267f99d66ace6b2ba9eae97c8a7e2675057926dfae09944eb212c13b2e3c87fe5e8190d1ff3848f940bb10ad81b6b6077876c0ed78ed907dbbe0d194732dffc7e0574e1a0df89b82ba56b5c376ecf54308ad42f5112122edbbfbf4b88d79fbe7e353a71e34ca627e68244d1826a80743fa9a3501bd02362bc6b30c1887fc66b7739d76448c7561e0a600930d1b9ee874429b9492f49aa3c148a95b6d537624a814701740edcc58ced2bab58aac59574", 0xed}, {&(0x7f0000000580)="c921c6566fd8722e96b23c9933dfa30c16a1d775491797d2ca971c48d42034de4013bd930e40c618e2ad8c52ed4535e0cc54ec4984f25df1f2eccb2196c82aefeb9c61d55e946bbc689630b69e9ff12b4c9dda91ee954d7738d11e594f521ef907f6c4110f311ae2ac563e308cfe9a178dabc857814df74a67b71027777b4df1e4", 0x81}, {&(0x7f0000000640)="1fa32c0d66f0386cf7ee97f52009432b35f3383d22f3c93200ba1f75a2315aaf8a5a09dc92376ddb56af04", 0x2b}, {&(0x7f0000000880)="4abb2b3e7d3d51153c8c4ff324a3df9944878ad43ca3b98c0118cb6f", 0x1c}], 0x5}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x4894) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.332626317s ago: executing program 4 (id=1681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xcdc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0001009000000000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8f5d2b0c476"], 0x138}}, 0x24000058) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e24, 0x3, 'lc\x00', 0x4, 0x3237, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x518) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r6 = fsopen(&(0x7f0000000100)='erofs\x00', 0x1) close(r6) 8.328348749s ago: executing program 2 (id=1682): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x1, r1, 0xfffffffa, 0x1, 0x2000, 0x390, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r2, 0x0, 0x0) (async) getdents64(r2, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESHEX], 0x0) 7.003642865s ago: executing program 4 (id=1683): socket$packet(0x11, 0x2, 0x300) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff42b, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_OFF(r7, 0x7002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b01000009140007800800014000000006080002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) 6.888633676s ago: executing program 1 (id=1684): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f7", 0x9, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 5.726109013s ago: executing program 1 (id=1685): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x301}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x10000}, 0x28) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe", 0x55}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {0x0}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000500)="0f23a93e2ef30fa7d8650f01ca0f0d0fbaf80c66b8a0cbc0800ff837f30f005988edb8a000b0e1ee66f3a4640f01cac365660fc7b1fc56"}], 0x1, 0x20, 0x0, 0xffffffffffffffd3) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x80000001, @mcast1={0xff, 0x7}}}, {{0xa, 0x4a21, 0x9, @empty, 0x1000}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f00000000c0)=""/31, 0x1f) getdents(r6, 0x0, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) socket$nl_rdma(0x10, 0x3, 0x14) 4.81568718s ago: executing program 2 (id=1686): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000200)=@other={'decodes', ' ', 'io'}, 0xb) 4.592502431s ago: executing program 4 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\t\x00\x00\x00\x00\x00\x00\x00\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%+x/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xe2\vI\x00\x00\x00\x00\x00\x00\x00'}]}, 0x7d) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019100)={0x0, 0x0, &(0x7f0000019080)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="33cf154cf1c55c6b7793466d7927fc47dbeaa5b9c614818eb341bcd630e94458df054f49867242afcd02fe3bb638c32e16768467c803da390289d61043c59b04b3b3025e1c31a6442d41ecbd606efb791203f51425b44da54692f75b4df56a1e8a428356954437d59c0b7a610b559dc2f231979d64a975092e15eaf406417448216c1ae38a2abdf5580810664f02674e3f86f021d0149314596d48bc8c141cd3c6077d371b14408b5df2857c68697d937daa4b23f3dc1a36de04fe3bca53777d05564293e00d11f0a6c4beb581e511bfdd7b84587583a88895f762140f3eaa37"], 0x20}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000192c0)=[{0x0}, {0x0}], 0x2) r7 = socket$inet6(0xa, 0x80002, 0x0) socketpair(0x28, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r7, 0x0, 0x0, 0x4000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000420007010000f9fffbdbdf25017c000004"], 0x18}}, 0x0) 4.561510432s ago: executing program 0 (id=1688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000500)=""/144, 0x90}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x4}}], 0x1, 0x2102, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 4.440725821s ago: executing program 2 (id=1689): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000548000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0f20e035400000000f22e040de0a2e67f2450f79edc744240017010000c744240200000100ff1c24b805000000b9c17e3e820f01d9410f01cf0f22a7c4433d49214bb9800000c00f3235000400000f306664470f2310", 0x56}], 0x1, 0x5, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x232, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x46, 0x6d, 0x2e, 0x8, 0x5050, 0x102, 0x62e7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x220, 0x1, 0xc9, 0x2, 0xc0, 0x2, "", [{{0x9, 0x4, 0xe1, 0x6, 0x3, 0x4, 0xad, 0xf0, 0xa, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x2, 0xaa, 0x38, [@generic={0x71, 0x31, "4d27f04e2c5df5f0e485acef07ffc191e13755b8050956d7716c2bb614366b312fb15ce5e97905cc7e8878317857413996e7e33c3377e11569e1f370589adcfa9c30b20a6e557caf10d552e82d28cffdfe3f53c9ffb71b94b699006657eb8082933fb5542d265a16d6920ae92296da"}, @generic={0x6a, 0x23, "c562813d1dc195281dc175f34262c25abf5b247cf26d11ead2c0aa5767977bc430d11dccfb66236895eda3d2117e27a28d2f658a4fe90f11a21b7f28432617a6413f2189e44a576f754a87a9a265d24c9dee208a37eb983ea5543a5ad7cff2390b54aa8358bf4634"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0xc0, 0x0, 0x9, [@generic={0x64, 0x5, "9eea0ee3587a436551fef8529477543b1671601e369cbd4c8da70267cd6e71ae7c392b4fea8a8748c2b9ceff6707586925a72418a1e62f21ed096b48cede426292c6c776e7a02240e335d035dfe2866818b7efac0717212f977f0184a15309f2e9a1"}, @generic={0xb4, 0x31, "e7d99d934722039467b8c629ef15ff5e6e1de017f41f6b5a5866afa1e5d2b536b01a061552ee8ab6877413c27cf9354bec3a7bb4e1f273353b3e194ef48eea647129a246cd4e921205bade39cb58b09acd8a9c332bd55974b53fcb31d9d4beeb9be06863e93e9e7dc2ec1f916052fe22d1481523681eaa702d2582e480ebb3efbc6213908a28f2233136c7c575c0dabf8ebb64b5764600d59073ece05c44d3fabc7791c5e552556f805c9e27759e660c0f5d"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf7, 0x3, 0x1}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x300, 0x5, 0xf9, 0x7, 0x8, 0x2a}, 0x15, &(0x7f0000000500)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3, 0x8}]}, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x3801}}, {0xf8, &(0x7f0000000580)=@string={0xf8, 0x3, "465159148ed635d43c4bd6073cc2cc51676224756ace9e9a8bda5d40ea4cf6348b3f047a6bfc8629ce3ca4713974107da3277dd06d286469a50fa401cfa6e080e7d9b08962839abcf6f25d8cc701f27f618e22ca2643fdf9a13edf8ca34a25becd28b0ac9f2c4f7b8ef920e808e880a0938f7492b72db62288bc85b1d48662f63eb6fe8acd1d883ff619583638cbba1d826519f79832f0448f0b9489c0b344bb466a35fcc5f0e435a1eee5f1731ac9906380dde67515c958df71686aee0b53f3359cb13e44f2a1fea78c71052f408b46bc27352c72372f7076e87bd7a4f03ed383f138d74756edb91b74385a5ba489c4e084c5ad55da"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.315521874s ago: executing program 1 (id=1690): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x2, &(0x7f0000000000)=[&(0x7f00001dc000/0x2000)=nil, &(0x7f0000067000/0x4000)=nil], &(0x7f0000000200)=[0x4, 0x4, 0x7f, 0x1, 0x2], &(0x7f0000000240)=[0x0, 0x0], 0xa) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 4.201166807s ago: executing program 0 (id=1691): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000040)) 4.027115631s ago: executing program 1 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r3, 0xaeb, 0x1) getdents64(r3, 0x0, 0x4f) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r5, 0xe7ce3000) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 3.475986832s ago: executing program 1 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff05000000685e3a63fad616e6e6b855217122c5af25c43cfb46cd7da9208665761dcaa924e694776d15af6b3d09a4fa08ec4a1de6b412f032db0f358b05c5e4cae8195e869c0474a70168765c3ee7de621414df00c8e063156cdcfb0ba7a75b5c3611f396d6c0d350887fae3d2bc510286cf673adc4bbde911edaf1b3506ccfdce9317d1c2012ef29e133509b5df1a64ff5677309956f8feb575afeedf4818a5f2326b0b04c69044f2d35f9e886b9bf1170c5504bad7d35f18b672e4adcc2ec155802b05b075700"/227], 0x14}}, 0x0) 3.195291659s ago: executing program 0 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000040)=0x8) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r2, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x2) r4 = io_uring_setup(0x20b3, &(0x7f0000000240)={0x0, 0xc853, 0x800, 0x0, 0x1ee}) r5 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70ea, 0x2, 0x2, 0xf2, 0x0, r4}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000400)=[0xe758, 0xf8de], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x0, 0x10, 0x1, 0x2, 0xfffffffd, 0x4}}) pipe(&(0x7f00000045c0)) socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) socket$igmp6(0xa, 0x3, 0x2) 3.190690639s ago: executing program 3 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r3, 0xaeb, 0x1) getdents64(r3, 0x0, 0x4f) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00004a5000/0x2000)=nil, 0x2000, 0x0, 0x28011, r5, 0xe7ce3000) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) socket$igmp(0x2, 0x3, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) 3.08563285s ago: executing program 1 (id=1696): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_clone(0x21800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x40002, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="370200007d02000005f6000000000000058300fffe0008000000000000000000404100000000e0e5000005000000000000001b00046e6f6465767b65766f6f7e0545c60005080037d93a8b920000003300704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb1403f196a51cd5157adc8103b494e13700cfc36d07c500f04cd85f2a70f5e9930e5e989cd5ef4d51f60da7582c4a05c8f828f68dc1774d5de2e820862381f6686dd1bb8fd70000003e00f8f669fb716dcf315ecaf385409ac65b9408678c3c3b9e1d52c36cde7ba4a400b4b077dc74000000000000000007ec21cabff20f9c0089f90600000000002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1372d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c5", @ANYRES32=0x0], 0x237) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x188d}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtfilter={0x1d8, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x9, 0xfff3}, {0xfff2}, {0x10, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x1a8, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x194, 0x6, [@m_tunnel_key={0xb0, 0x17, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xb, 0x4, 0x6, 0xf, 0x3}, 0x1}}]}, {0x61, 0x6, "fd8ce2494185da65ce7b16fc52f5c95add8bdcd97167a45e0df6b572a9c41375551394d1c3fc086c9ac400e9e06e5c8ec2c5414ad4ccea3fb393ab97de79d9bacf9e20cd5204b7d9782f3dd9ac9baf4ad04ff6b7aadd3c489e450fb1db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_mpls={0xe0, 0x13, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3ff, 0x3, 0x4, 0x2, 0xa9f}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd25dc}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x53d7, 0x558, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x4}}]}, {0x51, 0x6, "e9c236b6707924e76eaca60e690bc6b11568e3db32503e094a260a2d1631373605221750ff2d8e8cad0f48931c167b9af9b9e074e3d38798e4d4b12ce318825390603530a84f638dc354faf22a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@can={0x1d, r9}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}, 0x400060}, 0x80, 0x0}}], 0x2, 0x4048055) 2.119631481s ago: executing program 0 (id=1697): r0 = socket(0x21, 0x2, 0xa) r1 = io_uring_setup(0x29c2, &(0x7f0000000240)={0x0, 0xcbd2, 0x0, 0xffffffff, 0x2002b4}) close_range(r0, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002a000000000008000300", @ANYRES32=r5], 0x5c}}, 0x18) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) personality(0x5000002) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x800049, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000000)={0x79}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000002c0)={"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"}) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000100)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2.033467582s ago: executing program 3 (id=1698): socket$packet(0x11, 0x2, 0x300) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff42b, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b01000009140007800800014000000006080002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) socketpair(0x29, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) 278.332684ms ago: executing program 0 (id=1699): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x60, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f400090006", 0x5}], 0x1}, 0x0) 0s ago: executing program 2 (id=1700): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysfs$3(0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) unshare(0x2a020480) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) pselect6(0x40, &(0x7f0000000240)={0x300, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) kernel console output (not intermixed with test programs): but max is 0 [ 582.472470][ T5887] usb 3-1: config 0 has no interface number 0 [ 582.478742][ T5887] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 582.492321][ T5887] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 582.506075][ T5887] usb 3-1: config 0 interface 255 has no altsetting 0 [ 582.519944][ T5887] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.743432][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 582.762223][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 582.965995][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.082202][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.714951][ T5887] usb 3-1: config 0 descriptor?? [ 583.734419][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 583.734435][ T29] audit: type=1400 audit(1776335688.361:10593): avc: denied { read } for pid=11277 comm="syz.4.1403" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 583.783599][ T5887] cp210x 3-1:0.255: cp210x converter detected [ 583.995970][ T29] audit: type=1400 audit(1776335688.361:10594): avc: denied { open } for pid=11277 comm="syz.4.1403" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 584.043112][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.201743][ T29] audit: type=1400 audit(1776335688.398:10595): avc: denied { ioctl } for pid=11265 comm="syz.2.1401" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 584.240808][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.254132][ T29] audit: type=1400 audit(1776335688.454:10596): avc: denied { module_request } for pid=11270 comm="syz.0.1402" kmod="crypto--all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 584.426833][ T5887] cp210x 3-1:0.255: failed to get vendor val 0x370b size 1: -121 [ 584.778214][ T5887] cp210x 3-1:0.255: querying part number failed [ 584.807481][ T29] audit: type=1400 audit(1776335688.473:10597): avc: denied { module_request } for pid=11270 comm="syz.0.1402" kmod="crypto-ecb(xeta-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 584.833531][ T5887] usb 3-1: cp210x converter now attached to ttyUSB0 [ 584.860979][ T29] audit: type=1400 audit(1776335688.688:10598): avc: denied { execmem } for pid=11265 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 584.901767][ T29] audit: type=1400 audit(1776335688.950:10599): avc: denied { map_create } for pid=11265 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 584.944311][ T29] audit: type=1400 audit(1776335688.950:10600): avc: denied { map_read map_write } for pid=11265 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 584.995932][ T29] audit: type=1400 audit(1776335688.987:10601): avc: denied { create } for pid=11265 comm="syz.2.