last executing test programs: 18m59.889901774s ago: executing program 1 (id=709): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x6, 0xb}}, './file0\x00'}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x480) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a01a9480000000004090000000000ddbc3abd41680f00"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 18m57.903255379s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 18m56.67368945s ago: executing program 1 (id=719): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f0000000040)=0x4000b16, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 18m52.754947049s ago: executing program 1 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1387400, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, 0x0) 18m50.898238868s ago: executing program 1 (id=730): getpid() (async) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = fsopen(&(0x7f0000001240)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) (async) accept4$rose(r0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18m50.534975471s ago: executing program 1 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000"], 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x714f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x15081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 18m49.058785678s ago: executing program 32 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000"], 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x714f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x15081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 15m53.741240195s ago: executing program 4 (id=1234): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xeae7, 0x1000, 0x6, 0x39a}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x84) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080), 0x200801, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000280)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x1400) unlink(&(0x7f0000000040)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r1, 0x2afd, 0x308b, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1, 0x0, 0x0, 0x24004000}, 0xc800) getpgrp(0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 15m52.308661563s ago: executing program 4 (id=1241): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) unshare(0x400) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newnexthop={0x1c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400a00c}, 0x4000080) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000007c0)=0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x8001, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x2, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = syz_clone(0x8240000, &(0x7f0000000280)="acd5294beba5ffe258eb6748cc5bd91eeefd", 0x12, &(0x7f0000000340), &(0x7f0000000800), &(0x7f0000000880)="8df6c815b9f8e17941b63f258330606249d4b56038f3d0f3946af9abf88cb74f13042a709d24de10c0c60147065abb1382bbfb554ea9c71366d24b82142140965e498677cb8738c380ad41d32cab360f") wait4(r6, 0x0, 0x20000000, &(0x7f0000000900)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 15m49.013664652s ago: executing program 4 (id=1248): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdff7000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x113140, 0x6d) socket$inet(0x2, 0x2, 0x1) syz_usb_connect$cdc_ecm(0x0, 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003020000ff2505a1a440000102030109027200010103000209040003020206f5ffc353faa89c3405240002000d240f010000000003000900dc1524120001a317a88b045e4f01a607c0ffcb7e392a205fd368c2418a8507240a0100070406241a25000105240101337524010256202415860009058202400003100009"], &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0xb7, 0x4, 0x9, 0x10, 0x4}, 0x38, &(0x7f0000000140)={0x5, 0xf, 0x38, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xfd, 0x2, 0x2, 0xf00, 0x4, [0xffbe3f, 0x30]}, @ss_container_id={0x14, 0x10, 0x4, 0xfa, "6e2e9b9426a5efa1a8eebc0c88542270"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x10, 0x5, 0xcda8, 0xb9}]}}) 15m44.775739479s ago: executing program 4 (id=1258): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x22000) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="1f0a7584ebf5955de85e425222ecb75fd82c7d9dc69734c2cf", 0x19}], 0x2, 0xa) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4000024", @ANYRES16=r3, @ANYBLOB="00042cbd7000fddbdf251f0000000700210062620000780022800c000080080002000d0000003400008008000600040000000800020000000100080005000400000008000500b90000000800010007000000080004000700000034000080080005000500000008000500040000000800020006000000080007000000008008000100010001000800070001000000050092000900000008009a0002000000400022803c0000800800050009000000080001001e3e000008000400e5a670870800060000000000080007000000000008000400030000000800050006000000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x0, 0x4000007}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x38, 0x2d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000003}, 0x200400d0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="2b390fd09382233f3a097c3d057b81123195ba678c93966748384bb2ef87316a1ff9c418637d4c4349a98341b0aca9be4834b885711b059ae0af41779a77cd2db181b69b839a3e4b669ec491cef537e016ff72d28cdaa9a69fda51015054a59016735f8f31639feeacfc675d81f160ad64c3980b0a0d52083a4360bba5d70aa31acd787d7e1ea1a4fb0dfc31fa", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008"], 0xd0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000010) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c821}, 0x4890) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 15m42.140990936s ago: executing program 4 (id=1264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8afb5086d04b3082a6d0000000409021200"], 0x0) close_range(r6, r7, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x325840, 0x115) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x4004}, 0x40040) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 15m35.97976208s ago: executing program 4 (id=1276): mkdir(&(0x7f0000000080)='./bus\x00', 0x51) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0xe) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0xf750, 0x10, 0x2, 0x26c}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200), 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000041c0)=ANY=[@ANYBLOB="3a6efef0317d6c847fd85586abeb5819f62844dd160ba40eea03dfc90a8c3184344e326aa17878fd107b6072bc9774ec1d74c5eb856ac55b4ba5cf66007ee19546e360e3268dd26dcf1b28c358c2390a568983d8720e2fb4f7c6dde27ae8840bac6a14348adcf6a62d561c7027d0def2e16add9b", @ANYRESOCT], 0xff2e) 15m19.728492722s ago: executing program 33 (id=1276): mkdir(&(0x7f0000000080)='./bus\x00', 0x51) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0xe) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0xf750, 0x10, 0x2, 0x26c}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r5, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r6, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200), 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000041c0)=ANY=[@ANYBLOB="3a6efef0317d6c847fd85586abeb5819f62844dd160ba40eea03dfc90a8c3184344e326aa17878fd107b6072bc9774ec1d74c5eb856ac55b4ba5cf66007ee19546e360e3268dd26dcf1b28c358c2390a568983d8720e2fb4f7c6dde27ae8840bac6a14348adcf6a62d561c7027d0def2e16add9b", @ANYRESOCT], 0xff2e) 15.093956242s ago: executing program 3 (id=3829): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2a140, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000004000000030000000c00000020000000af8e2aa20de01bb40e2355ee31ef4f231997d22a131f1440bd747948b4b22aa79fa24d4290f1e33d96932eba728e6f817c2c3deeac2a777cecdce5fdb000e331913f", @ANYRES32, @ANYBLOB="0600"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000000000000600"/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x9, 0x803, 0xb57) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed9, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="2b366ea21b8691c69f43bab9605ab2849c671284cc7081494b82092cea6bf837f3ec597654a009a86dc8a52cfc19bdabd3f9dd7bb75d1b89c9635265112964699a5e070b45451dc45d5b555e13dad708a1a9c3127928bf01d79ebc261f1eeaa6c69c44b2533eb79e06c100db306e8413c12e582d6e81169836dae394e0f10dda429e1fc1aa839ffe973f5ca4572bdb4a4d723bd396e6101dfeb82a06c05348f804abb384b2bf09358da2998abc52f08856db9f511778ffb0dbfc7117739fcb19f5206aab79f689ef0b8696592e26bbb35cf1019468bb702b47ee622baccbac7492505b31fef35516014cf1d142fad94347fac68d822ef3f163df98a7085944223a761ce305d491cd3d095b622bb925cb638e667d52864722ec00a3ebfbc7958ee1469aa2bebe460cdd2edc84876734ade2563116311e226d6f17db7d0d4f351b92218e9cd4b26b4638620e8d2ae231aa1aa8114bdabe7f9e645c16e87fa6c16a6b650475174d272caee83af8f6185786a374b98ce2887bd6391b7c771450f3b082a322d6d5090d1ee4a5c5a4ffd4d187f5005e40ef71d258355e2f76adce1ce5c801c7277a24a7d15ffbf6611f7028d3c854d769e4a736f050e858f5b91d59e2d11d80bb2928f7b3d6ca458c2ac11ca329ef182c26361d8f0f2c663058e4caea84797c23435d3eeedd2cb40f125257866f6c788a4b1bebd1bb02736109521d240f58744e55f844fc32eaad63b3736f435d848b0e4810d6f831dbeb24ba4fca2215c28b9bc936c819844b7d1b54f282f9706bc8e337905bd20532ecd4a719d60184123eb7cc20873d75bae763a808187f9f5ce24b81e5a42134ccf9b1a7286f5de0884a2cd26b851ee11e167642322b5dd17eead1e6989773afb7152563ee4f4a73fdea0e2cec31e99fdf487991d1fbc7a9601fda34f193d782360bd6cd633e6be5fc0ca3860c362fb48bbd435184d7be8f8c13414f39257e701b22167f0916ee6f0c072ba89b463cb250c489633e311b112a4aee3d3fc02d8eba5e267d389b5e4148b0c3afc535b5ce6bd1bd5c332e185cbf4c1309547b3da7083274635a4a5c3123f02b4a54507973558c30b4fada74ffaeaa8bc755a81ff8a30221037f8d6564c82f0404d2ffe17fc7341a4a750226131757f35639620f07e67629e70166144acc9cc6d68ca65d1ff7032fce805c1efc4aa0c1e6c012ea1c0d61efbced2a52f6bc3fe71f12b3e12b8f2e246acdf4d2eb47059cb31a8d721e850a113ed8c00da36b20a88f2da574a18b3c9c8c979c31a1a4131b2c4e59a0017a5c56c8c6ed8ee938fdf48ca037cb3990c336b9ff0e5814f648e66205aa9a8cca733cea12ee422393022a8e7666d466ab13182ed790ba632998e9b323727f582fc8d9d957efb3bf340120f74b5ea4d3535e5efb4fbf915ea089a034811e6a14fee27f8c7819f61924e6c638b125db399d6951e58b2e12b1098dd5d28045a062cb4b464e0dddac917f6ad3b4bf097fea3e302ce21f22b7547cf5553b22610f0ee5f78dfe1560869f903b9b5195273f3bbcf6887c3f88d680c357e7e1c15d625f92590d81eca46b777098f5b92abc44d5ca7115622c3088d782cb88f7f60be4bc16b4e87434ef0a9576e2cfd37b3411bd9ba15f04c0d131786b4f5738eb00aaa78e60e3b563992044e05cdf3cb48ccf5ae8de045ee0468deacb847eda31c16b9732426a5f295cefe15e231b51e8248cb9a241b56f156fc0c10d64e8c325ea158b7cd077067e2104b74e37c5d6e40d125ea0a859aad51e9914de0f36118a22e0dbde2a2cc239bba58d6b4410ad6bb1d2f5d14233046336a8832c6536ff5d2f96f65bb4e85bfc7a9e1fb834357119bdf7f02654af857f28efd7db6ea71275ed973a4964ae647e7e6400053fa51b71d82f7ae0a353c02d2dbd46eca445efccd3cf486e3159e3c79bb9fa71eea13c313bd1b7ebc30d075c60a41a21fc604b6249b4e8d8eb7495f09195500687cf5af7d88aacf130fe5e765b0321ed6a3908358b3bf834c588606bd51bfd143125e4df481fa1aabd2e631281956ae4a1429f4f9ea9dcbcd79bf288333c4a2ab2a4918d13edfbc656ac3753fc4737e7fbd735de5a4211c4b3808e2f22132ce1b6f416689a8ba1c7185c0ea2b0c3a8ca6a641430850e8dbbf7711f986307d112d39cd648565b719e15e32bd192cf9bd651a71657063d9d690e2c45f3a65a3b8557f4ad653196410a73e2c0ecb6dec7b8a1e859e3991627b9ff2d067433e823d8fc66f3701ac0ea98a760fd240fdd0589a5742739dbec2e5d602fccd92446e12db2dcf615a80c6db1c016e512da4cc38747c12281d29d9c0232111ae508f12485f5b01f54e234f21805cd94b7a7e511455cc3f2bb06e770a37e2f13bffdfb935c88bbcf3075c7f8eebd41c7e84156de54fc13e74141a8b2fab73f1a087df90602da5b6d5c9374734dd23ac723100abf15b3a99a9c72d004afafcbe1265d91be1ab6cf5269ef18deb223b84160609a7f7b39eedf1613411a01aacdbfa8c2f4a304aaa618a0ffe0f66bc0555166254ed35690adcd98b4ee8db409740c87c0742ebff1a28f3ae4bfe0df1f7d41b5b367689f6e1b1a977bbd1211817a61e1f06d2cff7e78cd66f6f8b7cf12aa03250d48c6330f0df11551f59f14c56a9ab8c99d48499952dfd80cd1bd709064930381a7734763b23925ab9e68219a1c1260b0f904f7bcb8dae079c3c4f1b1b79143d4dfcd922c07250ceb1c7d57c66a4b131ca7ea50ea7734caeb81c814f73f5c417c43e737a17888a2ffbd352948a10963a23cc8ccf538452212f9947507bf9b7bac981a026325beb6117c4c5fc1672b58b8611046e50ea173271ec235ae0e413d2a7f7f2953be04dea5e74ca43a8423167b5dafb1a11dce2836b4ecd8300edf413e2cd945474af5b74adb9cce06b2de85a2707985fa223be185afb5e46140c808cff75c29962781ea7cf583945fadac63c8e0491e938484b5231d852a6d901c11a59938966492a8527583b3ae403243672ddf5a9acfe5564770c393b4f7f03b2d88657399f0b0aae516a93bcb9cd557395dbd2ccb3c10186bbbeca9dc045a08c83e78b2a6df169c74f6a17cc41fb82bc52bf8b8c9f8207840cdd5b524b7c38e5bf021318fc512b00fb619de2844c31881875d709a13988d30ae6c6ff63f2eb3e3af65c30f8e17ba17c0affbc68722a4a46cd01d0fb3827aa0ea0394512d561fd23dc9a76c09d7c9a85a98c24064c2cd3e38bddc08e522ee79a59dd609e6026d646d5ab2abc4885f0fd0e8afa3174a165d3a442fb4a0b4a6892bbd286f08cdd5ef8f62852d2f94bfaeb28a5f64af4367269a8e1212f8e99070025ba7a74ca00d0dfe475c820d739b97f63d1e2ff72d38df06489de23d7d33a7326bee7303929869b60035ea489d7d0a36fe779d290478fca1b624653c80ea8ea5f6885a48de8b0ba1c65c9ae656a89329cdfd2b57653cf9366a78301ead7c926cae708e6f22de390df22bc7d7ea35ca356cea7a8f517c58f8396bcbe2a4eabce1748a6e8dd7c69a28fba5d34c4dbd39cf178d0912518e64ddb45d80c868f734da85a0ad7d196578833a634a17d98e65bd685b5abb79693b7a271a91e33ea2b52923acb980c10349821ff57e806ec5ee37dbc61faaef6510a13527a7e409ab7109645db662b3c5c3f5554792da5f6bb705781dead633258e50a0a86a3bd008e6cd74bf0e73f18091a519b765d1fdc736584e00e22b6fb7896aadf8fd9fdb9cd14be3154e3ed76e760cdf8de52d32347d82cf3af426e2183bd92f86300c837e03baebe2d8ddf10d48f4fddfbb8cbd6a6783288be808f54253ebeae4f01e6a0bcbb1aef86bbc7476e1926e00ddc3c7fff1151f5cb1c0b2890b19678cfaad2d32a58dc921e26aca7e04bd6bd35b7b8c8a01661c402744e511245754c6e1e464b9792579f491641b1accdd8f5b3d9664ddeed5564ac066a9de91703c035c6a90195b3b728c121e4ad45a5dacb7dfa3944e58cf084cf07d98428ba7f2ba09160e9e745aa6d1064e5ed215766545b5bf9f216c21042be5d9065732931365fa15540056bb9ac94a40f5066357f70db2420479637f8fb524d0402fb84f82229c88c0766cd42f58e6e598d424e31d59bd86feeb6cb9fa862d995534a9bb3c932e99d3bc603bab3e43c2fbd1a79d5f5db5c5cb32308e1a50921b4517a7d60610d8a41d2e6cc22bcfd8891502409b476cf264ba020209cfdef098f5537d2a30513e5af66e325d03936044581c400c4f51d4972a3768a305664ae6e3c620bae2d00fdc651b2ff7ef768905d0f0b2eab4efad378df8e34623a54bf7a114503755c07aea13f7499c46e5b9e244e3eb839c04db469f5a4ec825ec1b649ba2cc93c87799848e512fcd5976d9c844326b864cc60656d4486e8be7b0e357dcc2afcad3e60d1eb7d4fbf1c2b2a9fe3e7fdb6cf65e7cd4a4b9bdbe16f585c4a930818a7289f1f0e4baa2862b4935e6d38ab1d84400a30a4daead479a4e03d54ba8755a0ac43dc63170f4d117b1e9e15f182afe02cf6e8d058bc2d859951577e889224846c99886cdb2ffa44d28c3839cd7bdc18d6ce2d56b5386bbc20efb47409f6dee94450cce008b4de51e1e1cc7076c5f5cb7157e718f73f10297f8b9425c93f56f927f5e58162ef25386dd443bf32bba1e9a9d5ccd46cc9f5883d77f7e4724dc9dcfa40d184358a9913f8f61bf6d83a6bf38338341ea050c69f8f8a66c6c4ffc520f96b1087845e718e90757e6e3a05f386624f3260f8fb74c0d80bbbeda688abf4d2eab6b104d6ee87f7915ff72a9a03f26117c72fba5a9523c821852dccfef187052c80ded00f42f4b2914cf99038e2e42522d853e3d89aad21cc6ce295f31a4934d17b2a9c1095419a19c61a8611edb9fc084dde79e91f9fdfd8aef3892ab3e63fde4c28d5b465da2a3d60a7d4be11955f90c9dff30318f5a72f803b255263fe32af4a34cd828b514a9f3931c65828a4751cb0aba6d45486b4cb871fcb0279cf0e5af522df0af9c41dbbbb514043154cc47442a8a46bc0ca418f98a529b01c12e72417afbb38fca285b60948188bf2409c209c81a4561796f2f285712ebadd610768d79af1d6210fc593cfe88ac5c4ca4e42edb40e0e9ec7e33ee3aad035a4108760058413e87a6c396868bae8d533eaefa653864f394918dca70b613c3e1f5ffa0fc906a4441f038f5655c36c7538c1c4b9968673cc81a1c678eaf71659756a5dbd6bcd76e0be321ace50a0194e57e6a99a4ebfa184df004fdf97924572bf2c1adde3bb1e39054aca6fcc96e14fea29cdfd2887b4b1a5d522768803bffd654a347e9f157a1b75dd88f58cc8d642d6b4087354251fa20c304177e3f3c92bf8d4f8518fd7baf3f5dfa542d178927ae2a6b5e73b4ddf0c808325652a33f364c771e65cd11dd8aeb0a34679b95610f5c8f2d1148adcd826e52d923a3a134ef77546915910953682b80988cf62fc3724864eb8fe71deda120fa09b69b99927e1ceecb033c450a323470cac36fe2656721f5de65444725e0970a7e4215ceb08b2a23e3bc13a9910e85d321ef89de3aba82192983e2e69577ae3ae8de62d1ac331a6323cd5411ae4f55b122734d714fd19dfe7a9901e64b8eba1864dd6abf738b5432ac1505b5396800cc6a19fc6b23c49752033e20d9e05b36ccd6c4f9d8995e2c6ff565ecc088707a658767f70184c92d18a6d0cd282ee04c8a799f5d822bbf08c1b95739de045a4e3964a07926a05b6d5e4ed363009b0da93c5a844466a935651128"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r5, &(0x7f0000000340)) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x6, 