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 585.047140][ T29] audit: type=1400 audit(1776335689.016:10602): avc: denied { ioctl } for pid=11265 comm="syz.2.1401" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.148065][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.234566][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.650585][ T5887] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 585.873880][ T5859] usb 3-1: USB disconnect, device number 47 [ 586.016703][ T5859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 586.027503][ T5887] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.068448][ T5859] cp210x 3-1:0.255: device disconnected [ 586.113538][ T5887] usb 2-1: config 5 has an invalid interface number: 150 but max is 0 [ 586.266230][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.434882][ T5887] usb 2-1: config 5 has no interface number 0 [ 586.442375][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.571937][ T5887] usb 2-1: config 5 interface 150 altsetting 3 endpoint 0xD has invalid wMaxPacketSize 0 [ 586.582604][ T5887] usb 2-1: config 5 interface 150 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 586.597460][ T5887] usb 2-1: config 5 interface 150 has no altsetting 0 [ 586.718712][T11301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.107344][ T5887] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=7a.a6 [ 587.134247][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.156386][ T5887] usb 2-1: Product: syz [ 587.166362][ T5887] usb 2-1: Manufacturer: syz [ 587.177682][ T5887] usb 2-1: SerialNumber: syz [ 587.544936][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.702133][T11314] loop8: detected capacity change from 0 to 7 [ 587.766840][T11314] Dev loop8: unable to read RDB block 7 [ 587.829766][T11314] loop8: unable to read partition table [ 587.855276][T11314] loop8: partition table beyond EOD, truncated [ 587.877795][T11314] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 587.908191][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1410'. [ 588.616902][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.618343][ T5859] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 588.686909][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.868221][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 588.890884][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.924342][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.948289][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.978486][ T5859] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.003088][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.042238][ T5859] usb 5-1: config 0 descriptor?? [ 589.134334][ T5872] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 589.156209][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 589.156227][ T29] audit: type=1400 audit(1776335693.442:10757): avc: denied { ioctl } for pid=11324 comm="syz.2.1414" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 589.262380][ T29] audit: type=1400 audit(1776335693.545:10758): avc: denied { ioctl } for pid=11324 comm="syz.2.1414" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 589.347160][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 589.365524][ T5872] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 589.377561][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.410772][ T5872] usb 3-1: Product: syz [ 589.421115][ T5872] usb 3-1: Manufacturer: syz [ 589.433954][ T5872] usb 3-1: SerialNumber: syz [ 589.458223][ T5872] usb 3-1: config 0 descriptor?? [ 589.481381][ T5872] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 589.489741][ T29] audit: type=1400 audit(1776335693.741:10759): avc: denied { ioctl } for pid=11324 comm="syz.2.1414" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 589.526035][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 589.538738][ T5872] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 589.561629][ T29] audit: type=1400 audit(1776335693.797:10760): avc: denied { create } for pid=11315 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.584516][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 589.622487][ T5872] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 589.637587][ T5887] usb 2-1: USB disconnect, device number 25 [ 589.644695][ T29] audit: type=1400 audit(1776335693.797:10761): avc: denied { read } for pid=11315 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.700628][ T5859] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002D/input/input29 [ 589.730946][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.745734][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.775868][ T29] audit: type=1400 audit(1776335693.854:10762): avc: denied { write } for pid=11315 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.797182][ T1204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.809265][ T5872] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 589.838219][ T5872] usb 3-1: media controller created [ 589.847629][ T29] audit: type=1400 audit(1776335693.872:10763): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 589.962258][ T5859] microsoft 0003:045E:07DA.002D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 590.035639][ T29] audit: type=1400 audit(1776335693.872:10764): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.081832][ T5859] usb 5-1: USB disconnect, device number 37 [ 590.091530][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.392705][T11333] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1416'. [ 590.887677][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.905839][ T29] audit: type=1400 audit(1776335693.872:10765): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 591.024013][ T29] audit: type=1400 audit(1776335693.891:10766): avc: denied { ioctl } for pid=11315 comm="syz.4.1405" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 591.108345][ T5872] usb 3-1: selecting invalid altsetting 3 [ 591.159631][ T5872] ttusb2: set interface to alts=3 failed [ 591.323264][T11332] fido_id[11332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 591.520431][ T5872] DVB: Unable to find symbol tda10086_attach() [ 591.551664][ T5872] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 591.783343][ T5872] dvb-usb: bulk message failed: -22 (4/0) [ 591.986871][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.083877][ T5872] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 592.095307][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 592.101173][ T5872] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 592.112859][ T5872] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 592.127599][ T5872] usb 3-1: USB disconnect, device number 48 [ 592.271924][ T5872] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 593.223419][T11354] vxcan1 speed is unknown, defaulting to 1000 [ 593.741261][T11354] lo speed is unknown, defaulting to 1000 [ 593.780007][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.788184][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.521881][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 594.521899][ T29] audit: type=1400 audit(1776335698.458:10875): avc: denied { prog_load } for pid=11360 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 594.627071][ T29] audit: type=1400 audit(1776335698.458:10876): avc: denied { bpf } for pid=11360 comm="syz.1.1422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 594.692848][ T29] audit: type=1400 audit(1776335698.458:10877): avc: denied { perfmon } for pid=11360 comm="syz.1.1422" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 594.753640][ T29] audit: type=1400 audit(1776335698.495:10878): avc: denied { prog_load } for pid=11360 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 594.807147][T11367] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1423'. [ 594.814798][ T29] audit: type=1400 audit(1776335698.495:10879): avc: denied { bpf } for pid=11360 comm="syz.1.1422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 594.897022][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.929618][ T29] audit: type=1400 audit(1776335698.505:10880): avc: denied { perfmon } for pid=11360 comm="syz.1.1422" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.014995][ T29] audit: type=1400 audit(1776335698.514:10881): avc: denied { create } for pid=11360 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 595.122623][ T29] audit: type=1400 audit(1776335698.514:10882): avc: denied { create } for pid=11363 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 595.198548][ T29] audit: type=1400 audit(1776335698.523:10883): avc: denied { write } for pid=11363 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 595.255073][ T29] audit: type=1400 audit(1776335698.523:10884): avc: denied { prog_load } for pid=11363 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 596.005092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.508222][T11384] netlink: zone id is out of range [ 596.529764][T11384] netlink: zone id is out of range [ 596.548191][T11384] netlink: zone id is out of range [ 596.572415][T11384] netlink: zone id is out of range [ 596.586152][T11384] netlink: zone id is out of range [ 596.611498][T11384] netlink: zone id is out of range [ 599.870510][ T5887] net_ratelimit: 824 callbacks suppressed [ 599.870530][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.926397][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 599.926417][ T29] audit: type=1400 audit(1776335703.427:11092): avc: denied { map_create } for pid=11420 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.038546][ T29] audit: type=1400 audit(1776335703.558:11093): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.143073][ T29] audit: type=1400 audit(1776335703.558:11094): avc: denied { open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.203160][ T29] audit: type=1400 audit(1776335703.558:11095): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.243742][T11430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1442'. [ 600.260174][ T29] audit: type=1400 audit(1776335703.577:11096): avc: denied { read write } for pid=5800 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.284685][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.294738][ T29] audit: type=1400 audit(1776335703.577:11097): avc: denied { read write open } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.330211][ T29] audit: type=1400 audit(1776335703.577:11098): avc: denied { ioctl } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.407361][ T29] audit: type=1400 audit(1776335703.708:11099): avc: denied { prog_load } for pid=11427 comm="syz.0.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 600.550771][ T29] audit: type=1400 audit(1776335703.708:11100): avc: denied { bpf } for pid=11427 comm="syz.0.1440" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 600.685747][ T29] audit: type=1400 audit(1776335703.745:11101): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 601.024806][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.303649][T11447] overlayfs: failed to clone upperpath [ 602.163739][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.542777][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 602.564049][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1445'. [ 603.071806][ T5887] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 603.228901][ T5887] usb 2-1: device descriptor read/64, error -71 [ 603.271969][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.528525][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.538236][ T5887] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 603.793539][ T5887] usb 2-1: device descriptor read/64, error -71 [ 603.936272][ T5887] usb usb2-port1: attempt power cycle [ 604.606988][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.621447][ T5887] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 604.703398][ T5887] usb 2-1: device descriptor read/8, error -71 [ 605.375994][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 605.376011][ T29] audit: type=1400 audit(1776335708.611:11313): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 605.419204][ T5887] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 605.446375][T11491] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 605.530094][ T5887] usb 2-1: device descriptor read/8, error -71 [ 605.591239][ T29] audit: type=1400 audit(1776335708.611:11314): avc: denied { open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 605.715691][ T5887] usb usb2-port1: unable to enumerate USB device [ 605.851324][ T29] audit: type=1400 audit(1776335708.611:11315): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 605.853377][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.564762][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.612012][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1458'. [ 606.631457][ T29] audit: type=1400 audit(1776335708.667:11316): avc: denied { create } for pid=11490 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 606.718978][ T29] audit: type=1400 audit(1776335708.677:11317): avc: denied { create } for pid=11490 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 606.777663][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.855823][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.929493][ T5859] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 607.415331][ T29] audit: type=1400 audit(1776335708.677:11318): avc: denied { create } for pid=11490 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.440789][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.452841][ T29] audit: type=1400 audit(1776335708.677:11319): avc: denied { write } for pid=11490 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 607.644101][ T5859] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 607.728056][ T29] audit: type=1400 audit(1776335708.695:11320): avc: denied { write } for pid=11490 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.790426][T11507] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.806170][T11510] audit: audit_backlog=65 > audit_backlog_limit=64 [ 607.815115][ T5859] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 607.929475][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.111800][ T5859] usb 2-1: Product: syz [ 608.191034][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.199960][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.575385][ T5859] usb 2-1: Manufacturer: syz [ 608.584301][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.622522][ T5859] usb 2-1: SerialNumber: syz [ 608.694416][ T5859] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.747872][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 609.015792][T11501] random: crng reseeded on system resumption [ 609.109807][ T9] usb 2-1: USB disconnect, device number 30 [ 609.694284][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.939423][ T5859] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 609.948813][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 609.970469][ T24] ath9k_htc: Failed to initialize the device [ 609.995392][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 610.111468][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.125021][ T5859] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.177769][ T5859] usb 5-1: config 0 has no interface number 0 [ 610.215408][ T5859] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 610.258497][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.284209][ T5859] usb 5-1: config 0 descriptor?? [ 610.302151][T11538] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 610.327498][ T5859] cp210x 5-1:0.1: cp210x converter detected [ 610.340384][T11534] block nbd1: shutting down sockets [ 610.728326][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 610.728345][ T29] audit: type=1400 audit(1776335713.534:11476): avc: denied { execmem } for pid=11540 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 610.764856][ T5859] cp210x 5-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 610.792653][ T5859] cp210x 5-1:0.1: failed to get vendor val 0x3711 size 2: -32 [ 610.803773][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.832628][ T5859] cp210x 5-1:0.1: GPIO initialisation failed: -32 [ 611.219765][ T29] audit: type=1400 audit(1776335713.665:11477): avc: denied { ioctl } for pid=11530 comm="syz.4.1468" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 611.255368][ T5859] usb 5-1: cp210x converter now attached to ttyUSB0 [ 611.324871][ T29] audit: type=1400 audit(1776335713.665:11478): avc: denied { create } for pid=11530 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.422503][ T29] audit: type=1400 audit(1776335713.665:11479): avc: denied { setopt } for pid=11530 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 611.598742][ T29] audit: type=1400 audit(1776335713.665:11480): avc: denied { create } for pid=11530 comm="syz.4.1468" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 611.796809][ T29] audit: type=1400 audit(1776335713.674:11481): avc: denied { ioctl } for pid=11530 comm="syz.4.1468" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31899 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 611.834821][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'. [ 611.893761][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1474'. [ 611.905730][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.021718][ T29] audit: type=1400 audit(1776335713.721:11482): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.341876][T11558] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 612.536218][ T29] audit: type=1400 audit(1776335713.721:11483): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.785618][ T29] audit: type=1400 audit(1776335713.721:11484): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 612.853877][ T29] audit: type=1400 audit(1776335713.739:11485): avc: denied { read } for pid=11540 comm="syz.2.1471" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 612.996811][T11563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1477'. [ 613.096174][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.282239][ T5887] usb 5-1: USB disconnect, device number 38 [ 613.360604][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.482133][ T5887] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 613.557764][ T5887] cp210x 5-1:0.1: device disconnected [ 613.868289][T11576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1480'. [ 614.459578][T11574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1481'. [ 614.480533][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.592391][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.874733][T11589] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 616.229698][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 616.229715][ T29] audit: type=1400 audit(1776335718.774:11649): avc: denied { read write } for pid=5800 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.493067][ T29] audit: type=1400 audit(1776335718.774:11650): avc: denied { open } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.609225][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.672816][ T29] audit: type=1400 audit(1776335718.774:11651): avc: denied { ioctl } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 616.704953][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.921855][ T29] audit: type=1400 audit(1776335718.924:11652): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.399921][ T29] audit: type=1400 audit(1776335718.924:11653): avc: denied { open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.426965][ T29] audit: type=1400 audit(1776335718.924:11654): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.475885][ T29] audit: type=1400 audit(1776335719.017:11655): avc: denied { create } for pid=11590 comm="syz.4.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 617.611838][ T29] audit: type=1400 audit(1776335719.092:11656): avc: denied { allowed } for pid=11591 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 617.691878][ T29] audit: type=1400 audit(1776335719.139:11657): avc: denied { mounton } for pid=11590 comm="syz.4.1487" path="/262/file0" dev="tmpfs" ino=1473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 617.762118][ T29] audit: type=1400 audit(1776335719.139:11658): avc: denied { unlink } for pid=11590 comm="syz.4.1487" name="#64" dev="tmpfs" ino=1478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 618.361592][T11618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1494'. [ 619.857142][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.727628][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 621.727640][ T29] audit: type=1400 audit(1776335723.921:11764): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 621.827254][ T29] audit: type=1400 audit(1776335724.014:11765): avc: denied { create } for pid=11648 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 621.925650][ T29] audit: type=1400 audit(1776335724.033:11766): avc: denied { create } for pid=11648 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 622.069102][ T29] audit: type=1400 audit(1776335724.043:11767): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 622.183932][ T29] audit: type=1400 audit(1776335724.061:11768): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.287320][T11658] netlink: 840 bytes leftover after parsing attributes in process `syz.4.1499'. [ 622.310825][ T29] audit: type=1400 audit(1776335724.061:11769): avc: denied { open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.533964][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.562628][ T29] audit: type=1400 audit(1776335724.061:11770): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 622.589569][ T29] audit: type=1400 audit(1776335724.080:11771): avc: denied { create } for pid=11648 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.623631][ T29] audit: type=1400 audit(1776335724.080:11772): avc: denied { create } for pid=11648 comm="syz.0.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 622.808155][T11665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 622.851028][ T29] audit: type=1400 audit(1776335724.127:11773): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 623.140567][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.393985][ T5909] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 623.993562][ T5909] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 624.040638][ T5909] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 624.061413][T11676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=11676 comm=syz.4.1505 [ 624.092934][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 624.211809][T11679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11679 comm=syz.4.1505 [ 624.254186][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 624.315306][ T5909] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 624.391687][ T5909] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.442473][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.488014][ T5909] usb 4-1: Product: syz [ 625.222423][ T5887] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 625.254720][ T5909] usb 4-1: Manufacturer: syz [ 625.482254][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 625.519422][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 625.551565][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 625.571116][ T5909] usb 4-1: can't set config #1, error -71 [ 625.580406][ T5887] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 625.701248][ T5887] usb 5-1: config 0 has no interface number 0 [ 625.714192][T11686] vxcan1 speed is unknown, defaulting to 1000 [ 625.735664][ T5887] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 625.764657][ T5909] usb 4-1: USB disconnect, device number 55 [ 625.774121][ T5887] usb 5-1: config 0 interface 85 has no altsetting 0 [ 625.902322][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 625.912792][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.921027][ T5887] usb 5-1: Product: syz [ 625.931883][ T5887] usb 5-1: Manufacturer: syz [ 625.942811][ T5887] usb 5-1: SerialNumber: syz [ 626.002313][ T5887] usb 5-1: config 0 descriptor?? [ 626.039583][ T5887] appletouch 5-1:0.85: Could not find int-in endpoint [ 626.070917][ T5887] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 626.118435][ T5887] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 626.265403][ T9] usb 5-1: USB disconnect, device number 39 [ 626.354903][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.508159][T11697] dvmrp0: entered allmulticast mode [ 626.570188][T11697] dlm: no locking on control device [ 626.668479][T11686] lo speed is unknown, defaulting to 1000 [ 627.077978][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 627.114560][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 627.114571][ T29] audit: type=1400 audit(1776335728.965:11953): avc: denied { ioctl } for pid=11703 comm="syz.3.1512" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.217308][T11713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.226492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.595894][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.623580][ T29] audit: type=1400 audit(1776335729.077:11954): avc: denied { create } for pid=11709 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.693620][ T29] audit: type=1400 audit(1776335729.077:11955): avc: denied { write } for pid=11709 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 627.732350][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 627.746614][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 627.767673][ T9] usb 4-1: config 0 has no interface number 0 [ 627.784049][ T29] audit: type=1400 audit(1776335729.367:11956): avc: denied { ioctl } for pid=11703 comm="syz.3.1512" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.826032][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 627.927025][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.943815][ T9] usb 4-1: Product: syz [ 627.960740][ T29] audit: type=1400 audit(1776335729.461:11957): avc: denied { ioctl } for pid=11703 comm="syz.3.1512" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.989667][ T9] usb 4-1: Manufacturer: syz [ 628.005133][ T9] usb 4-1: SerialNumber: syz [ 628.032993][ T9] usb 4-1: config 0 descriptor?? [ 628.051014][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 628.071045][ T29] audit: type=1400 audit(1776335729.489:11958): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.209414][ T29] audit: type=1400 audit(1776335729.489:11959): avc: denied { open } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.589545][ T29] audit: type=1400 audit(1776335729.489:11960): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.684238][ T9] gspca_spca1528: reg_w err -110 [ 628.715501][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 628.730159][T11726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.773995][ T29] audit: type=1400 audit(1776335729.554:11961): avc: denied { ioctl } for pid=11703 comm="syz.3.1512" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.609362][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.638635][ T29] audit: type=1400 audit(1776335729.611:11962): avc: denied { ioctl } for pid=11703 comm="syz.3.1512" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 631.406661][T11743] netlink: 'syz.0.1521': attribute type 1 has an invalid length. [ 631.556799][ T24] usb 4-1: USB disconnect, device number 56 [ 632.007765][T11768] random: crng reseeded on system resumption [ 632.059442][ T5887] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 632.466267][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 632.466285][ T29] audit: type=1400 audit(1776335733.962:12086): avc: denied { ioctl } for pid=11763 comm="syz.2.1528" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.524898][ T29] audit: type=1400 audit(1776335734.018:12087): avc: denied { ioctl } for pid=11754 comm="syz.1.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.689604][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.741560][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.807355][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 632.862195][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.882094][ T29] audit: type=1400 audit(1776335734.056:12088): avc: denied { ioctl } for pid=11763 comm="syz.2.1528" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.910721][ T5887] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 632.995278][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.078136][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 633.132201][ T5887] usb 2-1: config 0 descriptor?? [ 633.143277][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 633.171524][ T29] audit: type=1400 audit(1776335734.074:12089): avc: denied { execmem } for pid=11767 comm="syz.0.