0x8, 0x108, 0xa6, 0x7ff, [0xd2e0, 0x1, 0x8, 0x4]}) socket$inet_tcp(0x2, 0x1, 0x0) 14.24832666s ago: executing program 6 (id=3831): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014935d1071040c03e9ba010203010902120001000000"], 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x714f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x15081}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 13.728002261s ago: executing program 3 (id=3832): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000007c0)=@riscv64_sbi_fwft={0x4b1a1487b4979cee, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 13.422846385s ago: executing program 2 (id=3833): r0 = socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x46, 0x0, 0x4}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x20201) socket$inet_tcp(0x2, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001ed) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x380, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}, {0x368, 0x1, [@m_ct={0x138, 0x4, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "beb3ed967dedf11d4d190b84bedcf8a7"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0xd7, 0x6, "3cf82dcb294a2aa336232744d395709c9e352919fe48921331b8eb6a89c598a57bdf91a3b9c4ebb7af265326ddec9b0cd8fd596b7fd5009b67b3e96eb5529e3ef9cf1d67409fc361bd56d85e43b1672f32ea34be74cae0463871973839cbf9ec78d7b861a19559602fd790f35db688143a81be73f1af310112deeb237639d26ed2655f0a19736864450a6a80e93d7b1225bb3110d293cf0f69f5a4a9021411b2853f6abeb27ce397aa099d4892d24a24c46b1117733a8c4e120e161d05bdf19cd38d9955fbe5af8762cfa0cc86857c9117e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x138, 0x2, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x64d90}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xb, 0x7, 0x0, 0x8}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41ef7}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x1ad6, 0x6, 0x9, 0x7}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3e573}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x91, 0x6, "9cf61641917639e77042d78ab454ee083344260ecb7e6d247d8d443cb482a57bcaab6ad554b6e4a5fc331909747b1eedf5e2ec57d0b229df3b96c6482f91e53bd99f9b513c41c8bc1016f05bbab3504d3ebca5a273def5d1b12fc3942c042642b7733ea8c692bac3a121625dd9c04b206142c5d94632171c6e16d31751ca23da0612568642f57c631e8642d3ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mirred={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x7, 0x5e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x1, 0x1, 0xfffffffd, 0x587}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0xffffffffffffffff, 0xffff, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x2, 0x2}, 0x1}}]}, {0x46, 0x6, "c6a10ec6481da4c42e39c6818dcd96f5b930db99d522e9f643f6a88250baabefec05595b8a1d969dffdf23fa3a4d1cac3b82c5213dee550999ee506f397cef7c22ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x380}}, 0x0) fallocate(0xffffffffffffffff, 0x3, 0xf00, 0x10000) socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000"], 0x10}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000480)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4) 12.262802266s ago: executing program 2 (id=3834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) open_tree(r4, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xeeee0000, 0x1000, 0x9, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x45, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3c}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x7}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x8, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x41000, [0x80000001, 0x0, 0x1, 0xfffffffffffffffe]}) 10.710859639s ago: executing program 2 (id=3837): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.023317814s ago: executing program 3 (id=3839): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000001010400000000000000000a000000c18c6d80c076da46ab96222b79e0dd9ef12c44559bd66fa587b8fd74569f0f7717d84838da4117f2d0110f9bf537172d82f02b56327feb7b4304a79dfab5e33e36d6b9429d9fa3830be8fb2f3a4bef7a7164b2fc117a4029a166fc614cb3da9d08c815233dd02c57c9799693d5f8560150a0a0c0dffa995232a2e7e2daabf41945f73c1bbea60708ffec4abc9cfa44f051c86493cbdad707b02f443f4695cc86380579131a8e27525e9d0650d6c4bf1b8dcce13a28e47708"], 0x14}}, 0x20000880) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0xda44, 0x8725, 0x9, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0xc, 0x40000, 0xa, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) 7.946479424s ago: executing program 3 (id=3841): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) 7.902330893s ago: executing program 6 (id=3842): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) syz_emit_ethernet(0x283, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x24d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xe, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r8 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 7.811749736s ago: executing program 5 (id=3843): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000001010400000000000000000a000000c18c6d80c076da46ab96222b79e0dd9ef12c44559bd66fa587b8fd74569f0f7717d84838da4117f2d0110f9bf537172d82f02b56327feb7b4304a79dfab5e33e36d6b9429d9fa3830be8fb2f3a4bef7a7164b2fc117a4029a166fc614cb3da9d08c815233dd02c57c9799693d5f8560150a0a0c0dffa995232a2e7e2daabf41945f73c1bbea60708ffec4abc9cfa44f051c86493cbdad707b02f443f4695cc86380579131a8e27525e9d0650d6c4bf1b8dcce13a28e47708"], 0x14}}, 0x20000880) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0xda44, 0x8725, 0x9, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa042, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0xc, 0x40000, 0xa, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) 6.822135108s ago: executing program 5 (id=3844): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000100000144000500200106"], 0xf8}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000006c0)={0x14, 0xf, 0xa, 0x201, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000193c0)={0x100, r1, 0x80000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f00000000000000000700", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019340)={0xffffffffffffffff, 0x2000012, 0x13, 0xe, &(0x7f0000019440)="ec700000005e131978ec72e42205b44909008daffbffc4e932ab070f4bf5024c50ac6d42a8c738a11a81221d5fd452052a0286ffdb806a963502dbc63dc45f5f49ad4c6ea38e0c9138ac", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x50) 6.715569651s ago: executing program 6 (id=3845): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000000e3c11f8ac7"], 0x26}}, 0x0) 6.619028664s ago: executing program 2 (id=3846): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) syz_usb_connect(0x0, 0x17e, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) 5.86543827s ago: executing program 6 (id=3847): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000300)="3b0ed96741dddce8bfddb4f4513d00c473344244be50d448b252dd4810d2a97aba69ba3b8109f5271d4814a49afa21c582862ccda8a3880b1f6465cf4e55916b6d48dde12635b287c46449093bb6c5173cc35e6fb9bfc91b18757a2c62fad30d3616f2123a51210b01d529c50d86be619a8e19c8d056181029165191899b2eda1792b011177fa2d9c0bf37847be828614fe565d423bc537469f68061a6b3832b52b6c444f320d8c1", 0xa8, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={0x0, r4, r5, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0x5e58, 0x83}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.439246243s ago: executing program 0 (id=3848): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) syz_emit_ethernet(0x2f6, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2c0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r8 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 5.423297971s ago: executing program 5 (id=3849): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) close(r1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) 4.291396575s ago: executing program 0 (id=3850): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c1302807813"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001200010a00000000000000000a000000e3c11f8ac7"], 0x26}}, 0x0) 4.258383084s ago: executing program 6 (id=3851): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)='h', 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f00000000c0)={0x101, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r8, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 3.907818065s ago: executing program 5 (id=3852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x40, 0x0) unshare(0x2c020400) open_tree(r4, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.699584429s ago: executing program 0 (id=3853): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000001010400000000000000000a000000c18c6d80c076da46ab96222b79e0dd9ef12c44559bd66fa587b8fd74569f0f7717d84838da4117f2d0110f9bf537172d82f02b56327feb7b4304a79dfab5e33e36d6b9429d9fa3830be8fb2f3a4bef7a7164b2fc117a4029a166fc614cb3da9d08c815233dd02c57c9799693d5f8560150a0a0c0dffa995232a2e7e2daabf41945f73c1bbea60708ffec4abc9cfa44f051c86493cbdad707b02f443f4695cc86380579131a8e27525e9d0650d6c4bf1b8dcce13a28e47708"], 0x14}}, 0x20000880) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0xda44, 0x8725, 0x9, 0x100}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x84e1, 0x2f, 0x2006, 0x6, 0x8, 0x80ffa, 0x0, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0x32, 0x7ffffffd, 0x1ff, 0x9ea, 0xc, 0x40000, 0xa, 0x7, 0x746f, 0x48, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) 2.469801605s ago: executing program 5 (id=3854): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000300)="3b0ed96741dddce8bfddb4f4513d00c473344244be50d448b252dd4810d2a97aba69ba3b8109f5271d4814a49afa21c582862ccda8a3880b1f6465cf4e55916b6d48dde12635b287c46449093bb6c5173cc35e6fb9bfc91b18757a2c62fad30d3616f2123a51210b01d529c50d86be619a8e19c8d056181029165191899b2eda1792b011177fa2d9c0bf37847be828614fe565d423bc537469f68061a6b3832b52b6c444f320d8c1", 0xa8, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={0x0, r4, r5, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0x5e58, 0x83}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 2.265989502s ago: executing program 0 (id=3855): socket$nl_route(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000004000000030000000c00000020000000af8e2aa20de01bb40e2355ee31ef4f231997d22a131f1440bd747948b4b22aa79fa24d4290f1e33d9693", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000000000006"], 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) r2 = socket(0x9, 0x803, 0xb57) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed9, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r4, &(0x7f0000000340)) 1.991208106s ago: executing program 3 (id=3856): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6, 0x2000}}, 0x1c}}, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x3, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x9, 0x7}, {0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001f6c0)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.964403263s ago: executing program 6 (id=3857): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = memfd_secret(0x80000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, 0x0, 0x4000891) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x3) ftruncate(r4, 0x51a9497) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000040)=0x9, 0x4) sched_setscheduler(0x0, 0x5, 0x0) 1.963603219s ago: executing program 2 (id=3858): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) getgroups(0x3, &(0x7f0000000180)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) rmdir(0x0) setgroups(0x1, &(0x7f00000002c0)=[r3]) 1.438394059s ago: executing program 2 (id=3859): r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1ff, 0xe}, &(0x7f0000000300)=0x90) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5c}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x94, @empty}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0xc0, 0x0, 0x0, 0x800003, 0x60000, 0x0, 0x800, 0x7, 0x0}) close(r1) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) 1.240359281s ago: executing program 0 (id=3860): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) syz_emit_ethernet(0x2f6, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x2c0, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) r8 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x8, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 415.181496ms ago: executing program 5 (id=3861): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 992.301µs ago: executing program 0 (id=3862): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2a140, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000004000000030000000c00000020000000af8e2aa20de01bb40e2355ee31ef4f231997d22a131f1440bd747948b4b22aa79fa24d4290f1e33d96932eba728e6f817c2c3deeac2a777cecdce5fdb000e331913f40b0e10c", @ANYRES32, @ANYBLOB="0600"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000000000000000600"/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x9, 0x803, 0xb57) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed9, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r5, &(0x7f0000000340)) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x6, 0x8, 0x108, 0xa6, 0x7ff, [0xd2e0, 0x1, 0x8, 0x4]}) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 3 (id=3863): r0 = socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x46, 0x0, 0x4}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x20201) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r5, 0x0, 0x0, 0x1001ed) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x380, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x4}, {0x368, 0x1, [@m_ct={0x138, 0x4, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_LABELS_MASK={0x14, 0x8, "beb3ed967dedf11d4d190b84bedcf8a7"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2}]}, {0xd7, 0x6, "3cf82dcb294a2aa336232744d395709c9e352919fe48921331b8eb6a89c598a57bdf91a3b9c4ebb7af265326ddec9b0cd8fd596b7fd5009b67b3e96eb5529e3ef9cf1d67409fc361bd56d85e43b1672f32ea34be74cae0463871973839cbf9ec78d7b861a19559602fd790f35db688143a81be73f1af310112deeb237639d26ed2655f0a19736864450a6a80e93d7b1225bb3110d293cf0f69f5a4a9021411b2853f6abeb27ce397aa099d4892d24a24c46b1117733a8c4e120e161d05bdf19cd38d9955fbe5af8762cfa0cc86857c9117e626"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x138, 0x2, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x64d90}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0xb, 0x7, 0x0, 0x8}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x41ef7}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0x1ad6, 0x6, 0x9, 0x7}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3e573}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x91, 0x6, "9cf61641917639e77042d78ab454ee083344260ecb7e6d247d8d443cb482a57bcaab6ad554b6e4a5fc331909747b1eedf5e2ec57d0b229df3b96c6482f91e53bd99f9b513c41c8bc1016f05bbab3504d3ebca5a273def5d1b12fc3942c042642b7733ea8c692bac3a121625dd9c04b206142c5d94632171c6e16d31751ca23da0612568642f57c631e8642d3ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_mirred={0xf4, 0x17, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x7, 0x5e}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7c, 0x1, 0x1, 0xfffffffd, 0x587}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0xffffffffffffffff, 0xffff, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x0, 0x2, 0x2}, 0x1}}]}, {0x46, 0x6, "c6a10ec6481da4c42e39c6818dcd96f5b930db99d522e9f643f6a88250baabefec05595b8a1d969dffdf23fa3a4d1cac3b82c5213dee550999ee506f397cef7c22ac"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x380}}, 0x0) fallocate(r5, 0x3, 0xf00, 0x10000) socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000"], 0x10}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000480)) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48081}, 0x4) kernel console output (not intermixed with test programs): 2] usb 4-1: USB disconnect, device number 90 [ 1274.041933][T20731] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1274.522674][T20731] usb 6-1: Using ep0 maxpacket: 8 [ 1274.594908][T20731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1274.636545][T20731] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1274.993335][T20731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.026457][T20731] usb 6-1: config 0 descriptor?? [ 1275.452796][T21404] comedi comedi0: Minor 2147483647 is invalid! [ 1275.958457][T20731] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1276.101961][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 1276.101981][ T29] audit: type=1400 audit(2000001064.991:31533): avc: denied { ioctl } for pid=21405 comm="syz.6.3447" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1276.312752][ T29] audit: type=1400 audit(2000001065.122:31534): avc: denied { read write } for pid=12443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1276.415063][ T29] audit: type=1400 audit(2000001065.122:31535): avc: denied { open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1277.467518][ T792] usb 6-1: USB disconnect, device number 70 [ 1277.516251][ T29] audit: type=1400 audit(2000001065.122:31536): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1277.596933][ T29] audit: type=1400 audit(2000001065.196:31537): avc: denied { read } for pid=21408 comm="syz.6.3449" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1277.628625][ T29] audit: type=1400 audit(2000001065.196:31538): avc: denied { open } for pid=21408 comm="syz.6.3449" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1278.366621][T21421] xt_CT: No such helper "snmp_trap" [ 1278.639728][ T29] audit: type=1400 audit(2000001065.215:31539): avc: denied { create } for pid=21410 comm="syz.0.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1278.798823][ T29] audit: type=1400 audit(2000001065.215:31540): avc: denied { read } for pid=21408 comm="syz.6.3449" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1278.886852][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1278.947514][ T29] audit: type=1400 audit(2000001065.215:31541): avc: denied { open } for pid=21408 comm="syz.6.3449" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1278.984171][T21427] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 1279.075834][ T29] audit: type=1400 audit(2000001065.215:31542): avc: denied { write } for pid=21410 comm="syz.0.3448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1279.124465][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1279.148940][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.400311][ T24] usb 4-1: config 0 descriptor?? [ 1279.460039][ T24] cp210x 4-1:0.0: cp210x converter detected [ 1279.725712][ T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1279.755157][ T24] cp210x 4-1:0.0: querying part number failed [ 1279.778246][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1279.854045][ T24] usb 4-1: USB disconnect, device number 91 [ 1279.911726][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1279.919897][ T24] cp210x 4-1:0.0: device disconnected [ 1280.182687][T21437] siw: device registration error -23 [ 1281.527685][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1281.527701][ T29] audit: type=1400 audit(2000001070.098:31680): avc: denied { read write } for pid=12443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.743743][ T29] audit: type=1400 audit(2000001070.126:31681): avc: denied { read write open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1281.833751][ T29] audit: type=1400 audit(2000001070.135:31682): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1282.220076][ T29] audit: type=1400 audit(2000001070.257:31683): avc: denied { create } for pid=21451 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1282.546685][ T29] audit: type=1400 audit(2000001070.257:31684): avc: denied { write } for pid=21451 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1283.194388][ T29] audit: type=1400 audit(2000001070.257:31685): avc: denied { read } for pid=21451 comm="syz.0.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1283.216868][ T29] audit: type=1400 audit(2000001070.285:31686): avc: denied { read } for pid=21453 comm="syz.6.3459" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1283.357156][ T29] audit: type=1400 audit(2000001070.285:31687): avc: denied { read open } for pid=21453 comm="syz.6.3459" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1283.400186][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.428101][ T29] audit: type=1400 audit(2000001070.322:31688): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1284.880263][ T29] audit: type=1400 audit(2000001070.322:31689): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1285.599728][T18519] Bluetooth: hci1: command 0x0406 tx timeout [ 1285.734043][T21491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21491 comm=syz.6.3466 [ 1285.771296][T21491] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1285.802039][T21491] PKCS7: Only support pkcs7_signedData type [ 1285.845371][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3466'. [ 1285.854771][T21491] netlink: 'syz.6.3466': attribute type 3 has an invalid length. [ 1286.923276][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 1286.929995][T20731] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1286.984566][ T29] audit: type=1400 audit(2000001075.130:31828): avc: denied { read write } for pid=21498 comm="syz.6.3468" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1287.099461][T20731] usb 1-1: Using ep0 maxpacket: 8 [ 1287.105126][ T29] audit: type=1400 audit(2000001075.130:31829): avc: denied { open } for pid=21498 comm="syz.6.3468" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1287.139883][ T29] audit: type=1400 audit(2000001075.158:31830): avc: denied { ioctl } for pid=21492 comm="syz.0.3467" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1287.319295][ T29] audit: type=1400 audit(2000001075.215:31831): avc: denied { execmem } for pid=21498 comm="syz.6.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1287.565488][T20731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1287.595866][T20731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.620584][ T29] audit: type=1400 audit(2000001075.224:31832): avc: denied { ioctl } for pid=21492 comm="syz.0.3467" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1287.649044][T20731] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1287.656398][T20731] pvrusb2: ********** [ 1287.661129][T20731] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1287.672987][T20731] pvrusb2: Important functionality might not be entirely working. [ 1287.682920][T20731] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1287.694896][T20731] pvrusb2: ********** [ 1287.811433][ T29] audit: type=1400 audit(2000001075.346:31833): avc: denied { ioctl } for pid=21492 comm="syz.0.3467" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1287.863875][ T29] audit: type=1400 audit(2000001075.355:31834): avc: denied { mounton } for pid=21498 comm="syz.6.3468" path="/412/file0" dev="tmpfs" ino=2269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1287.941007][ T29] audit: type=1400 audit(2000001075.476:31835): avc: denied { read write } for pid=21498 comm="syz.6.3468" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1288.022226][ T29] audit: type=1400 audit(2000001075.476:31836): avc: denied { open } for pid=21498 comm="syz.6.3468" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1288.084959][ T29] audit: type=1400 audit(2000001075.476:31837): avc: denied { mounton } for pid=21498 comm="syz.6.3468" path="/412/file0" dev="tmpfs" ino=2269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1288.163941][ T10] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1288.581303][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.657911][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1288.705094][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1288.745314][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.780417][ T10] usb 7-1: config 0 descriptor?? [ 1288.808969][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1289.710403][T21521] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1291.273910][T21535] comedi comedi0: Minor 2147483647 is invalid! [ 1292.424811][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 1292.424827][ T29] audit: type=1400 audit(2000001080.284:31939): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1292.463618][ T29] audit: type=1400 audit(2000001080.284:31940): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1292.557355][ T29] audit: type=1400 audit(2000001080.284:31941): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1292.652920][ T2339] pvrusb2: Invalid write control endpoint [ 1292.673001][T20731] usb 1-1: USB disconnect, device number 60 [ 1292.681432][ T29] audit: type=1400 audit(2000001080.350:31942): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1292.851837][ T2339] pvrusb2: Invalid write control endpoint [ 1292.865528][ T29] audit: type=1400 audit(2000001080.350:31943): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1292.895659][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1292.907467][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1293.153257][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1293.167321][ T29] audit: type=1400 audit(2000001080.350:31944): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1293.256167][ T2339] pvrusb2: Device being rendered inoperable [ 1293.265707][ T42] usb 7-1: USB disconnect, device number 45 [ 1293.789094][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1293.861652][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1293.906029][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1293.911513][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1293.934082][ T29] audit: type=1400 audit(2000001080.490:31945): avc: denied { create } for pid=21538 comm="syz.2.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1293.983528][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1294.011653][ T29] audit: type=1400 audit(2000001080.500:31946): avc: denied { prog_load } for pid=21539 comm="syz.5.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1294.075549][ T29] audit: type=1400 audit(2000001080.500:31947): avc: denied { bpf } for pid=21539 comm="syz.5.3477" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1294.125768][T21550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21550 comm=syz.6.3478 [ 1294.140430][T21550] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1294.145912][T21550] PKCS7: Only support pkcs7_signedData type [ 1294.161191][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3478'. [ 1294.170082][T21550] netlink: 'syz.6.3478': attribute type 3 has an invalid length. [ 1294.441005][ T29] audit: type=1400 audit(2000001080.528:31948): avc: denied { create } for pid=21539 comm="syz.5.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1295.673274][T21559] xt_CT: No such helper "snmp_trap" [ 1297.870944][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1297.870956][ T29] audit: type=1400 audit(2000001085.382:32086): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1297.993069][ T29] audit: type=1400 audit(2000001085.420:32087): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1298.041610][ T29] audit: type=1400 audit(2000001085.420:32088): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1298.144881][ T29] audit: type=1400 audit(2000001085.523:32089): avc: denied { create } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1298.455174][T21594] comedi comedi0: Minor 2147483647 is invalid! [ 1298.487811][ T29] audit: type=1400 audit(2000001085.523:32090): avc: denied { create } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1299.367695][ T29] audit: type=1400 audit(2000001085.523:32091): avc: denied { create } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1299.388464][ T29] audit: type=1400 audit(2000001085.523:32092): avc: denied { setopt } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1299.425191][ T29] audit: type=1400 audit(2000001085.523:32093): avc: denied { create } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.612300][ T29] audit: type=1400 audit(2000001085.523:32094): avc: denied { write } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1299.678620][ T29] audit: type=1400 audit(2000001085.523:32095): avc: denied { read } for pid=21587 comm="syz.5.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1300.212237][ T42] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1300.515570][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.528265][ T42] usb 4-1: config 0 has no interfaces? [ 1300.534624][ T42] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1300.545147][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.565339][ T42] usb 4-1: config 0 descriptor?? [ 1300.654751][T21615] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1301.094127][T21606] netlink: 'syz.3.3491': attribute type 72 has an invalid length. [ 1301.133542][ T42] usb 4-1: USB disconnect, device number 92 [ 1303.231049][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 1303.231066][ T29] audit: type=1400 audit(2000001090.396:32281): avc: denied { ioctl } for pid=21632 comm="syz.2.3502" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1303.802670][ T29] audit: type=1400 audit(2000001090.424:32282): avc: denied { read write open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1304.403296][ T29] audit: type=1400 audit(2000001090.424:32283): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1304.822259][ T29] audit: type=1400 audit(2000001090.434:32284): avc: denied { create } for pid=21635 comm="syz.3.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1305.010785][ T29] audit: type=1400 audit(2000001090.434:32285): avc: denied { ioctl } for pid=21635 comm="syz.3.3504" path="socket:[70951]" dev="sockfs" ino=70951 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1305.182975][ T29] audit: type=1400 audit(2000001090.490:32286): avc: denied { read } for pid=21640 comm="syz.0.3505" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1305.257810][ T29] audit: type=1400 audit(2000001090.490:32287): avc: denied { open } for pid=21640 comm="syz.0.3505" path="cgroup:[4026532905]" dev="nsfs" ino=4026532905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1305.367395][ T29] audit: type=1400 audit(2000001090.518:32288): avc: denied { read } for pid=21640 comm="syz.0.3505" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1305.470627][ T29] audit: type=1400 audit(2000001090.518:32289): avc: denied { open } for pid=21640 comm="syz.0.3505" path="net:[4026533004]" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1305.581138][T21663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=21663 comm=syz.6.3509 [ 1305.596629][T21663] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1305.602734][T21663] PKCS7: Only support pkcs7_signedData type [ 1305.630056][T21663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1305.639238][T21663] netlink: 'syz.6.3509': attribute type 3 has an invalid length. [ 1305.671859][ T29] audit: type=1400 audit(2000001090.518:32290): avc: denied { create } for pid=21640 comm="syz.0.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1306.797225][ T5873] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1306.957637][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1306.980146][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1307.020259][T21674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3510'. [ 1307.035735][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.078654][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1307.126682][ T5873] pvrusb2: ********** [ 1307.136079][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1307.267597][ T5873] pvrusb2: Important functionality might not be entirely working. [ 1307.302712][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1307.341842][ T5873] pvrusb2: ********** [ 1308.631091][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 1308.631108][ T29] audit: type=1400 audit(2000001095.447:32423): avc: denied { read } for pid=21685 comm="syz.5.3516" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1309.117838][ T29] audit: type=1400 audit(2000001095.447:32424): avc: denied { read open } for pid=21685 comm="syz.5.3516" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1309.171320][ T29] audit: type=1400 audit(2000001095.840:32425): avc: denied { ioctl } for pid=21683 comm="syz.6.3515" path="socket:[71836]" dev="sockfs" ino=71836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1309.255880][ T29] audit: type=1400 audit(2000001095.849:32426): avc: denied { create } for pid=21683 comm="syz.6.