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 633.218726][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 633.440853][T11778] PKCS8: Unsupported PKCS#8 version [ 633.449234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.723216][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 633.754478][ T29] audit: type=1400 audit(1776335734.074:12090): avc: denied { ioctl } for pid=11753 comm="syz.4.1523" path="socket:[33033]" dev="sockfs" ino=33033 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 633.855165][T11765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.863352][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 633.866220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.719062][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 634.748384][ T29] audit: type=1400 audit(1776335734.084:12091): avc: denied { read } for pid=11753 comm="syz.4.1523" name="demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 634.776354][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.852386][ T29] audit: type=1400 audit(1776335734.084:12092): avc: denied { read open } for pid=11753 comm="syz.4.1523" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 634.934059][ T29] audit: type=1400 audit(1776335734.093:12093): avc: denied { ioctl } for pid=11754 comm="syz.1.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 634.968724][ T29] audit: type=1400 audit(1776335734.149:12094): avc: denied { ioctl } for pid=11753 comm="syz.4.1523" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=927 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 635.022843][ T29] audit: type=1400 audit(1776335734.168:12095): avc: denied { ioctl } for pid=11754 comm="syz.1.1525" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.157063][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 635.173772][T11787] netlink: 'syz.3.1532': attribute type 25 has an invalid length. [ 635.185572][ T24] usbtmc 3-1:16.0: can't read capabilities [ 635.192120][ T5887] usbhid 2-1:0.0: can't add hid device: -71 [ 635.207411][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 635.232803][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 635.260382][ T5887] usb 2-1: USB disconnect, device number 31 [ 635.321154][ T6051] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.346066][ T6051] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.396272][ T6051] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.414874][ T6051] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.500497][ T6051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.609282][ T5887] usb 3-1: USB disconnect, device number 49 [ 635.697494][T11770] vxcan1 speed is unknown, defaulting to 1000 [ 635.711652][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 636.109597][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.557877][T11805] netlink: 'syz.4.1539': attribute type 4 has an invalid length. [ 637.565748][T11805] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1539'. [ 637.570208][T11770] lo speed is unknown, defaulting to 1000 [ 637.877476][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 637.877493][ T29] audit: type=1400 audit(1776335739.034:12246): avc: denied { prog_load } for pid=11816 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 637.914531][ T24] libceph: connect (1)[c::]:6789 error -101 [ 637.953784][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 637.997583][ T29] audit: type=1400 audit(1776335739.090:12247): avc: denied { bpf } for pid=11816 comm="syz.3.1541" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 638.023487][T11809] ceph: No mds server is up or the cluster is laggy [ 638.059096][ T24] libceph: connect (1)[c::]:6789 error -101 [ 638.093291][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 638.117095][ T29] audit: type=1400 audit(1776335739.090:12248): avc: denied { create } for pid=11816 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 638.212074][ T29] audit: type=1400 audit(1776335739.100:12249): avc: denied { create } for pid=11816 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 638.267313][ T29] audit: type=1400 audit(1776335739.118:12250): avc: denied { read write } for pid=11816 comm="syz.3.1541" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 638.341177][ T29] audit: type=1400 audit(1776335739.118:12251): avc: denied { open } for pid=11816 comm="syz.3.1541" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 638.418475][ T29] audit: type=1400 audit(1776335739.137:12252): avc: denied { create } for pid=11816 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.489174][ T29] audit: type=1400 audit(1776335739.212:12253): avc: denied { create } for pid=11816 comm="syz.3.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 638.538378][ T29] audit: type=1400 audit(1776335739.212:12254): avc: denied { read } for pid=11816 comm="syz.3.1541" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 638.635167][ T29] audit: type=1400 audit(1776335739.212:12255): avc: denied { read open } for pid=11816 comm="syz.3.1541" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 639.054177][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 639.171405][T11836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11836 comm=syz.4.1546 [ 639.192972][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1545'. [ 639.360310][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.947858][ T1204] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 640.004286][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 640.223785][ T1204] usb 4-1: Using ep0 maxpacket: 32 [ 640.460839][ T1204] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 640.566436][ T1204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.623229][ T1204] usb 4-1: Product: syz [ 640.654201][ T1204] usb 4-1: Manufacturer: syz [ 640.684586][ T1204] usb 4-1: SerialNumber: syz [ 640.788567][ T1204] usb 4-1: config 0 descriptor?? [ 640.858915][ T1204] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 640.887095][ T1204] dvb-usb: bulk message failed: -22 (4/0) [ 640.912433][ T1204] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 640.973198][ T1204] dvb-usb: bulk message failed: -22 (5/0) [ 640.979446][ T1204] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 641.049611][ T1204] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 641.111247][ T1204] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 641.191017][ T1204] usb 4-1: media controller created [ 641.363968][ T1204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.503880][T11855] overlayfs: missing 'workdir' [ 641.639142][ T1204] usb 4-1: selecting invalid altsetting 3 [ 641.700603][ T131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.730947][ T1204] ttusb2: set interface to alts=3 failed [ 642.369058][ T1204] DVB: Unable to find symbol tda10086_attach() [ 642.464711][ T1204] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 642.571907][ T1204] dvb-usb: bulk message failed: -22 (4/0) [ 642.596412][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.660739][ T1204] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 642.801567][ T1204] dvb-usb: bulk message failed: -22 (5/0) [ 642.889882][ T1204] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 643.091607][ T1204] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 643.268777][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 643.268788][ T29] audit: type=1400 audit(1776335744.069:12419): avc: denied { read write } for pid=11861 comm="syz.4.1554" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.333513][ T1204] usb 4-1: USB disconnect, device number 57 [ 643.601396][ T29] audit: type=1400 audit(1776335744.069:12420): avc: denied { open } for pid=11861 comm="syz.4.1554" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.774282][ T29] audit: type=1400 audit(1776335744.153:12421): avc: denied { ioctl } for pid=11861 comm="syz.4.1554" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 643.847536][ T1204] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 643.872713][ T29] audit: type=1400 audit(1776335744.153:12422): avc: denied { read write } for pid=11863 comm="syz.2.1555" name="v4l-subdev4" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.031725][ T29] audit: type=1400 audit(1776335744.153:12423): avc: denied { open } for pid=11863 comm="syz.2.1555" path="/dev/v4l-subdev4" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 644.073049][T11881] netlink: 'syz.1.1556': attribute type 1 has an invalid length. [ 644.244284][ T29] audit: type=1400 audit(1776335744.172:12424): avc: denied { create } for pid=11861 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 644.401700][ T1204] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 644.551497][ T29] audit: type=1400 audit(1776335744.181:12425): avc: denied { execmem } for pid=11861 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 644.630412][T11890] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 644.973635][ T29] audit: type=1400 audit(1776335744.274:12426): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 645.027571][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 645.143270][T11879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.143551][T11886] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.171119][ T1204] usb 3-1: Using ep0 maxpacket: 16 [ 645.208043][ T1204] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 645.259913][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.367726][T11886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.386286][ T1204] usb 3-1: Product: syz [ 645.402068][ T1204] usb 3-1: Manufacturer: syz [ 645.494668][ T1204] usb 3-1: SerialNumber: syz [ 645.586468][ T1204] usb 3-1: config 0 descriptor?? [ 645.747586][ T1204] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 645.852465][T11905] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 646.181530][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.599809][ T5909] usb 3-1: USB disconnect, device number 50 [ 647.812346][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.128740][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1570'. [ 648.627810][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 648.627843][ T29] audit: type=1400 audit(1776335749.094:12607): avc: denied { ioctl } for pid=11929 comm="syz.1.1571" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.695681][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 648.832235][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.875121][ T29] audit: type=1400 audit(1776335749.225:12608): avc: denied { ioctl } for pid=11922 comm="syz.4.1570" path="socket:[34076]" dev="sockfs" ino=34076 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 648.937169][ T29] audit: type=1400 audit(1776335749.234:12609): avc: denied { ioctl } for pid=11929 comm="syz.1.1571" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 648.995097][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 649.026747][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 649.047874][ T29] audit: type=1400 audit(1776335749.309:12610): avc: denied { ioctl } for pid=11929 comm="syz.1.1571" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 649.081093][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 649.130301][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 649.159039][T11937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1572'. [ 649.159228][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.230615][ T29] audit: type=1400 audit(1776335749.356:12611): avc: denied { create } for pid=11922 comm="syz.4.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 649.267591][ T24] usb 2-1: Product: syz [ 649.281726][ T24] usb 2-1: Manufacturer: syz [ 649.292790][ T29] audit: type=1400 audit(1776335749.356:12612): avc: denied { write } for pid=11922 comm="syz.4.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 649.314178][ T24] usb 2-1: SerialNumber: syz [ 649.324238][ T24] usb 2-1: config 0 descriptor?? [ 649.329582][ T29] audit: type=1400 audit(1776335749.365:12613): avc: denied { prog_load } for pid=11922 comm="syz.4.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 649.351744][T11930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 649.361954][T11930] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 649.371525][ T29] audit: type=1400 audit(1776335749.365:12614): avc: denied { bpf } for pid=11922 comm="syz.4.1570" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 649.393473][ T24] usb 2-1: ucan: probing device on interface #0 [ 649.436997][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.441301][T11941] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.453128][ T29] audit: type=1400 audit(1776335749.365:12615): avc: denied { perfmon } for pid=11922 comm="syz.4.1570" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 649.666502][ T29] audit: type=1400 audit(1776335749.365:12616): avc: denied { prog_run } for pid=11922 comm="syz.4.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 649.873517][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 650.428661][ T5887] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 650.445085][ T24] usb 2-1: ucan: could not read protocol version, ret=-71 [ 650.455763][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 650.530323][ T24] usb 2-1: USB disconnect, device number 32 [ 650.632036][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 650.662430][ T5887] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 650.706523][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.729370][ T5887] usb 4-1: Product: syz [ 650.744500][ T5887] usb 4-1: Manufacturer: syz [ 650.764230][ T5887] usb 4-1: SerialNumber: syz [ 650.788297][ T5887] usb 4-1: config 0 descriptor?? [ 650.833786][ T5887] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 650.862906][ T5887] dvb-usb: bulk message failed: -22 (4/0) [ 650.882851][ T5887] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 650.920291][ T5887] dvb-usb: bulk message failed: -22 (5/0) [ 650.939485][ T5887] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 650.978962][ T5887] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 651.017290][ T5887] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 651.055218][ T5887] usb 4-1: media controller created [ 651.133977][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.286394][ T5887] usb 4-1: selecting invalid altsetting 3 [ 652.299153][ T5887] ttusb2: set interface to alts=3 failed [ 652.675220][T11969] overlayfs: missing 'workdir' [ 652.744979][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.142417][ T5887] DVB: Unable to find symbol tda10086_attach() [ 653.225598][ T5887] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 653.355351][ T5887] dvb-usb: bulk message failed: -22 (4/0) [ 653.451932][ T5887] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 653.624483][ T5887] dvb-usb: bulk message failed: -22 (5/0) [ 653.779464][ T5887] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 653.993845][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 653.993865][ T29] audit: type=1400 audit(1776335754.110:12762): avc: denied { write } for pid=11974 comm="syz.3.1583" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 654.065154][ T5887] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 654.098289][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.397405][ T5887] usb 4-1: USB disconnect, device number 58 [ 654.474697][ T29] audit: type=1400 audit(1776335754.175:12763): avc: denied { connect } for pid=11974 comm="syz.3.1583" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 654.579982][ T5887] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 654.612900][ T29] audit: type=1400 audit(1776335754.203:12764): avc: denied { write } for pid=11975 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 654.783501][ T29] audit: type=1400 audit(1776335754.213:12765): avc: denied { name_connect } for pid=11974 comm="syz.3.1583" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 655.327430][ T29] audit: type=1400 audit(1776335754.222:12766): avc: denied { setopt } for pid=11974 comm="syz.3.1583" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 655.377236][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.538465][ T29] audit: type=1400 audit(1776335754.250:12767): avc: denied { write } for pid=11975 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 655.561094][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.600350][T11992] syzkaller1: entered promiscuous mode [ 655.606415][T11992] syzkaller1: entered allmulticast mode [ 655.627527][T11992] netlink: 'syz.4.1586': attribute type 64 has an invalid length. [ 656.205441][T11997] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 657.120634][ T29] audit: type=1400 audit(1776335754.297:12768): avc: denied { bind } for pid=11975 comm="syz.2.