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1309.340098][ T29] audit: type=1400 audit(2000001095.849:32427): avc: denied { write } for pid=21683 comm="syz.6.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1309.440688][ T29] audit: type=1400 audit(2000001095.849:32428): avc: denied { read } for pid=21683 comm="syz.6.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1309.513772][ T2339] pvrusb2: Invalid write control endpoint [ 1309.536412][ T5873] usb 1-1: USB disconnect, device number 61 [ 1309.626773][ T29] audit: type=1400 audit(2000001095.868:32429): avc: denied { write } for pid=21683 comm="syz.6.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1309.823721][ T29] audit: type=1400 audit(2000001096.093:32430): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.874258][ T29] audit: type=1400 audit(2000001096.093:32431): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1309.876122][ T2339] pvrusb2: Invalid write control endpoint [ 1310.320254][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1310.329703][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1310.337270][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1310.389033][ T29] audit: type=1400 audit(2000001096.093:32432): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1310.434465][ T2339] pvrusb2: Device being rendered inoperable [ 1310.459647][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1310.492708][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1310.526898][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1310.554774][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1310.564383][T21697] xt_CT: No such helper "snmp_trap" [ 1310.579065][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1312.313862][ T792] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1312.827410][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.848769][ T792] usb 7-1: config 0 has no interfaces? [ 1312.865618][ T792] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1312.907600][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.446883][ T5810] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1313.520014][ T792] usb 7-1: config 0 descriptor?? [ 1313.692731][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 1313.793081][ T5810] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1313.818286][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.843616][T21738] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1313.892199][ T5810] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1313.921672][ T5810] pvrusb2: ********** [ 1313.942364][ T5810] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1313.966198][ T5810] pvrusb2: Important functionality might not be entirely working. [ 1313.983735][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 1313.983749][ T29] audit: type=1400 audit(2000001100.452:32609): avc: denied { write } for pid=21724 comm="syz.6.3526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1313.990770][T21725] netlink: 'syz.6.3526': attribute type 72 has an invalid length. [ 1314.010648][ T5810] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1314.010666][ T5810] pvrusb2: ********** [ 1314.371396][ T792] usb 7-1: USB disconnect, device number 46 [ 1314.447189][ T29] audit: type=1400 audit(2000001100.882:32610): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1314.489339][ T29] audit: type=1400 audit(2000001100.882:32611): avc: denied { read write open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1314.517293][ T29] audit: type=1400 audit(2000001100.882:32612): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1314.547564][ T29] audit: type=1400 audit(2000001100.975:32613): avc: denied { map_create } for pid=21740 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1314.617220][ T29] audit: type=1400 audit(2000001100.975:32614): avc: denied { perfmon } for pid=21740 comm="syz.5.3531" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1314.649825][ T29] audit: type=1400 audit(2000001100.975:32615): avc: denied { map_create } for pid=21740 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1314.671869][ T29] audit: type=1400 audit(2000001100.975:32616): avc: denied { map_read map_write } for pid=21740 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1315.143800][ T29] audit: type=1400 audit(2000001101.013:32617): avc: denied { prog_load } for pid=21740 comm="syz.5.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1315.201830][ T29] audit: type=1400 audit(2000001101.013:32618): avc: denied { bpf } for pid=21740 comm="syz.5.3531" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1315.908299][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1315.955004][T21757] xt_CT: No such helper "snmp_trap" [ 1316.126062][ T2339] pvrusb2: Invalid write control endpoint [ 1316.150446][ T5810] usb 4-1: USB disconnect, device number 93 [ 1317.008757][ T2339] pvrusb2: Invalid write control endpoint [ 1317.015312][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1317.025210][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1317.036285][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1317.057340][ T2339] pvrusb2: Device being rendered inoperable [ 1317.071631][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1317.082124][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1317.101071][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1317.114852][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1317.128485][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1318.493953][T21786] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1319.424670][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 1319.424686][ T29] audit: type=1400 audit(2000001105.540:32766): avc: denied { map_create } for pid=21787 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1319.524948][ T29] audit: type=1400 audit(2000001105.540:32767): avc: denied { perfmon } for pid=21787 comm="syz.0.3546" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1319.891700][ T29] audit: type=1400 audit(2000001105.540:32768): avc: denied { map_read map_write } for pid=21787 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1319.922777][ T29] audit: type=1400 audit(2000001105.615:32769): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1320.008931][ T29] audit: type=1400 audit(2000001105.615:32770): avc: denied { read write open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1320.203786][ T29] audit: type=1400 audit(2000001105.615:32771): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1320.904519][T21809] xt_CT: No such helper "snmp_trap" [ 1320.908103][ T29] audit: type=1400 audit(2000001105.624:32772): avc: denied { prog_load } for pid=21787 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1320.997756][ T29] audit: type=1400 audit(2000001105.624:32773): avc: denied { bpf } for pid=21787 comm="syz.0.3546" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1321.038491][T21815] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.081757][ T29] audit: type=1400 audit(2000001105.624:32774): avc: denied { prog_load } for pid=21787 comm="syz.0.3546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1322.625978][T21832] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1322.680112][T21833] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1322.794199][ T5924] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1322.996044][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 1323.003535][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1323.016394][ T5924] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1323.027404][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.045556][ T5924] usb 7-1: config 0 descriptor?? [ 1323.287882][ T5924] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1324.417575][ T5810] usb 7-1: USB disconnect, device number 47 [ 1325.035963][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 1325.035982][ T29] audit: type=1400 audit(2000001110.788:32926): avc: denied { write } for pid=21843 comm="syz.3.3560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1325.164231][ T29] audit: type=1400 audit(2000001110.825:32927): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.253260][ T29] audit: type=1400 audit(2000001110.825:32928): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.334745][ T29] audit: type=1400 audit(2000001110.825:32929): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.910860][ T29] audit: type=1400 audit(2000001111.050:32930): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1325.968184][ T29] audit: type=1400 audit(2000001111.050:32931): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1326.042992][ T29] audit: type=1400 audit(2000001111.050:32932): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1326.686884][ T29] audit: type=1400 audit(2000001111.096:32933): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1326.762305][T21860] xt_CT: No such helper "snmp_trap" [ 1326.860735][ T29] audit: type=1400 audit(2000001111.096:32934): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1326.905852][ T29] audit: type=1400 audit(2000001111.096:32935): avc: denied { ioctl } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1329.183479][T21887] netlink: 4988 bytes leftover after parsing attributes in process `syz.6.3562'. [ 1329.192692][T21887] openvswitch: netlink: Flow actions attr not present in new flow. [ 1329.516128][T20731] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1330.082763][T20731] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1330.091915][T20731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.104012][T20731] usb 3-1: config 0 descriptor?? [ 1330.116050][T20731] cp210x 3-1:0.0: cp210x converter detected [ 1330.553207][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 1330.553250][ T29] audit: type=1400 audit(2000001115.661:33066): avc: denied { read append } for pid=21894 comm="syz.0.3576" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1330.584030][ T792] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1330.592540][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1330.600115][ T29] audit: type=1400 audit(2000001115.671:33067): avc: denied { open } for pid=21894 comm="syz.0.3576" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1330.723449][ T29] audit: type=1400 audit(2000001115.671:33068): avc: denied { ioctl } for pid=21894 comm="syz.0.3576" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1330.755745][ T29] audit: type=1400 audit(2000001115.848:33069): avc: denied { mount } for pid=21894 comm="syz.0.3576" name="/" dev="ocfs2_dlmfs" ino=71545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1330.780158][ T792] usb 4-1: device descriptor read/64, error -32 [ 1331.150504][ T792] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1331.157811][ T29] audit: type=1400 audit(2000001115.848:33070): avc: denied { read write } for pid=21894 comm="syz.0.3576" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.202155][T21912] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3570'. [ 1331.305601][ T29] audit: type=1400 audit(2000001115.848:33071): avc: denied { open } for pid=21894 comm="syz.0.3576" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1331.332732][ T29] audit: type=1400 audit(2000001115.989:33072): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1331.376374][T20731] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1331.385482][T20731] cp210x 3-1:0.0: querying part number failed [ 1331.807321][ T792] usb 4-1: Using ep0 maxpacket: 8 [ 1331.825801][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1331.837238][ T792] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1331.851139][ T29] audit: type=1400 audit(2000001115.989:33073): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1331.880674][T20731] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1331.894058][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.912517][T20731] usb 3-1: USB disconnect, device number 31 [ 1331.931568][T20731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1331.955782][ T792] usb 4-1: config 0 descriptor?? [ 1331.960714][ T29] audit: type=1400 audit(2000001115.989:33074): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1332.040284][T20731] cp210x 3-1:0.0: device disconnected [ 1332.094288][ T29] audit: type=1400 audit(2000001116.026:33075): avc: denied { map_create } for pid=21898 comm="syz.6.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1332.986087][T21924] xt_CT: No such helper "snmp_trap" [ 1333.134196][T21928] comedi comedi0: Minor 2147483647 is invalid! [ 1333.526309][ T792] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1333.780896][ T5924] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1334.642380][ T5924] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1334.731362][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.828721][ T5924] usb 1-1: config 0 descriptor?? [ 1334.907632][ T5924] cp210x 1-1:0.0: cp210x converter detected [ 1335.146717][T21948] netlink: 4988 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1335.156118][T21948] openvswitch: netlink: Flow actions attr not present in new flow. [ 1335.474695][ T5873] usb 4-1: USB disconnect, device number 95 [ 1335.834116][ T5924] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1335.855885][ T5924] cp210x 1-1:0.0: querying part number failed [ 1335.969224][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 1335.969272][ T29] audit: type=1400 audit(2000001121.012:33245): avc: denied { read append } for pid=21952 comm="syz.5.3589" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1336.218548][ T42] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1336.272125][ T5924] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1336.307152][ T5924] usb 1-1: USB disconnect, device number 62 [ 1336.347980][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1336.373550][ T29] audit: type=1400 audit(2000001121.012:33246): avc: denied { open } for pid=21952 comm="syz.5.3589" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1336.495217][ T5924] cp210x 1-1:0.0: device disconnected [ 1336.511675][ T29] audit: type=1400 audit(2000001121.012:33247): avc: denied { ioctl } for pid=21952 comm="syz.5.3589" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1336.539673][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 1336.561179][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.603338][ T42] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1336.613168][ T29] audit: type=1400 audit(2000001121.096:33248): avc: denied { ioctl } for pid=21952 comm="syz.5.3589" path="/dev/comedi3" dev="devtmpfs" ino=1279 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1336.661457][T21966] siw: device registration error -23 [ 1336.687018][T21966] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1336.750576][ T29] audit: type=1400 audit(2000001121.171:33249): avc: denied { mount } for pid=21952 comm="syz.5.3589" name="/" dev="ocfs2_dlmfs" ino=71602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1336.868100][ T42] usb 7-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1336.954825][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.977698][ T42] usb 7-1: Product: syz [ 1336.981986][ T42] usb 7-1: Manufacturer: syz [ 1336.986708][ T42] usb 7-1: SerialNumber: syz [ 1336.989011][ T29] audit: type=1400 audit(2000001121.171:33250): avc: denied { read write } for pid=21952 comm="syz.5.3589" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1337.025432][ T42] usb 7-1: config 0 descriptor?? [ 1337.097518][ T29] audit: type=1400 audit(2000001121.180:33251): avc: denied { open } for pid=21952 comm="syz.5.3589" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1337.974987][T21975] xt_CT: No such helper "snmp_trap" [ 1338.078961][ T29] audit: type=1400 audit(2000001121.264:33252): avc: denied { ioctl } for pid=21950 comm="syz.6.3588" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.104947][ T29] audit: type=1400 audit(2000001121.283:33253): avc: denied { ioctl } for pid=21950 comm="syz.6.3588" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.131908][ T29] audit: type=1400 audit(2000001121.348:33254): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1338.541837][T21985] comedi comedi0: Minor 2147483647 is invalid! [ 1339.088920][T21991] bridge0: entered promiscuous mode [ 1340.410326][T20731] usb 7-1: USB disconnect, device number 48 [ 1340.858267][T20731] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1341.215301][T20731] usb 7-1: Using ep0 maxpacket: 8 [ 1341.232544][T20731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1341.253450][T20731] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1341.291573][T20731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.313191][T20731] usb 7-1: config 0 descriptor?? [ 1341.408971][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 1341.408984][ T29] audit: type=1400 audit(2000001126.044:33397): avc: denied { create } for pid=21982 comm="syz.3.3594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1341.531685][ T29] audit: type=1400 audit(2000001126.044:33398): avc: denied { shutdown } for pid=21982 comm="syz.3.3594" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1341.568882][ T29] audit: type=1400 audit(2000001126.044:33399): avc: denied { read } for pid=21982 comm="syz.3.3594" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1341.631585][ T29] audit: type=1400 audit(2000001126.072:33400): avc: denied { read } for pid=21982 comm="syz.3.3594" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1341.710842][T20731] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1341.776288][ T29] audit: type=1400 audit(2000001126.072:33401): avc: denied { read open } for pid=21982 comm="syz.3.3594" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1341.886824][ T29] audit: type=1400 audit(2000001126.138:33402): avc: denied { ioctl } for pid=22010 comm="syz.6.3601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1342.975184][ T29] audit: type=1400 audit(2000001126.381:33403): avc: denied { ioctl } for pid=22010 comm="syz.6.3601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1343.001993][ T29] audit: type=1400 audit(2000001126.381:33404): avc: denied { ioctl } for pid=22010 comm="syz.6.3601" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1343.029262][ T29] audit: type=1400 audit(2000001126.605:33405): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1343.055894][ T29] audit: type=1400 audit(2000001126.605:33406): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1343.060102][ T792] usb 7-1: USB disconnect, device number 49 [ 1344.652981][T22027] team_slave_1: Caught tx_queue_len zero misconfig [ 1345.780747][T22036] siw: device registration error -23 [ 1345.803684][T22036] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1346.823273][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 1346.823291][ T29] audit: type=1400 audit(2000001131.151:33491): avc: denied { create } for pid=22043 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1347.165409][ T29] audit: type=1400 audit(2000001131.151:33492): avc: denied { write } for pid=22043 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1347.189373][ T29] audit: type=1400 audit(2000001131.151:33493): avc: denied { read } for pid=22043 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1347.244648][T22056] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1347.263547][ T29] audit: type=1400 audit(2000001131.161:33494): avc: denied { create } for pid=22043 comm="syz.2.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1347.316647][ T29] audit: type=1400 audit(2000001131.180:33495): avc: denied { create } for pid=22044 comm="syz.6.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1347.367879][ T29] audit: type=1400 audit(2000001131.198:33496): avc: denied { setopt } for pid=22044 comm="syz.6.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1347.427981][ T29] audit: type=1400 audit(2000001131.198:33497): avc: denied { bind } for pid=22044 comm="syz.6.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1347.545287][ T29] audit: type=1400 audit(2000001131.208:33498): avc: denied { map_create } for pid=22045 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1348.215504][ T29] audit: type=1400 audit(2000001131.217:33499): avc: denied { create } for pid=22045 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1348.376769][ T29] audit: type=1400 audit(2000001131.217:33500): avc: denied { create } for pid=22045 comm="syz.3.3612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1349.072822][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1351.742679][T22105] siw: device registration error -23 [ 1351.767460][T22105] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1352.267769][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1352.267809][ T29] audit: type=1400 audit(2000001136.268:33662): avc: denied { prog_load } for pid=22102 comm="syz.5.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1352.566503][ T29] audit: type=1400 audit(2000001136.268:33663): avc: denied { bpf } for pid=22102 comm="syz.5.3625" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1352.645597][ T29] audit: type=1400 audit(2000001136.427:33664): avc: denied { create } for pid=22102 comm="syz.5.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1352.715161][ T29] audit: type=1400 audit(2000001136.436:33665): avc: denied { write } for pid=22102 comm="syz.5.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1352.792735][ T29] audit: type=1400 audit(2000001136.474:33666): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.884914][ T29] audit: type=1400 audit(2000001136.474:33667): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1352.992997][ T29] audit: type=1400 audit(2000001136.474:33668): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.071906][ T29] audit: type=1400 audit(2000001136.502:33669): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.141482][ T29] audit: type=1400 audit(2000001136.502:33670): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.192946][ T29] audit: type=1400 audit(2000001136.502:33671): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1353.791298][T22114] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3627'. [ 1354.434728][T22127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22127 comm=syz.6.3631 [ 1354.448479][T22127] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1354.453947][T22127] PKCS7: Only support pkcs7_signedData type [ 1354.472443][T22127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3631'. [ 1354.481434][T22127] netlink: 'syz.6.3631': attribute type 3 has an invalid length. [ 1356.466661][T22148] siw: device registration error -23 [ 1356.490431][T22148] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1357.728179][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 1357.728221][ T29] audit: type=1400 audit(2000001141.375:33811): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1357.762500][ T42] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1357.900703][ T29] audit: type=1400 audit(2000001141.525:33812): avc: denied { read } for pid=22150 comm="syz.6.3639" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1358.152313][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 1358.158119][ T29] audit: type=1400 audit(2000001141.525:33813): avc: denied { open } for pid=22150 comm="syz.6.3639" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1358.206499][ T29] audit: type=1400 audit(2000001141.525:33814): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.234998][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1358.251913][ T42] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1358.284416][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.333439][ T42] usb 6-1: config 0 descriptor?? [ 1358.359373][ T29] audit: type=1400 audit(2000001141.600:33815): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.443023][ T29] audit: type=1400 audit(2000001141.806:33816): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.494892][ T29] audit: type=1400 audit(2000001141.806:33817): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.653636][ T42] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1358.690739][ T29] audit: type=1400 audit(2000001141.815:33818): avc: denied { create } for pid=22159 comm="syz.2.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1359.845873][ T29] audit: type=1400 audit(2000001141.862:33819): avc: denied { ioctl } for pid=22151 comm="syz.5.3638" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1360.432780][ T5873] usb 6-1: USB disconnect, device number 71 [ 1360.506940][ T29] audit: type=1400 audit(2000001141.871:33820): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1360.718039][T22178] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1362.928950][T22197] siw: device registration error -23 [ 1362.950577][T22197] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1363.259509][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1363.259523][ T29] audit: type=1400 audit(2000001146.548:33914): avc: denied { create } for pid=22195 comm="syz.0.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.298482][ T29] audit: type=1400 audit(2000001146.586:33915): avc: denied { create } for pid=22195 comm="syz.0.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.327916][ T29] audit: type=1400 audit(2000001146.604:33916): avc: denied { read } for pid=22195 comm="syz.0.3646" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1363.387267][ T29] audit: type=1400 audit(2000001146.604:33917): avc: denied { open } for pid=22195 comm="syz.0.3646" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1363.507064][ T29] audit: type=1400 audit(2000001146.754:33918): avc: denied { write } for pid=22195 comm="syz.0.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.775156][ T29] audit: type=1400 audit(2000001146.866:33919): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1363.882779][ T29] audit: type=1400 audit(2000001146.866:33920): avc: denied { open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.035806][ T29] audit: type=1400 audit(2000001146.866:33921): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.329370][ T29] audit: type=1400 audit(2000001147.025:33922): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.526582][ T29] audit: type=1400 audit(2000001147.025:33923): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.965526][ T5924] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1365.283020][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 1365.292512][ T5924] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1365.307491][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.329563][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1365.838685][ T5924] pvrusb2: ********** [ 1365.856991][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1365.892598][ T5924] pvrusb2: Important functionality might not be entirely working. [ 1365.933808][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1366.119236][ T5924] pvrusb2: ********** [ 1367.210903][ T2339] pvrusb2: Invalid write control endpoint [ 1367.250030][ T5924] usb 4-1: USB disconnect, device number 96 [ 1367.626611][ T2339] pvrusb2: Invalid write control endpoint [ 1367.640597][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1368.075504][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1368.111196][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1368.154669][ T2339] pvrusb2: Device being rendered inoperable [ 1368.187367][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1368.198061][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1368.217317][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1368.228417][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1368.239668][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1369.002149][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 1369.002192][ T29] audit: type=1400 audit(2000001151.206:34062): avc: denied { execmem } for pid=22244 comm="syz.6.3663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1369.348563][ T29] audit: type=1400 audit(2000001151.356:34063): avc: denied { prog_load } for pid=22230 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1369.387560][ T29] audit: type=1400 audit(2000001151.356:34064): avc: denied { bpf } for pid=22230 comm="syz.5.3659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1369.547990][ T29] audit: type=1400 audit(2000001151.365:34065): avc: denied { read write } for pid=22230 comm="syz.5.3659" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1369.657563][T22255] siw: device registration error -23 [ 1369.678599][T22255] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1370.021966][ T29] audit: type=1400 audit(2000001151.365:34066): avc: denied { open } for pid=22230 comm="syz.5.3659" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1370.054012][ T29] audit: type=1400 audit(2000001151.365:34067): avc: denied { mounton } for pid=22230 comm="syz.5.3659" path="/546" dev="tmpfs" ino=3043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1370.083035][ T29] audit: type=1400 audit(2000001151.581:34068): avc: denied { read } for pid=22244 comm="syz.6.3663" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1370.110399][ T29] audit: type=1400 audit(2000001151.581:34069): avc: denied { open } for pid=22244 comm="syz.6.3663" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1370.175548][ T29] audit: type=1400 audit(2000001151.927:34070): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1370.202648][ T29] audit: type=1400 audit(2000001151.927:34071): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1370.500024][T22265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1370.684837][ T5810] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1370.834470][T20731] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1370.873794][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.114684][T20731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1371.125731][ T5810] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1371.125776][ T5810] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1371.125797][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.146402][ T5810] usb 6-1: config 0 descriptor?? [ 1371.279932][T20731] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.309717][T20731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1371.353185][T20731] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1371.373604][T20731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.504293][T22277] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3671'. [ 1371.517713][ T5810] usb 6-1: USB disconnect, device number 72 [ 1371.526441][T20731] usb 4-1: config 0 descriptor?? [ 1372.343426][T20731] usbhid 4-1:0.0: can't add hid device: -71 [ 1372.349751][T20731] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1372.429637][T20731] usb 4-1: USB disconnect, device number 97 [ 1374.431764][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 1374.431797][ T29] audit: type=1400 audit(2000001156.912:34259): avc: denied { create } for pid=22311 comm="syz.5.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1374.935907][ T29] audit: type=1400 audit(2000001156.912:34260): avc: denied { write } for pid=22311 comm="syz.5.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1375.157127][ T29] audit: type=1400 audit(2000001156.922:34261): avc: denied { create } for pid=22311 comm="syz.5.