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 657.160824][ T29] audit: type=1400 audit(1776335754.372:12769): avc: denied { allowed } for pid=11974 comm="syz.3.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 657.206763][ T29] audit: type=1400 audit(1776335754.484:12770): avc: denied { create } for pid=11974 comm="syz.3.1583" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 657.267698][ T29] audit: type=1400 audit(1776335754.521:12771): avc: denied { bpf } for pid=11974 comm="syz.3.1583" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 657.976114][ T1204] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 658.193805][ T1204] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 658.325760][ T1204] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 658.347407][ T1204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.368984][ T1204] usb 4-1: Product: syz [ 658.373864][ T1204] usb 4-1: Manufacturer: syz [ 658.378640][ T1204] usb 4-1: SerialNumber: syz [ 658.489412][ T1204] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 658.516474][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 658.783839][ T5909] usb 4-1: USB disconnect, device number 59 [ 659.370988][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 659.371005][ T29] audit: type=1400 audit(1776335759.144:12942): avc: denied { create } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.444157][ T29] audit: type=1400 audit(1776335759.144:12943): avc: denied { write } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.478756][ T29] audit: type=1400 audit(1776335759.172:12944): avc: denied { read } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.513128][ T29] audit: type=1400 audit(1776335759.172:12945): avc: denied { create } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.535426][ T29] audit: type=1400 audit(1776335759.172:12946): avc: denied { write } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.568066][ T29] audit: type=1400 audit(1776335759.191:12947): avc: denied { write } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.592189][ T29] audit: type=1400 audit(1776335759.191:12948): avc: denied { create } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.618384][ T29] audit: type=1400 audit(1776335759.191:12949): avc: denied { read } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.655185][ T29] audit: type=1400 audit(1776335759.191:12950): avc: denied { write } for pid=12025 comm="syz.4.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.676563][ T29] audit: type=1400 audit(1776335759.238:12951): avc: denied { ioctl } for pid=12025 comm="syz.4.1598" path="socket:[33364]" dev="sockfs" ino=33364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 659.703563][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 659.710596][ T24] ath9k_htc: Failed to initialize the device [ 659.717158][ T5909] usb 4-1: ath9k_htc: USB layer deinitialized [ 659.898009][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 660.078923][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 660.096290][ T10] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 660.120847][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.142200][ T10] usb 3-1: Product: syz [ 660.146432][ T10] usb 3-1: Manufacturer: syz [ 660.151005][ T10] usb 3-1: SerialNumber: syz [ 660.167237][ T10] usb 3-1: config 0 descriptor?? [ 660.187110][ T10] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 660.205415][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 660.214688][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 660.228956][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 660.234707][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 660.250699][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.260824][ T10] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 660.268845][ T10] usb 3-1: media controller created [ 660.280656][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.303396][ T5909] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 660.321788][ T10] usb 3-1: selecting invalid altsetting 3 [ 660.329306][ T10] ttusb2: set interface to alts=3 failed [ 660.395871][ T10] DVB: Unable to find symbol tda10086_attach() [ 660.403086][ T10] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 660.415540][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 660.424967][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 660.440136][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 660.449643][ T10] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 660.461205][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 660.476251][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 660.487647][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.515954][ T10] usb 3-1: USB disconnect, device number 51 [ 660.522762][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.535611][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 660.598841][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 660.610889][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.631235][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 660.679429][ T5909] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 660.696994][ T10] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 660.709473][ T5909] usb 2-1: Manufacturer: syz [ 660.726926][ T5909] usb 2-1: config 0 descriptor?? [ 661.072799][ T5909] rc_core: IR keymap rc-hauppauge not found [ 661.085468][ T5909] Registered IR keymap rc-empty [ 661.090942][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.126323][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.203434][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 661.227228][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 661.268671][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.301658][T12061] netlink: zone id is out of range [ 661.315355][T12061] netlink: zone id is out of range [ 661.341984][T12061] netlink: zone id is out of range [ 661.342826][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.373949][T12061] netlink: zone id is out of range [ 661.381484][T12061] netlink: zone id is out of range [ 661.391482][T12061] netlink: zone id is out of range [ 661.409681][T12061] netlink: zone id is out of range [ 661.425456][T12061] netlink: zone id is out of range [ 661.425599][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.448239][T12061] netlink: zone id is out of range [ 661.469012][T12061] netlink: zone id is out of range [ 661.511234][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.576903][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.660386][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.703444][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.713069][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 661.815725][T12069] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1613'. [ 661.833978][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 661.885767][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.603116][ T24] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 663.616890][ T5909] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 663.669500][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 663.679206][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.687826][ T24] usb 3-1: Product: syz [ 663.700725][ T24] usb 3-1: Manufacturer: syz [ 663.705359][ T24] usb 3-1: SerialNumber: syz [ 663.718955][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 663.737650][ T5887] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 663.778811][ T5909] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 663.844384][ T5909] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 663.997317][ T5909] usb 3-1: USB disconnect, device number 52 [ 664.148760][ T24] usb 2-1: USB disconnect, device number 33 [ 664.560860][T12075] vxcan1 speed is unknown, defaulting to 1000 [ 665.020899][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 665.020925][ T29] audit: type=1400 audit(1776335764.413:13186): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 665.118127][ T5887] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 665.290202][ T29] audit: type=1400 audit(1776335764.413:13187): avc: denied { open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 665.418668][ T5887] ath9k_htc: Failed to initialize the device [ 665.460194][ T5909] usb 3-1: ath9k_htc: USB layer deinitialized [ 665.507746][ T29] audit: type=1400 audit(1776335764.422:13188): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 665.644300][ T29] audit: type=1400 audit(1776335764.563:13189): avc: denied { mounton } for pid=12074 comm="syz.1.1615" path="/proc/1117/task" dev="proc" ino=33623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 665.760008][ T29] audit: type=1400 audit(1776335764.581:13190): avc: denied { mount } for pid=12074 comm="syz.1.1615" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 665.927762][T12075] lo speed is unknown, defaulting to 1000 [ 665.956722][ T29] audit: type=1400 audit(1776335764.722:13191): avc: denied { mounton } for pid=12077 comm="syz.3.1616" path="/322" dev="tmpfs" ino=1800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 665.979952][ T5909] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 666.041456][ T29] audit: type=1400 audit(1776335764.825:13192): avc: denied { create } for pid=12077 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 666.104709][ T29] audit: type=1400 audit(1776335764.834:13193): avc: denied { create } for pid=12077 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 666.153069][ T29] audit: type=1400 audit(1776335764.834:13194): avc: denied { write } for pid=12077 comm="syz.3.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 666.181037][ T29] audit: type=1400 audit(1776335764.834:13195): avc: denied { read } for pid=12077 comm="syz.3.1616" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 666.210744][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 666.222805][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 666.231351][ T5909] usb 3-1: config 0 has no interface number 0 [ 666.246651][ T5909] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 666.259010][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.289421][ T5909] usb 3-1: Product: syz [ 666.299369][ T5909] usb 3-1: Manufacturer: syz [ 666.310436][ T5909] usb 3-1: SerialNumber: syz [ 666.327565][ T5909] usb 3-1: config 0 descriptor?? [ 666.345517][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 666.352834][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 666.522538][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 666.531249][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 666.547792][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.768737][ T9] usb 4-1: Product: syz [ 666.773033][ T9] usb 4-1: Manufacturer: syz [ 666.779334][ T9] usb 4-1: SerialNumber: syz [ 667.132695][ T5909] gspca_spca1528: reg_w err -110 [ 667.157120][ T9] usb 4-1: config 0 descriptor?? [ 667.186580][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 667.196982][ T5909] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 667.221559][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 667.238695][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 667.260304][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 667.267908][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 667.405281][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 667.421078][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 667.431068][ T9] usb 4-1: media controller created [ 667.508919][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.592495][ T9] usb 4-1: selecting invalid altsetting 3 [ 667.598364][ T9] ttusb2: set interface to alts=3 failed [ 667.647096][ T9] DVB: Unable to find symbol tda10086_attach() [ 667.663469][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 667.773742][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 667.784007][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 667.795783][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 667.803471][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 667.814628][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 667.892126][ T9] usb 4-1: USB disconnect, device number 60 [ 668.029704][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 669.486109][ T5909] usb 3-1: USB disconnect, device number 53 [ 669.799955][T12118] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1628'. [ 670.059675][ T5909] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 670.312010][ T5909] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 670.407862][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 670.407887][ T29] audit: type=1400 audit(1776335769.476:13342): avc: denied { ioctl } for pid=12110 comm="syz.2.1627" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.686637][ T5909] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 670.798215][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.830425][ T29] audit: type=1400 audit(1776335769.550:13343): avc: denied { ioctl } for pid=12110 comm="syz.2.1627" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 670.916468][ T5909] usb 3-1: Product: syz [ 670.955206][ T5909] usb 3-1: Manufacturer: syz [ 671.036849][ T5909] usb 3-1: SerialNumber: syz [ 671.120105][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 671.191313][ T29] audit: type=1400 audit(1776335769.681:13344): avc: denied { read write } for pid=12116 comm="syz.1.1629" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 671.370059][ T5909] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 671.459887][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 671.527789][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.558184][ T29] audit: type=1400 audit(1776335769.691:13345): avc: denied { open } for pid=12116 comm="syz.1.1629" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 671.677776][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.722469][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 671.819162][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 671.879834][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 671.914820][ T29] audit: type=1400 audit(1776335770.018:13346): avc: denied { ioctl } for pid=12116 