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1375.221591][ T29] audit: type=1400 audit(2000001156.931:34262): avc: denied { mount } for pid=22311 comm="syz.5.3680" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1376.014306][ T29] audit: type=1400 audit(2000001157.277:34263): avc: denied { read } for pid=22314 comm="syz.6.3681" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1376.113468][ T29] audit: type=1400 audit(2000001157.277:34264): avc: denied { read open } for pid=22314 comm="syz.6.3681" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1376.211763][ T29] audit: type=1400 audit(2000001157.605:34265): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.305358][ T29] audit: type=1400 audit(2000001157.605:34266): avc: denied { read write open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.414507][ T5810] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1376.886820][ T29] audit: type=1400 audit(2000001157.605:34267): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1376.917111][ T29] audit: type=1400 audit(2000001157.633:34268): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1377.005038][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.072669][ T5810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1377.108953][ T5810] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1377.157417][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.198749][ T5810] usb 3-1: config 0 descriptor?? [ 1377.752904][ T42] usb 3-1: USB disconnect, device number 32 [ 1378.935567][T22365] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1379.349537][T22366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22366 comm=syz.2.3691 [ 1379.371264][T22361] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1379.377077][T22361] PKCS7: Only support pkcs7_signedData type [ 1379.405048][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1379.414041][T22361] netlink: 'syz.2.3691': attribute type 3 has an invalid length. [ 1379.786393][T22372] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3686'. [ 1380.043920][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 1380.043932][ T29] audit: type=1400 audit(2000001162.244:34398): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.142295][ T29] audit: type=1400 audit(2000001162.282:34399): avc: denied { read } for pid=22335 comm="syz.5.3686" dev="nsfs" ino=4026533951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1380.243269][ T29] audit: type=1400 audit(2000001162.282:34400): avc: denied { read open } for pid=22335 comm="syz.5.3686" path="net:[4026533951]" dev="nsfs" ino=4026533951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1380.315576][ T29] audit: type=1400 audit(2000001162.291:34401): avc: denied { read write open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.744183][ T29] audit: type=1400 audit(2000001162.291:34402): avc: denied { ioctl } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1380.829760][ T29] audit: type=1400 audit(2000001162.543:34403): avc: denied { read } for pid=22373 comm="syz.3.3695" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1380.950710][ T29] audit: type=1400 audit(2000001162.543:34404): avc: denied { open } for pid=22373 comm="syz.3.3695" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1381.300146][ T29] audit: type=1400 audit(2000001162.553:34405): avc: denied { map_create } for pid=22373 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1381.324961][ T29] audit: type=1400 audit(2000001162.553:34406): avc: denied { create } for pid=22373 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1381.346801][ T29] audit: type=1400 audit(2000001162.553:34407): avc: denied { create } for pid=22373 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1383.150174][T20731] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1383.365550][T20731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.447520][T22406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1383.656155][T20731] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1383.724954][T20731] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1383.788267][T20731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.845247][T20731] usb 6-1: config 0 descriptor?? [ 1384.575107][T13901] usb 6-1: USB disconnect, device number 73 [ 1385.715836][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 1385.715853][ T29] audit: type=1400 audit(2000001167.323:34550): avc: denied { write } for pid=22425 comm="syz.5.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1385.920163][ T29] audit: type=1400 audit(2000001167.539:34551): avc: denied { prog_load } for pid=22417 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1387.149374][ T29] audit: type=1400 audit(2000001167.539:34552): avc: denied { bpf } for pid=22417 comm="syz.2.3708" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1387.420241][ T29] audit: type=1400 audit(2000001167.548:34553): avc: denied { create } for pid=22417 comm="syz.2.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1387.447174][ T29] audit: type=1400 audit(2000001167.548:34554): avc: denied { shutdown } for pid=22417 comm="syz.2.3708" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1387.521101][ T29] audit: type=1400 audit(2000001167.548:34555): avc: denied { read } for pid=22417 comm="syz.2.3708" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1387.613093][ T29] audit: type=1400 audit(2000001167.557:34556): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1387.679896][ T29] audit: type=1400 audit(2000001167.557:34557): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1387.687358][T22459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22459 comm=syz.2.3715 [ 1387.734786][T22459] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 1387.740398][T22459] PKCS7: Only support pkcs7_signedData type [ 1387.755195][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'. [ 1387.764849][T22459] netlink: 'syz.2.3715': attribute type 3 has an invalid length. [ 1388.035879][T22464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1388.053258][T22464] audit: audit_lost=363 audit_rate_limit=0 audit_backlog_limit=64 [ 1389.258395][ T5873] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1389.446794][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.458990][ T5873] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1389.471761][T22483] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1389.480347][ T5873] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1389.490028][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.525646][ T5873] usb 6-1: config 0 descriptor?? [ 1390.046669][T19386] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1390.395404][ T5810] usb 6-1: USB disconnect, device number 74 [ 1390.404907][T19386] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1390.416816][T19386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.472919][T19386] usb 3-1: config 0 descriptor?? [ 1390.490115][T19386] cp210x 3-1:0.0: cp210x converter detected [ 1390.755056][T19386] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1390.975498][T19386] cp210x 3-1:0.0: querying part number failed [ 1390.987803][T19386] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1391.000572][T19386] usb 3-1: USB disconnect, device number 33 [ 1391.104397][T19386] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1391.149358][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 1391.149376][ T29] audit: type=1400 audit(2000001172.636:34712): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1391.184341][T19386] cp210x 3-1:0.0: device disconnected [ 1391.232509][ T29] audit: type=1400 audit(2000001172.665:34713): avc: denied { read write open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1391.326842][ T29] audit: type=1400 audit(2000001172.665:34714): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1391.638887][ T29] audit: type=1400 audit(2000001172.749:34715): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1392.071532][ T29] audit: type=1400 audit(2000001172.749:34716): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1393.477398][ T29] audit: type=1400 audit(2000001172.749:34717): avc: denied { ioctl } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1393.677430][T22522] xt_CT: No such helper "snmp_trap" [ 1393.701012][T22528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.707655][T22528] audit: audit_lost=384 audit_rate_limit=0 audit_backlog_limit=64 [ 1393.716211][T22528] audit: backlog limit exceeded [ 1393.721538][T22528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1393.907909][T22529] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1395.341467][T22547] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1395.840673][T22556] comedi comedi0: Minor 2147483647 is invalid! [ 1395.863331][ T792] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1396.067723][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.211398][ T792] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1396.234934][ T792] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1396.245616][T19386] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1396.304037][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.327615][ T792] usb 7-1: config 0 descriptor?? [ 1396.347890][ T792] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1396.363812][ T792] dvb-usb: bulk message failed: -22 (3/0) [ 1396.373702][ T792] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1396.384416][ T792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1396.392429][ T792] usb 7-1: media controller created [ 1396.407051][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1396.441104][ T792] dvb-usb: bulk message failed: -22 (6/0) [ 1396.455818][ T792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1396.486189][T19386] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1396.568614][ T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input44 [ 1396.591292][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 1396.591306][ T29] audit: type=1400 audit(2000001177.725:34881): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1396.592464][T19386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.656773][ T792] dvb-usb: schedule remote query interval to 150 msecs. [ 1396.674983][ T792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1396.682899][ T29] audit: type=1400 audit(2000001177.800:34882): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=4519 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1396.711003][ T792] usb 7-1: USB disconnect, device number 50 [ 1396.825636][T19386] usb 3-1: config 0 descriptor?? [ 1397.322975][T19386] cp210x 3-1:0.0: cp210x converter detected [ 1397.333803][ T29] audit: type=1400 audit(2000001177.800:34883): avc: denied { read write open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1397.404984][ T29] audit: type=1400 audit(2000001177.800:34884): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1397.413541][ T792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1397.630924][T19386] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1397.638525][T19386] cp210x 3-1:0.0: querying part number failed [ 1397.669909][ T29] audit: type=1400 audit(2000001177.800:34885): avc: denied { read open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4519 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1397.863651][T19386] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1397.962569][ T29] audit: type=1400 audit(2000001177.800:34886): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4519 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1398.116537][T19386] usb 3-1: USB disconnect, device number 34 [ 1398.173274][ T29] audit: type=1400 audit(2000001177.800:34887): avc: denied { ioctl } for pid=22557 comm="syz.3.3741" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1398.193053][T19386] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1398.323575][T19386] cp210x 3-1:0.0: device disconnected [ 1398.366418][ T29] audit: type=1400 audit(2000001177.837:34888): avc: denied { execmem } for pid=22559 comm="syz.0.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1398.426961][ T29] audit: type=1400 audit(2000001178.024:34889): avc: denied { create } for pid=22559 comm="syz.0.3742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.640065][ T29] audit: type=1400 audit(2000001178.071:34890): avc: denied { read } for pid=22559 comm="syz.0.3742" dev="nsfs" ino=4026533004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1401.024469][T19386] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1401.212557][T22617] comedi comedi0: Minor 2147483647 is invalid! [ 1401.256243][T19386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.302827][T19386] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1401.604487][T19386] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1401.617238][T19386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.631131][T19386] usb 4-1: config 0 descriptor?? [ 1401.698550][T22618] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1401.784663][T19386] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1401.798453][T19386] dvb-usb: bulk message failed: -22 (3/0) [ 1401.812203][T19386] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1401.822012][T19386] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1401.862305][T19386] usb 4-1: media controller created [ 1401.893671][T19386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1401.950668][T19386] dvb-usb: bulk message failed: -22 (6/0) [ 1401.975827][T19386] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1402.005004][T19386] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 1402.023524][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 1402.023537][ T29] audit: type=1400 audit(2000001182.804:35027): avc: denied { map_create } for pid=22621 comm="syz.0.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1403.061674][T19386] dvb-usb: schedule remote query interval to 150 msecs. [ 1403.069712][T19386] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1403.077705][ T29] audit: type=1400 audit(2000001182.804:35028): avc: denied { map_read map_write } for pid=22621 comm="syz.0.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1403.098218][ T29] audit: type=1400 audit(2000001182.832:35029): avc: denied { map_create } for pid=22621 comm="syz.0.