comm="syz.1.1629" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 671.961661][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.984529][ T5873] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 672.015655][ T9] usb 2-1: config 0 descriptor?? [ 672.088266][ T29] audit: type=1400 audit(1776335770.093:13347): avc: denied { ioctl } for pid=12116 comm="syz.1.1629" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.088275][T12122] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1630'. [ 672.088315][ T29] audit: type=1400 audit(1776335770.280:13348): avc: denied { ioctl } for pid=12116 comm="syz.1.1629" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.178136][T12122] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 672.208451][ T29] audit: type=1400 audit(1776335770.299:13349): avc: denied { ioctl } for pid=12110 comm="syz.2.1627" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.242927][T12122] 0ªX¹¦D: entered allmulticast mode [ 672.248243][T12122] veth0_macvtap: entered allmulticast mode [ 672.253205][ T10] usb 3-1: USB disconnect, device number 54 [ 672.255337][T12122] net_ratelimit: 476 callbacks suppressed [ 672.255363][T12122] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 672.283270][ T29] audit: type=1400 audit(1776335770.318:13350): avc: denied { ioctl } for pid=12110 comm="syz.2.1627" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.313879][ T29] audit: type=1400 audit(1776335770.374:13351): avc: denied { ioctl } for pid=12110 comm="syz.2.1627" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 672.455737][T12126] netlink: zone id is out of range [ 672.461008][T12126] netlink: zone id is out of range [ 672.467641][T12126] netlink: zone id is out of range [ 672.472848][T12126] netlink: zone id is out of range [ 672.480306][T12126] netlink: zone id is out of range [ 672.485970][T12126] netlink: zone id is out of range [ 672.491251][T12126] netlink: zone id is out of range [ 672.497604][T12126] netlink: zone id is out of range [ 672.503485][T12126] netlink: zone id is out of range [ 673.148195][ T5873] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 673.385051][T11726] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 673.488252][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 674.781008][ T5873] ath9k_htc: Failed to initialize the device [ 674.970675][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.120690][ T10] usb 3-1: ath9k_htc: USB layer deinitialized [ 675.127330][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.137846][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.144768][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.154006][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.161841][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.169744][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.176667][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.185847][ T9] apple 0003:05AC:024B.002E: unknown main item tag 0x0 [ 675.201847][ T9] apple 0003:05AC:024B.002E: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 675.218320][ T9] usb 2-1: USB disconnect, device number 34 [ 676.678479][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 676.678492][ T29] audit: type=1400 audit(1776335774.360:13451): avc: denied { execmem } for pid=12141 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 676.790877][T12144] fido_id[12144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 676.810595][ T29] audit: type=1400 audit(1776335774.651:13452): avc: denied { read } for pid=12141 comm="syz.3.1636" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 676.848482][ T29] audit: type=1400 audit(1776335774.651:13453): avc: denied { open } for pid=12141 comm="syz.3.1636" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 676.880310][ T29] audit: type=1400 audit(1776335774.267:13450): avc: denied { create } for pid=12142 comm="syz.2.1637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 676.997158][ T29] audit: type=1400 audit(1776335775.390:13454): avc: denied { read write } for pid=5800 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.085033][ T29] audit: type=1400 audit(1776335775.390:13455): avc: denied { open } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.128580][ T29] audit: type=1400 audit(1776335775.390:13456): avc: denied { ioctl } for pid=5800 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.295448][ T29] audit: type=1400 audit(1776335775.558:13457): avc: denied { read } for pid=12153 comm="syz.4.1639" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 677.333438][ T29] audit: type=1400 audit(1776335775.558:13458): avc: denied { open } for pid=12153 comm="syz.4.1639" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 677.580199][T12164] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 678.120383][ T29] audit: type=1400 audit(1776335775.558:13459): avc: denied { ioctl } for pid=12153 comm="syz.4.1639" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 678.337724][T12171] net_ratelimit: 648 callbacks suppressed [ 678.337746][T12171] netlink: zone id is out of range [ 678.380714][T12171] netlink: zone id is out of range [ 678.406297][T12171] netlink: zone id is out of range [ 678.427026][T12171] netlink: zone id is out of range [ 678.432261][T12171] netlink: zone id is out of range [ 678.462251][T12171] netlink: zone id is out of range [ 678.509116][T12171] netlink: zone id is out of range [ 678.520280][T12171] netlink: zone id is out of range [ 678.541515][T12171] netlink: zone id is out of range [ 678.662731][T12171] netlink: zone id is out of range [ 678.766965][T12180] overlayfs: failed to clone upperpath [ 682.305225][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 682.305246][ T29] audit: type=1400 audit(1776335780.518:13593): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 682.861210][ T29] audit: type=1400 audit(1776335781.033:13594): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927435][ T29] audit: type=1400 audit(1776335781.033:13595): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927479][ T29] audit: type=1400 audit(1776335781.033:13596): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927520][ T29] audit: type=1400 audit(1776335781.042:13597): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927559][ T29] audit: type=1400 audit(1776335781.042:13598): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927599][ T29] audit: type=1400 audit(1776335781.042:13599): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.927640][ T29] audit: type=1400 audit(1776335781.061:13600): avc: denied { create } for pid=12202 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 682.927679][ T29] audit: type=1400 audit(1776335781.070:13601): avc: denied { write } for pid=12202 comm="syz.3.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 682.927716][ T29] audit: type=1400 audit(1776335781.070:13602): avc: denied { read write } for pid=12202 comm="syz.3.1654" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.089294][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 683.122484][ T792] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 683.194186][T12209] xt_nfacct: accounting object `syz1' does not exist [ 683.267822][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 683.275357][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.289077][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 683.294812][ T9] usb 4-1: config 0 has no interface number 0 [ 683.344915][ T792] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 683.365384][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.381844][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 683.397049][ T792] usb 5-1: Product: syz [ 683.404615][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.416233][ T792] usb 5-1: Manufacturer: syz [ 683.429715][ T792] usb 5-1: SerialNumber: syz [ 683.435999][ T9] usb 4-1: Product: syz [ 683.451828][ T9] usb 4-1: Manufacturer: syz [ 683.460703][ T792] usb 5-1: config 0 descriptor?? [ 683.470936][ T9] usb 4-1: SerialNumber: syz [ 683.483859][ T792] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 683.497464][ T792] dvb-usb: bulk message failed: -22 (4/0) [ 683.506735][ T9] usb 4-1: config 0 descriptor?? [ 683.521778][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 683.532968][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 683.544426][ T792] dvb-usb: bulk message failed: -22 (5/0) [ 683.551474][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 683.593884][ T792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.606458][ T792] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 683.616717][ T792] usb 5-1: media controller created [ 683.644198][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 683.678550][ T792] usb 5-1: selecting invalid altsetting 3 [ 683.685654][ T792] ttusb2: set interface to alts=3 failed [ 683.927304][ T792] DVB: Unable to find symbol tda10086_attach() [ 683.935387][ T792] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 683.948799][ T792] dvb-usb: bulk message failed: -22 (4/0) [ 683.963012][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 683.991568][ T792] dvb-usb: bulk message failed: -22 (5/0) [ 684.003592][ T792] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 684.016990][ T792] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 684.158009][ T9] gspca_spca1528: reg_w err -110 [ 684.201953][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 684.423391][ T792] usb 5-1: USB disconnect, device number 40 [ 684.728976][ T792] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 684.940922][T12233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1662'. [ 685.115601][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 685.297219][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 685.385710][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.666235][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.727545][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.293684][ T792] usb 4-1: USB disconnect, device number 61 [ 686.638494][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.705286][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.749665][ T24] usb 2-1: config 0 descriptor?? [ 686.791171][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 687.426045][T12255] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 687.445114][ T5859] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 687.464968][T12255] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1669'. [ 687.529356][T12257] ubi31: detaching mtd0 [ 687.616994][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 687.652084][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.678490][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 687.678508][ T29] audit: type=1400 audit(1776335785.627:13790): avc: denied { read write } for pid=12260 comm="syz.4.1670" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.694283][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 687.716334][ T29] audit: type=1400 audit(1776335785.646:13791): avc: denied { open } for pid=12260 comm="syz.4.1670" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 687.848774][ T29] audit: type=1400 audit(1776335785.693:13792): avc: denied { execmem } for pid=12260 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 687.914248][ T5859] usb 4-1: config 0 has no interfaces? [ 688.039001][ T5859] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 688.102561][ T29] audit: type=1400 audit(1776335785.880:13793): avc: denied { allowed } for pid=12260 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 688.334269][T12257] ubi31: mtd0 is detached [ 688.378008][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.386413][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 688.404388][ T29] audit: type=1400 audit(1776335785.889:13794): avc: denied { create } for pid=12260 comm="syz.4.1670" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 688.428458][ T24] usb 2-1: USB disconnect, device number 35 [ 688.448140][ T5859] usb 4-1: config 0 descriptor?? [ 688.511366][ T29] audit: type=1400 audit(1776335786.283:13795): avc: denied { read } for pid=5470 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 688.553060][ T29] audit: type=1400 audit(1776335786.292:13796): avc: denied { search } for pid=5470 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.613575][ T29] audit: type=1400 audit(1776335786.292:13797): avc: denied { search } for pid=5470 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.763897][ T29] audit: type=1400 audit(1776335786.292:13798): avc: denied { search } for pid=5470 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.810071][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1671'. [ 688.819064][T12266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1671'. [ 688.843514][ T29] audit: type=1400 audit(1776335786.292:13799): avc: denied { read } for pid=5470 comm="dhcpcd" name="n110" dev="tmpfs" ino=7108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 689.122981][ T5859] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 689.172624][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 689.186689][T12252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.196351][T12252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.217381][ T1204] usb 4-1: USB disconnect, device number 62 [ 689.344386][ T5859] usb 2-1: device descriptor read/64, error -71 [ 689.658488][ T5859] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 689.817387][ T5859] usb 2-1: device descriptor read/64, error -71 [ 690.053547][ T5859] usb usb2-port1: attempt power cycle [ 690.518280][T12295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 690.779164][ T5859] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 690.823141][ T5859] usb 2-1: device descriptor read/8, error -71 [ 691.000246][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 691.036279][T12306] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 691.472999][ T5859] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 691.750875][ T24] usb 3-1: device descriptor read/64, error -71 [ 691.906600][ T5859] usb 2-1: device descriptor read/8, error -71 [ 692.031355][ T5859] usb usb2-port1: unable to enumerate USB device [ 692.131064][ T5872] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 692.200994][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 692.414280][ T24] usb 3-1: device descriptor read/64, error -71 [ 692.677764][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 692.758761][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 692.796327][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 692.849115][ T5872] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 692.870093][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.895378][ T24] usb usb3-port1: attempt power cycle [ 692.902183][ T5872] usb 4-1: Product: syz [ 692.939732][ T5872] usb 4-1: Manufacturer: syz [ 692.958300][ T5872] usb 4-1: SerialNumber: syz [ 692.992786][ T5872] usb 4-1: config 0 descriptor?? [ 693.084298][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 693.084315][ T29] audit: type=1400 audit(1776335790.690:14009): avc: denied { read write } for pid=5805 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.223238][ T29] audit: type=1400 audit(1776335790.718:14010): avc: denied { read write open } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.288740][ T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 693.305832][T12307] vxcan1 speed is unknown, defaulting to 1000 [ 693.436958][T12307] lo speed is unknown, defaulting to 1000 [ 693.554959][ T24] usb 3-1: device descriptor read/8, error -71 [ 693.606539][ T29] audit: type=1400 audit(1776335790.774:14011): avc: denied { ioctl } for pid=5805 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 693.640108][ T29] audit: type=1400 audit(1776335790.821:14012): avc: denied { ioctl } for pid=12297 comm="syz.2.1682" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.667862][ T29] audit: type=1400 audit(1776335790.933:14013): avc: denied { read } for pid=12294 comm="syz.3.1679" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 693.697661][ T29] audit: type=1400 audit(1776335790.933:14014): avc: denied { open } for pid=12294 comm="syz.3.1679" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 693.723946][ T29] audit: type=1400 audit(1776335790.943:14015): avc: denied { ioctl } for pid=12294 comm="syz.3.1679" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 693.777048][ T29] audit: type=1400 audit(1776335791.130:14016): avc: denied { ioctl } for pid=12297 comm="syz.2.1682" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 693.835402][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 693.887783][ T24] usb 3-1: device descriptor read/8, error -71 [ 693.912555][ T29] audit: type=1400 audit(1776335791.270:14017): avc: denied { ioctl } for pid=12297 comm="syz.2.1682" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 694.006634][ T24] usb usb3-port1: unable to enumerate USB device [ 694.071406][ T29] audit: type=1400 audit(1776335791.514:14018): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 694.183216][T12331] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 694.711678][ T24] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 694.926858][ T24] usb 3-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 694.938225][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 694.956091][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 694.968081][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 1464, setting to 64 [ 694.979800][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 695.344655][ T24] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 695.418403][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 695.477288][ T24] usb 3-1: Product: syz [ 695.522846][ T24] usb 3-1: Manufacturer: syz [ 695.542165][ T24] usb 3-1: SerialNumber: syz [ 695.633072][ T24] usb 3-1: config 0 descriptor?? [ 695.686487][T12338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 696.013880][ T24] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 696.067731][ T24] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 696.541691][ T5872] usb 4-1: USB disconnect, device number 63 [ 696.585907][T12338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.619646][T12338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.688162][ T24] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 696.789444][ T24] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 696.845319][ T24] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 696.863724][T12366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1697'. [ 696.935546][ T24] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 696.995258][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.001947][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.008701][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.015515][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.022240][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.028868][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.035619][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.042244][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.048853][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.055593][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.062204][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.068800][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.075428][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.082019][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.088666][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.095288][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.101943][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.108613][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.115210][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.121796][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.132833][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.139708][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.146363][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.152943][ T24] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 697.152999][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.161404][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.167865][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.174355][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.180837][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.187309][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.193816][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.200271][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.206834][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.213359][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.219819][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.226304][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.232806][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.239778][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.246321][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.252797][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.259429][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.265970][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.272557][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.279164][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.285675][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.292248][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.298903][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.305413][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.311985][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.318475][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.324979][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.331523][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.338033][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.344569][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.351474][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.357989][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.364486][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.370976][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.377502][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.383977][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.390443][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.400631][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.407140][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.413592][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.420121][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.426651][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.433160][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.439794][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.446310][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.452810][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.459643][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.466130][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.472613][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.479057][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.485547][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.492097][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.498561][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.505058][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.511565][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.518064][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.524560][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.531058][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.537567][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.544091][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.550595][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.557077][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.563533][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.570369][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.576880][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.583337][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.589829][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.596275][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.602747][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.609244][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.615699][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.622159][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.628597][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.635082][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.641587][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.648045][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.655018][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.661521][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.668011][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.674512][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.687707][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.694195][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.700654][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.707127][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.713572][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.720069][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.726541][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.732983][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.739521][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.745966][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.752444][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.758939][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.765409][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.771886][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.778333][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.784833][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.791602][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.798043][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.804502][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.811011][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.817500][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.824025][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.830569][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.837061][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.843552][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.849995][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.856485][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.862944][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.869448][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.875957][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.882417][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.888886][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.895376][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.902179][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.908712][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.915210][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.921771][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.928301][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.934838][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.941400][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.947886][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.954502][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.961030][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.967524][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.974052][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.980660][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.987231][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 697.993783][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.000306][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.007077][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.013672][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.020163][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.026639][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.033106][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.039597][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.046108][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.052586][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.059059][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.065505][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.072005][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.078551][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.084997][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.091471][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.097911][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.104392][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.110884][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.117685][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.124293][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.130882][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.137511][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.144105][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.150668][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.157250][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.163842][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.170457][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.177031][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.183622][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.190369][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.197020][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.203621][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.210404][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.217073][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.223844][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.230478][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.237065][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.243665][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.250249][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.256843][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.263421][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.270027][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.276704][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.283342][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.289937][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.296539][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.303129][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.309710][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.317784][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.324441][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.331112][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.337720][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.344326][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.350908][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.357518][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.364100][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.370689][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.377346][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.383944][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.390634][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.397231][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.403983][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.410660][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.417244][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.423828][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.430418][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.437119][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.443700][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.450621][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.458758][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.465405][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.471984][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.478604][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 