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1403.205494][ T29] audit: type=1400 audit(2000001182.832:35030): avc: denied { execmem } for pid=22621 comm="syz.0.3757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1403.225051][ T29] audit: type=1400 audit(2000001182.982:35031): avc: denied { read } for pid=22621 comm="syz.0.3757" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1403.253061][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1403.260746][ T5810] dvb-usb: error while querying for an remote control event. [ 1403.445153][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 1403.454235][ T5810] dvb-usb: error while querying for an remote control event. [ 1403.500922][T19386] usb 4-1: USB disconnect, device number 98 [ 1403.750418][ T29] audit: type=1400 audit(2000001182.982:35032): avc: denied { open } for pid=22621 comm="syz.0.3757" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1403.848258][ T29] audit: type=1400 audit(2000001183.786:35033): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=4540 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1403.903067][ T29] audit: type=1400 audit(2000001183.786:35034): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4540 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1403.934458][ T29] audit: type=1400 audit(2000001183.786:35035): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4540 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1404.142983][T22638] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1404.771562][T19386] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1404.787937][ T29] audit: type=1400 audit(2000001183.833:35036): avc: denied { execmem } for pid=22619 comm="syz.6.3756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1405.086747][ T5873] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1405.814257][ T5873] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1405.823555][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.855549][ T5873] usb 7-1: config 0 descriptor?? [ 1405.878015][ T5873] cp210x 7-1:0.0: cp210x converter detected [ 1406.191230][ T5873] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1406.205070][ T5873] cp210x 7-1:0.0: querying part number failed [ 1406.217362][ T5873] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1406.248806][ T5873] usb 7-1: USB disconnect, device number 51 [ 1406.281408][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1406.295719][ T5873] cp210x 7-1:0.0: device disconnected [ 1406.448337][ T5810] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1406.776462][T19386] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1406.797230][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 1406.803632][ T5810] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1406.834542][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.842839][ T792] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1406.967408][ T5810] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1407.003617][T19386] usb 4-1: Using ep0 maxpacket: 16 [ 1407.018260][ T5810] pvrusb2: ********** [ 1407.025531][T19386] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.036053][ T5810] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1408.130536][ T792] usb 1-1: Using ep0 maxpacket: 16 [ 1408.145318][T19386] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1408.167706][ T5810] pvrusb2: Important functionality might not be entirely working. [ 1408.178740][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 1408.178755][ T29] audit: type=1400 audit(2000001188.566:35184): avc: denied { ioctl } for pid=22656 comm="syz.0.3758" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1408.218667][ T5810] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1408.232621][ T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.252038][ T792] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1408.266137][ T5810] pvrusb2: ********** [ 1408.276574][ T792] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1408.285810][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.301268][T19386] usb 4-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1408.310451][ T792] usb 1-1: Product: syz [ 1408.324513][ T29] audit: type=1400 audit(2000001188.594:35185): avc: denied { ioctl } for pid=22656 comm="syz.0.3758" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1409.065907][T19386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.073973][ T792] usb 1-1: Manufacturer: syz [ 1409.079824][ T792] usb 1-1: SerialNumber: syz [ 1409.084461][T19386] usb 4-1: Product: syz [ 1409.094234][T19386] usb 4-1: Manufacturer: syz [ 1409.105013][ T2339] pvrusb2: Invalid write control endpoint [ 1409.118526][ T5810] usb 3-1: USB disconnect, device number 35 [ 1409.128332][ T792] usb 1-1: config 0 descriptor?? [ 1409.133302][T19386] usb 4-1: SerialNumber: syz [ 1409.156940][ T29] audit: type=1400 audit(2000001188.613:35186): avc: denied { read write } for pid=12443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1409.217086][T19386] usb 4-1: config 0 descriptor?? [ 1409.364466][ T29] audit: type=1400 audit(2000001188.613:35187): avc: denied { read write open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1409.407581][ T2339] pvrusb2: Invalid write control endpoint [ 1409.413318][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1409.480250][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1409.499308][ T29] audit: type=1400 audit(2000001188.613:35188): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1409.544720][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1409.554729][ T2339] pvrusb2: Device being rendered inoperable [ 1409.612423][ T42] usb 1-1: USB disconnect, device number 63 [ 1409.647482][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1409.685005][ T29] audit: type=1400 audit(2000001188.641:35189): avc: denied { ioctl } for pid=22656 comm="syz.0.3758" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1409.711961][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1409.727925][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1409.749601][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1409.781046][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1409.830830][ T29] audit: type=1400 audit(2000001188.679:35190): avc: denied { ioctl } for pid=22653 comm="syz.3.3766" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1409.963991][ T792] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1410.190152][T19386] usb 4-1: can't set config #0, error -71 [ 1410.202019][ T792] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.220847][ T29] audit: type=1400 audit(2000001188.763:35191): avc: denied { execmem } for pid=22671 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1410.338381][T22685] comedi comedi0: Minor 2147483647 is invalid! [ 1410.693625][ T792] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1410.704109][T19386] usb 4-1: USB disconnect, device number 99 [ 1410.758588][ T792] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1410.791503][ T29] audit: type=1400 audit(2000001188.987:35192): avc: denied { create } for pid=22671 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1410.791979][ T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.987533][ T29] audit: type=1400 audit(2000001189.025:35193): avc: denied { read } for pid=22671 comm="syz.6.3770" dev="nsfs" ino=4026533118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1412.093033][ T792] usb 7-1: config 0 descriptor?? [ 1412.111095][ T792] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1412.125314][ T792] dvb-usb: bulk message failed: -22 (3/0) [ 1412.216988][ T792] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1412.255605][ T792] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1412.280710][ T792] usb 7-1: media controller created [ 1412.302710][ T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.368773][ T792] dvb-usb: bulk message failed: -22 (6/0) [ 1412.417662][ T792] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1412.454992][ T792] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input46 [ 1412.935519][ T792] dvb-usb: schedule remote query interval to 150 msecs. [ 1412.986953][ T792] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1413.043563][ T792] usb 7-1: USB disconnect, device number 52 [ 1413.826430][ T792] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1413.955913][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 1413.955925][ T29] audit: type=1400 audit(2000001193.964:35290): avc: denied { create } for pid=22705 comm="syz.6.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1414.274621][ T29] audit: type=1400 audit(2000001194.001:35291): avc: denied { open } for pid=22705 comm="syz.6.3778" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1414.420104][ T29] audit: type=1400 audit(2000001194.001:35292): avc: denied { read } for pid=22705 comm="syz.6.3778" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1414.591167][ T29] audit: type=1400 audit(2000001194.001:35293): avc: denied { open } for pid=22705 comm="syz.6.3778" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1414.702078][T22712] comedi comedi0: Minor 2147483647 is invalid! [ 1415.080730][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1415.168518][ T29] audit: type=1400 audit(2000001194.066:35294): avc: denied { prog_load } for pid=22705 comm="syz.6.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1415.190658][ T29] audit: type=1400 audit(2000001194.066:35295): avc: denied { bpf } for pid=22705 comm="syz.6.3778" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1415.531425][ T29] audit: type=1400 audit(2000001194.076:35296): avc: denied { create } for pid=22705 comm="syz.6.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1415.899956][ T42] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1415.917346][ T29] audit: type=1400 audit(2000001194.095:35297): avc: denied { write } for pid=22705 comm="syz.6.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1416.077483][ T29] audit: type=1400 audit(2000001194.394:35298): avc: denied { read write } for pid=20111 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1416.537618][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 1416.547956][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1416.575680][ T42] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1416.583485][ T29] audit: type=1400 audit(2000001194.394:35299): avc: denied { open } for pid=20111 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1416.988139][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.194182][ T42] usb 4-1: config 0 descriptor?? [ 1418.628448][ T42] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1419.653389][ T10] usb 4-1: USB disconnect, device number 100 [ 1419.659213][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 1419.659229][ T29] audit: type=1400 audit(2000001198.538:35399): avc: denied { execmem } for pid=22716 comm="syz.3.3782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1419.707873][ T29] audit: type=1400 audit(2000001198.715:35400): avc: denied { read } for pid=22716 comm="syz.3.3782" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1419.731766][ T29] audit: type=1400 audit(2000001198.715:35401): avc: denied { open } for pid=22716 comm="syz.3.3782" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1419.756221][ T29] audit: type=1400 audit(2000001199.211:35402): avc: denied { write } for pid=22716 comm="syz.3.3782" name="iowarrior0" dev="devtmpfs" ino=4575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1419.783737][ T29] audit: type=1400 audit(2000001199.323:35403): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1419.811998][ T29] audit: type=1400 audit(2000001199.323:35404): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1419.842670][ T29] audit: type=1400 audit(2000001199.323:35405): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1419.869851][ T29] audit: type=1400 audit(2000001199.370:35406): avc: denied { write } for pid=22741 comm="syz.6.3789" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1420.100404][T22750] comedi comedi0: Minor 2147483647 is invalid! [ 1420.556442][ T29] audit: type=1400 audit(2000001199.370:35407): avc: denied { open } for pid=22741 comm="syz.6.3789" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1420.718678][ T29] audit: type=1400 audit(2000001199.408:35408): avc: denied { ioctl } for pid=22741 comm="syz.6.3789" path="/dev/comedi0" dev="devtmpfs" ino=1276 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1425.200518][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 1425.200533][ T29] audit: type=1400 audit(2000001204.487:35539): avc: denied { read write } for pid=17980 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.533639][ T29] audit: type=1400 audit(2000001204.515:35540): avc: denied { read write open } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.639551][ T29] audit: type=1400 audit(2000001204.515:35541): avc: denied { ioctl } for pid=17980 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.881202][ T29] audit: type=1400 audit(2000001204.608:35542): avc: denied { read } for pid=22808 comm="syz.0.3802" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1426.044108][ T29] audit: type=1400 audit(2000001204.608:35543): avc: denied { open } for pid=22808 comm="syz.0.3802" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1426.536595][ T29] audit: type=1400 audit(2000001204.608:35544): avc: denied { ioctl } for pid=22808 comm="syz.0.3802" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1426.617347][ T29] audit: type=1400 audit(2000001204.618:35545): avc: denied { read } for pid=22808 comm="syz.0.3802" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1427.494305][ T29] audit: type=1400 audit(2000001204.618:35546): avc: denied { open } for pid=22808 comm="syz.0.3802" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1427.547071][ T29] audit: type=1400 audit(2000001204.833:35547): avc: denied { read } for pid=22812 comm="syz.2.3801" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1427.576058][ T29] audit: type=1400 audit(2000001204.833:35548): avc: denied { open } for pid=22812 comm="syz.2.3801" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1429.964943][ T792] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1430.157198][T22858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.308377][ T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.337395][ T792] usb 4-1: config 0 has no interfaces? [ 1430.357630][ T792] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1430.421469][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.466256][ T792] usb 4-1: config 0 descriptor?? [ 1430.562928][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 1430.562945][ T29] audit: type=1400 audit(2000001209.501:35667): avc: denied { ioctl } for pid=22853 comm="syz.3.3812" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1430.669329][ T29] audit: type=1400 audit(2000001209.547:35668): avc: denied { module_request } for pid=22855 comm="syz.6.3811" kmod="crypto-digest_null-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1430.845402][ T29] audit: type=1400 audit(2000001209.632:35669): avc: denied { module_request } for pid=22855 comm="syz.6.3811" kmod="crypto-hmac(md5)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1430.988582][T22854] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1431.045259][ T29] audit: type=1400 audit(2000001209.678:35670): avc: denied { read write } for pid=12443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.118310][ T5924] usb 4-1: USB disconnect, device number 101 [ 1431.192521][ T29] audit: type=1400 audit(2000001209.678:35671): avc: denied { open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.351915][ T29] audit: type=1400 audit(2000001209.678:35672): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1431.498972][T22883] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1431.573527][ T29] audit: type=1400 audit(2000001209.734:35673): avc: denied { create } for pid=22853 comm="syz.3.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.096111][ T29] audit: type=1400 audit(2000001209.734:35674): avc: denied { create } for pid=22853 comm="syz.3.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1433.192756][ T29] audit: type=1400 audit(2000001209.791:35675): avc: denied { write } for pid=22853 comm="syz.3.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.311884][ T29] audit: type=1400 audit(2000001209.791:35676): avc: denied { bind } for pid=22853 comm="syz.3.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1435.250386][T22911] comedi comedi0: Minor 2147483647 is invalid! [ 1435.930544][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 1435.930559][ T29] audit: type=1400 audit(2000001214.421:35771): avc: denied { execmem } for pid=22914 comm="syz.2.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1436.058900][ T29] audit: type=1400 audit(2000001214.561:35772): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1436.252912][ T29] audit: type=1400 audit(2000001214.561:35773): avc: denied { read write open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1436.367455][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1436.450175][ T29] audit: type=1400 audit(2000001214.561:35774): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1436.570568][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1436.596281][ T29] audit: type=1400 audit(2000001214.580:35775): avc: denied { create } for pid=22906 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1436.621626][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1436.648130][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.736896][ T29] audit: type=1400 audit(2000001214.599:35776): avc: denied { create } for pid=22912 comm="syz.6.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1436.784928][ T29] audit: type=1400 audit(2000001214.608:35777): avc: denied { setopt } for pid=22912 comm="syz.6.3824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1436.806949][ T29] audit: type=1400 audit(2000001214.617:35778): avc: denied { map_create } for pid=22922 comm="syz.5.