698.487367][ T24] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 698.518314][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 698.518357][ T29] audit: type=1400 audit(1776335795.781:14144): avc: denied { read } for pid=12357 comm="syz.1.1696" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 698.798709][ T24] usb 3-1: USB disconnect, device number 59 [ 699.023467][ T29] audit: type=1400 audit(1776335795.781:14145): avc: denied { open } for pid=12357 comm="syz.1.1696" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 699.114256][ C1] ------------[ cut here ]------------ [ 699.121720][ C1] ODEBUG: free active (active state 0) object: ffff88805738c090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 699.134773][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.3.1698/12375 [ 699.144977][ C1] Modules linked in: [ 699.150534][ C1] CPU: 1 UID: 0 PID: 12375 Comm: syz.3.1698 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.161516][ C1] Tainted: [L]=SOFTLOCKUP [ 699.165822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.175891][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 699.181711][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 e0 e8 0b 41 56 48 8b 14 dd a0 81 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc 99 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 699.201505][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010246 [ 699.207576][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 699.215571][ C1] RDX: ffffffff8c1b80e0 RSI: ffffffff8c1b7d00 RDI: ffffffff90e5e2e0 [ 699.223550][ C1] RBP: 0000000000000001 R08: ffff88805738c090 R09: ffffffff8bb2b0e0 [ 699.231518][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b7d00 [ 699.239529][ C1] R13: ffffffff8bb2b120 R14: ffffffff8a7d6450 R15: ffffc90000a08b28 [ 699.247511][ C1] FS: 00007f03376c06c0(0000) GS:ffff888124406000(0000) knlGS:0000000000000000 [ 699.256465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.263063][ C1] CR2: 000020000000d030 CR3: 00000000344e7000 CR4: 00000000003526f0 [ 699.271045][ C1] Call Trace: [ 699.274335][ C1] [ 699.277194][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 699.282865][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 699.288703][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 699.294267][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 699.300446][ C1] ? mark_held_locks+0x40/0x70 [ 699.305207][ C1] ? kasan_quarantine_put+0x104/0x240 [ 699.310589][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 699.315792][ C1] ? rose_timer_expiry+0x53f/0x630 [ 699.320933][ C1] ? rose_timer_expiry+0x440/0x630 [ 699.326043][ C1] kfree+0x3d0/0x6c0 [ 699.329993][ C1] rose_timer_expiry+0x53f/0x630 [ 699.334927][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 699.340417][ C1] call_timer_fn+0x19a/0x640 [ 699.345016][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 699.350166][ C1] ? mark_held_locks+0x40/0x70 [ 699.354939][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 699.360417][ C1] __run_timers+0x75f/0xaf0 [ 699.364959][ C1] ? __pfx___run_timers+0x10/0x10 [ 699.370001][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 699.375081][ C1] run_timer_base+0x114/0x190 [ 699.379753][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 699.384987][ C1] run_timer_softirq+0x1a/0x50 [ 699.389752][ C1] handle_softirqs+0x1ea/0xa00 [ 699.394531][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 699.399809][ C1] ? _raw_spin_unlock+0x28/0x50 [ 699.404681][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 699.410333][ C1] __irq_exit_rcu+0x162/0x210 [ 699.415048][ C1] irq_exit_rcu+0x9/0x30 [ 699.419334][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 699.424981][ C1] [ 699.427901][ C1] [ 699.430817][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 699.436821][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 699.443253][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 57 4e f6 48 89 df e8 2e a7 4e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 98 3e f6 65 8b 05 2e 4f 7b 08 85 c0 74 16 5b [ 699.462901][ C1] RSP: 0018:ffffc9000ef3f838 EFLAGS: 00000246 [ 699.468979][ C1] RAX: 0000000000000002 RBX: ffff88803840fe00 RCX: 0000000000000040 [ 699.476981][ C1] RDX: 0000000000000000 RSI: ffffffff8df43ff3 RDI: ffffffff8c1b6fe0 [ 699.484991][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 699.493000][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803840fc90 [ 699.501026][ C1] R13: ffff88803840fe40 R14: ffff88803840f7e8 R15: ffff88806c1468c0 [ 699.509030][ C1] __unix_dgram_recvmsg+0x31a/0xc30 [ 699.514251][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 699.519993][ C1] ? __lock_acquire+0x4a5/0x2630 [ 699.524944][ C1] ? irqentry_exit+0x246/0x790 [ 699.529709][ C1] ? iovec_from_user+0xda/0x140 [ 699.534589][ C1] unix_dgram_recvmsg+0xcd/0x100 [ 699.539532][ C1] ____sys_recvmsg+0x5b3/0x640 [ 699.544328][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 699.549871][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 699.555183][ C1] ? rcu_is_watching+0x12/0xc0 [ 699.559947][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 699.564844][ C1] ? kfree+0x1dd/0x6c0 [ 699.568914][ C1] ? irqentry_exit+0x246/0x790 [ 699.573713][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 699.578419][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 699.583728][ C1] ? __pfx___might_resched+0x10/0x10 [ 699.589137][ C1] do_recvmmsg+0x301/0x760 [ 699.593577][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 699.598552][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 699.603784][ C1] ? __pfx___seccomp_filter+0x10/0x10 [ 699.609208][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 699.614263][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 699.619867][ C1] do_syscall_64+0x10b/0xf80 [ 699.624476][ C1] ? clear_bhb_loop+0x40/0x90 [ 699.629186][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.635068][ C1] RIP: 0033:0x7f033679c819 [ 699.639500][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.659119][ C1] RSP: 002b:00007f03376c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.667562][ C1] RAX: ffffffffffffffda RBX: 00007f0336a16090 RCX: 00007f033679c819 [ 699.675571][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 699.683557][ C1] RBP: 00007f0336832c91 R08: 0000000000000000 R09: 0000000000000000 [ 699.691559][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 699.699541][ C1] R13: 00007f0336a16128 R14: 00007f0336a16090 R15: 00007ffdf1d3dd08 [ 699.707543][ C1] [ 699.710555][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 699.717844][ C1] CPU: 1 UID: 0 PID: 12375 Comm: syz.3.1698 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.728770][ C1] Tainted: [L]=SOFTLOCKUP [ 699.733076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.743139][ C1] Call Trace: [ 699.746430][ C1] [ 699.749261][ C1] dump_stack_lvl+0x100/0x190 [ 699.753931][ C1] vpanic+0x552/0x970 [ 699.757909][ C1] ? __pfx_vpanic+0x10/0x10 [ 699.762410][ C1] panic+0xd1/0xe0 [ 699.766126][ C1] ? __pfx_panic+0x10/0x10 [ 699.770555][ C1] ? check_panic_on_warn+0x1f/0x90 [ 699.775658][ C1] check_panic_on_warn.cold+0x19/0x34 [ 699.781033][ C1] ? debug_print_object+0x18e/0x2a0 [ 699.786255][ C1] __warn.cold+0x191/0x328 [ 699.790669][ C1] __report_bug+0x296/0x3d0 [ 699.795167][ C1] ? debug_print_object+0x18e/0x2a0 [ 699.800379][ C1] ? __pfx___report_bug+0x10/0x10 [ 699.805426][ C1] ? rose_timer_expiry+0x537/0x630 [ 699.810557][ C1] ? stack_trace_save+0x8e/0xc0 [ 699.815429][ C1] report_bug_entry+0xe1/0x290 [ 699.820182][ C1] ? debug_print_object+0x19b/0x2a0 [ 699.825392][ C1] handle_bug+0x1cd/0x2a0 [ 699.829739][ C1] exc_invalid_op+0x17/0x50 [ 699.834265][ C1] asm_exc_invalid_op+0x1a/0x20 [ 699.839135][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 699.844968][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 02 e0 e8 0b 41 56 48 8b 14 dd a0 81 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 dc 99 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 699.864671][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010246 [ 699.870722][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 699.878684][ C1] RDX: ffffffff8c1b80e0 RSI: ffffffff8c1b7d00 RDI: ffffffff90e5e2e0 [ 699.886660][ C1] RBP: 0000000000000001 R08: ffff88805738c090 R09: ffffffff8bb2b0e0 [ 699.894622][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b7d00 [ 699.902598][ C1] R13: ffffffff8bb2b120 R14: ffffffff8a7d6450 R15: ffffc90000a08b28 [ 699.910603][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 699.916284][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 699.921937][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 699.927764][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 699.933314][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 699.939390][ C1] ? mark_held_locks+0x40/0x70 [ 699.944152][ C1] ? kasan_quarantine_put+0x104/0x240 [ 699.949608][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 699.954800][ C1] ? rose_timer_expiry+0x53f/0x630 [ 699.959907][ C1] ? rose_timer_expiry+0x440/0x630 [ 699.965033][ C1] kfree+0x3d0/0x6c0 [ 699.968935][ C1] rose_timer_expiry+0x53f/0x630 [ 699.973894][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 699.979345][ C1] call_timer_fn+0x19a/0x640 [ 699.983949][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 699.989063][ C1] ? mark_held_locks+0x40/0x70 [ 699.993841][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 699.999395][ C1] __run_timers+0x75f/0xaf0 [ 700.003891][ C1] ? __pfx___run_timers+0x10/0x10 [ 700.008906][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 700.013927][ C1] run_timer_base+0x114/0x190 [ 700.018599][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 700.023809][ C1] run_timer_softirq+0x1a/0x50 [ 700.028570][ C1] handle_softirqs+0x1ea/0xa00 [ 700.033341][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 700.038619][ C1] ? _raw_spin_unlock+0x28/0x50 [ 700.043463][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 700.049087][ C1] __irq_exit_rcu+0x162/0x210 [ 700.053765][ C1] irq_exit_rcu+0x9/0x30 [ 700.058018][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 700.063643][ C1] [ 700.066557][ C1] [ 700.069475][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 700.075456][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 700.081855][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 57 4e f6 48 89 df e8 2e a7 4e f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 98 3e f6 65 8b 05 2e 4f 7b 08 85 c0 74 16 5b [ 700.101462][ C1] RSP: 0018:ffffc9000ef3f838 EFLAGS: 00000246 [ 700.107515][ C1] RAX: 0000000000000002 RBX: ffff88803840fe00 RCX: 0000000000000040 [ 700.115494][ C1] RDX: 0000000000000000 RSI: ffffffff8df43ff3 RDI: ffffffff8c1b6fe0 [ 700.123456][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 700.131426][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88803840fc90 [ 700.139389][ C1] R13: ffff88803840fe40 R14: ffff88803840f7e8 R15: ffff88806c1468c0 [ 700.147360][ C1] __unix_dgram_recvmsg+0x31a/0xc30 [ 700.152573][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 700.158283][ C1] ? __lock_acquire+0x4a5/0x2630 [ 700.163212][ C1] ? irqentry_exit+0x246/0x790 [ 700.167972][ C1] ? iovec_from_user+0xda/0x140 [ 700.172825][ C1] unix_dgram_recvmsg+0xcd/0x100 [ 700.177780][ C1] ____sys_recvmsg+0x5b3/0x640 [ 700.182570][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 700.188136][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 700.193481][ C1] ? rcu_is_watching+0x12/0xc0 [ 700.198259][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 700.203116][ C1] ? kfree+0x1dd/0x6c0 [ 700.207175][ C1] ? irqentry_exit+0x246/0x790 [ 700.211936][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 700.216600][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 700.221793][ C1] ? __pfx___might_resched+0x10/0x10 [ 700.227071][ C1] do_recvmmsg+0x301/0x760 [ 700.231477][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 700.236399][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 700.241578][ C1] ? __pfx___seccomp_filter+0x10/0x10 [ 700.246944][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 700.251992][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 700.257535][ C1] do_syscall_64+0x10b/0xf80 [ 700.262139][ C1] ? clear_bhb_loop+0x40/0x90 [ 700.267149][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.273031][ C1] RIP: 0033:0x7f033679c819 [ 700.277499][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.297122][ C1] RSP: 002b:00007f03376c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.305534][ C1] RAX: ffffffffffffffda RBX: 00007f0336a16090 RCX: 00007f033679c819 [ 700.313494][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 700.321452][ C1] RBP: 00007f0336832c91 R08: 0000000000000000 R09: 0000000000000000 [ 700.329407][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 700.337383][ C1] R13: 00007f0336a16128 R14: 00007f0336a16090 R15: 00007ffdf1d3dd08 [ 700.345354][ C1] [ 700.348674][ C1] Kernel Offset: disabled [ 700.352993][ C1] Rebooting in 86400 seconds..