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1436.833589][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1436.837598][ T29] audit: type=1400 audit(2000001214.627:35779): avc: denied { prog_load } for pid=22914 comm="syz.2.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1436.906698][ T10] pvrusb2: ********** [ 1436.926285][ T29] audit: type=1400 audit(2000001214.627:35780): avc: denied { bpf } for pid=22914 comm="syz.2.3825" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1436.939818][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1437.031161][ T10] pvrusb2: Important functionality might not be entirely working. [ 1437.061371][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1437.288754][ T10] pvrusb2: ********** [ 1438.372877][T22937] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1439.575355][T13901] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1439.874807][T13901] usb 1-1: Using ep0 maxpacket: 8 [ 1439.896850][T13901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1439.927901][ T2339] pvrusb2: Invalid write control endpoint [ 1439.931514][ T10] usb 3-1: USB disconnect, device number 36 [ 1439.984147][T13901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.126016][T13901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1440.134395][T13901] pvrusb2: ********** [ 1440.161460][T13901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1440.224560][ T2339] pvrusb2: Invalid write control endpoint [ 1440.244138][T13901] pvrusb2: Important functionality might not be entirely working. [ 1440.377376][T22899] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1440.402968][T13901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1440.432090][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1440.860344][T13901] pvrusb2: ********** [ 1440.879566][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1440.889041][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1440.905790][ T2339] pvrusb2: Device being rendered inoperable [ 1440.916944][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1440.925591][T22899] usb 7-1: Using ep0 maxpacket: 16 [ 1440.935808][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1441.020280][T22899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.031726][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1441.142795][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1441.153903][T22899] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1441.164074][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1441.225976][T22899] usb 7-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1441.254591][T22899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.288528][T22899] usb 7-1: Product: syz [ 1441.298333][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 1441.298350][ T29] audit: type=1400 audit(2000001219.547:35917): avc: denied { prog_load } for pid=22962 comm="syz.2.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1441.331777][T22899] usb 7-1: Manufacturer: syz [ 1441.448167][T22899] usb 7-1: SerialNumber: syz [ 1441.459175][T22899] usb 7-1: config 0 descriptor?? [ 1441.464375][ T29] audit: type=1400 audit(2000001219.547:35918): avc: denied { bpf } for pid=22962 comm="syz.2.3834" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1441.491290][ T29] audit: type=1400 audit(2000001219.575:35919): avc: denied { perfmon } for pid=22962 comm="syz.2.3834" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1442.041596][ T29] audit: type=1400 audit(2000001219.584:35920): avc: denied { execmem } for pid=22962 comm="syz.2.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1442.062797][ T29] audit: type=1400 audit(2000001219.724:35921): avc: denied { ioctl } for pid=22948 comm="syz.6.3831" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1442.177853][ T29] audit: type=1400 audit(2000001219.724:35922): avc: denied { read write } for pid=9564 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1442.316484][ T2339] pvrusb2: Invalid write control endpoint [ 1442.324407][T13901] usb 1-1: USB disconnect, device number 64 [ 1442.332998][ T29] audit: type=1400 audit(2000001219.724:35923): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1442.428313][ T29] audit: type=1400 audit(2000001219.724:35924): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1442.462316][ T29] audit: type=1400 audit(2000001219.846:35925): avc: denied { create } for pid=22962 comm="syz.2.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1442.505392][ T29] audit: type=1400 audit(2000001219.846:35926): avc: denied { write } for pid=22962 comm="syz.2.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1442.794499][ T2339] pvrusb2: Invalid write control endpoint [ 1442.876234][T22978] comedi comedi0: Minor 2147483647 is invalid! [ 1443.254477][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1443.268475][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1443.279424][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1443.292876][ T2339] pvrusb2: Device being rendered inoperable [ 1443.381043][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1443.564368][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1443.583108][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1443.692788][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1443.814513][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1443.952512][T22986] comedi comedi0: Minor 2147483647 is invalid! [ 1444.884265][T22993] comedi comedi0: Minor 2147483647 is invalid! [ 1445.060356][T22992] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1445.548560][T19386] usb 7-1: USB disconnect, device number 53 [ 1445.861729][T23001] comedi comedi0: Minor 2147483647 is invalid! [ 1446.708108][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 1446.708118][ T29] audit: type=1400 audit(2000001224.607:36027): avc: denied { read write } for pid=12443 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1446.927780][T23013] openvswitch: netlink: Flow actions attr not present in new flow. [ 1446.994412][ T29] audit: type=1400 audit(2000001224.626:36028): avc: denied { open } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1447.154505][ T29] audit: type=1400 audit(2000001224.626:36029): avc: denied { ioctl } for pid=9564 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1447.260808][T23014] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3844'. [ 1447.503758][ T29] audit: type=1400 audit(2000001224.645:36030): avc: denied { read write open } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1447.556321][ T29] audit: type=1400 audit(2000001224.645:36031): avc: denied { ioctl } for pid=12443 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1447.801622][ T29] audit: type=1400 audit(2000001224.682:36032): avc: denied { prog_load } for pid=23009 comm="syz.5.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1447.988140][ T29] audit: type=1400 audit(2000001224.682:36033): avc: denied { bpf } for pid=23009 comm="syz.5.3844" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1448.140726][ T29] audit: type=1400 audit(2000001224.682:36034): avc: denied { prog_load } for pid=23009 comm="syz.5.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1448.172100][ T29] audit: type=1400 audit(2000001224.682:36035): avc: denied { perfmon } for pid=23009 comm="syz.5.3844" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1448.199971][ T29] audit: type=1400 audit(2000001224.682:36036): avc: denied { bpf } for pid=23009 comm="syz.5.3844" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1449.088092][T23035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1449.324786][T23040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.768799][T23045] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1450.465087][T23053] comedi comedi0: Minor 2147483647 is invalid! [ 1452.178913][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 1452.178931][ T29] audit: type=1400 audit(2000001229.602:36181): avc: denied { write } for pid=23061 comm="syz.3.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1452.285557][ T29] audit: type=1400 audit(2000001229.817:36182): avc: denied { block_suspend } for pid=23070 comm="syz.0.3860" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1452.440094][ T29] audit: type=1400 audit(2000001229.846:36183): avc: denied { prog_load } for pid=23070 comm="syz.0.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1452.996717][ T29] audit: type=1400 audit(2000001229.846:36184): avc: denied { bpf } for pid=23070 comm="syz.0.3860" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1453.458351][ T29] audit: type=1400 audit(2000001229.846:36185): avc: denied { perfmon } for pid=23070 comm="syz.0.3860" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1453.488885][ T29] audit: type=1400 audit(2000001229.846:36186): avc: denied { execmem } for pid=23070 comm="syz.0.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1453.518862][T23083] ================================================================== [ 1453.525680][ T29] audit: type=1400 audit(2000001229.958:36187): avc: denied { create } for pid=23060 comm="syz.6.3857" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1453.526948][T23083] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 1453.526978][T23083] Read of size 8 at addr ffff88802ce61218 by task syz.5.3861/23083 [ 1453.526993][T23083] [ 1453.527005][T23083] CPU: 0 UID: 0 PID: 23083 Comm: syz.5.3861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.527031][T23083] Tainted: [L]=SOFTLOCKUP [ 1453.527038][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1453.527050][T23083] Call Trace: [ 1453.527057][T23083] [ 1453.527066][T23083] dump_stack_lvl+0x100/0x190 [ 1453.527097][T23083] print_report+0x156/0x4c9 [ 1453.527126][T23083] ? __virt_addr_valid+0x81/0x620 [ 1453.527154][T23083] ? __phys_addr+0xe8/0x180 [ 1453.527181][T23083] ? dvb_device_open+0x33f/0x3b0 [ 1453.527197][T23083] kasan_report+0xdf/0x1e0 [ 1453.527222][T23083] ? dvb_device_open+0x33f/0x3b0 [ 1453.527241][T23083] ? __pfx_dvb_device_open+0x10/0x10 [ 1453.527259][T23083] dvb_device_open+0x33f/0x3b0 [ 1453.527277][T23083] ? __pfx_dvb_device_open+0x10/0x10 [ 1453.527296][T23083] chrdev_open+0x234/0x6a0 [ 1453.527312][T23083] ? __pfx_chrdev_open+0x10/0x10 [ 1453.527329][T23083] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1453.527350][T23083] do_dentry_open+0x6d8/0x1660 [ 1453.527374][T23083] ? __pfx_chrdev_open+0x10/0x10 [ 1453.527392][T23083] vfs_open+0x82/0x3f0 [ 1453.527411][T23083] path_openat+0x208c/0x31a0 [ 1453.527431][T23083] ? __pfx_path_openat+0x10/0x10 [ 1453.527452][T23083] do_file_open+0x20e/0x430 [ 1453.527469][T23083] ? __pfx_do_file_open+0x10/0x10 [ 1453.527491][T23083] ? alloc_fd+0x476/0x790 [ 1453.527509][T23083] ? do_getname+0x191/0x390 [ 1453.527529][T23083] do_sys_openat2+0x10d/0x1e0 [ 1453.527548][T23083] ? __pfx_do_sys_openat2+0x10/0x10 [ 1453.527570][T23083] __x64_sys_openat+0x12d/0x210 [ 1453.527597][T23083] ? __pfx___x64_sys_openat+0x10/0x10 [ 1453.527617][T23083] ? do_user_addr_fault+0x8d6/0x12f0 [ 1453.527637][T23083] do_syscall_64+0x106/0xf80 [ 1453.527655][T23083] ? clear_bhb_loop+0x40/0x90 [ 1453.527675][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.527694][T23083] RIP: 0033:0x7f8d23f5cfce [ 1453.527708][T23083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1453.527724][T23083] RSP: 002b:00007f8d24d93b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1453.527741][T23083] RAX: ffffffffffffffda RBX: 00007f8d24d946c0 RCX: 00007f8d23f5cfce [ 1453.527752][T23083] RDX: 0000000000000002 RSI: 00007f8d24d93c00 RDI: ffffffffffffff9c [ 1453.527763][T23083] RBP: 00007f8d24d93c00 R08: 0000000000000000 R09: 0000000000000000 [ 1453.527773][T23083] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1453.527785][T23083] R13: 00007f8d24216038 R14: 00007f8d24215fa0 R15: 00007fff8924c798 [ 1453.527802][T23083] [ 1453.527809][T23083] [ 1453.555313][ T29] audit: type=1400 audit(2000001229.967:36188): avc: denied { create } for pid=23060 comm="syz.6.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1453.556295][T23083] Allocated by task 22904: [ 1453.565100][ T29] audit: type=1400 audit(2000001229.967:36189): avc: denied { write } for pid=23060 comm="syz.6.3857" name="secretmem" dev="secretmem" ino=76932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1453.566479][T23083] kasan_save_stack+0x30/0x50 [ 1453.582056][ T29] audit: type=1400 audit(2000001230.061:36190): avc: denied { read append } for pid=23070 comm="syz.0.3860" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1453.591712][T23083] kasan_save_track+0x14/0x30 [ 1453.591741][T23083] __kasan_kmalloc+0xaa/0xb0 [ 1453.591761][T23083] __kmalloc_noprof+0x301/0x850 [ 1453.591782][T23083] security_inode_init_security+0x113/0x370 [ 1453.591806][T23083] shmem_symlink+0x15f/0xa00 [ 1453.591830][T23083] vfs_symlink+0x178/0x4d0 [ 1453.591851][T23083] filename_symlinkat+0x2a6/0x560 [ 1453.591871][T23083] __x64_sys_symlinkat+0x9c/0xe0 [ 1453.591889][T23083] do_syscall_64+0x106/0xf80 [ 1453.591906][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.591924][T23083] [ 1453.591929][T23083] Freed by task 22904: [ 1453.591938][T23083] kasan_save_stack+0x30/0x50 [ 1453.591961][T23083] kasan_save_track+0x14/0x30 [ 1453.591985][T23083] kasan_save_free_info+0x3b/0x70 [ 1453.592005][T23083] __kasan_slab_free+0x5f/0x80 [ 1453.592029][T23083] kfree+0x1f6/0x6b0 [ 1453.592047][T23083] security_inode_init_security+0x2bf/0x370 [ 1453.592071][T23083] shmem_symlink+0x15f/0xa00 [ 1453.592094][T23083] vfs_symlink+0x178/0x4d0 [ 1453.592115][T23083] filename_symlinkat+0x2a6/0x560 [ 1453.592133][T23083] __x64_sys_symlinkat+0x9c/0xe0 [ 1453.592152][T23083] do_syscall_64+0x106/0xf80 [ 1453.592168][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.592184][T23083] [ 1453.592189][T23083] The buggy address belongs to the object at ffff88802ce61200 [ 1453.592189][T23083] which belongs to the cache kmalloc-256 of size 256 [ 1453.592204][T23083] The buggy address is located 24 bytes inside of [ 1453.592204][T23083] freed 256-byte region [ffff88802ce61200, ffff88802ce61300) [ 1453.592221][T23083] [ 1453.592226][T23083] The buggy address belongs to the physical page: [ 1453.592235][T23083] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ce60 [ 1453.592250][T23083] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1453.592265][T23083] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1453.592281][T23083] page_type: f5(slab) [ 1453.592296][T23083] raw: 00fff00000000040 ffff88813fe3bb40 dead000000000100 dead000000000122 [ 1453.592312][T23083] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1453.592329][T23083] head: 00fff00000000040 ffff88813fe3bb40 dead000000000100 dead000000000122 [ 1453.592341][T23083] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1453.592357][T23083] head: 00fff00000000001 ffffea0000b39801 00000000ffffffff 00000000ffffffff [ 1453.592373][T23083] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1453.592383][T23083] page dumped because: kasan: bad access detected [ 1453.592390][T23083] page_owner tracks the page as allocated [ 1453.592396][T23083] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 9168190760, free_ts 0 [ 1453.592422][T23083] post_alloc_hook+0x153/0x170 [ 1453.592442][T23083] get_page_from_freelist+0x111d/0x3140 [ 1453.592463][T23083] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1453.592482][T23083] new_slab+0xa6/0x6d0 [ 1453.592500][T23083] refill_objects+0x26b/0x400 [ 1453.592520][T23083] __pcs_replace_empty_main+0x19f/0x600 [ 1453.592539][T23083] __kmalloc_cache_noprof+0x493/0x6f0 [ 1453.592554][T23083] bus_add_driver+0x92/0x5b0 [ 1453.592569][T23083] driver_register+0x1e2/0x360 [ 1454.205229][T23083] i2c_register_driver+0xd9/0x1f0 [ 1454.210234][T23083] do_one_initcall+0x11d/0x760 [ 1454.214969][T23083] kernel_init_freeable+0x6e5/0x7a0 [ 1454.220139][T23083] kernel_init+0x1f/0x1e0 [ 1454.224440][T23083] ret_from_fork+0x754/0xd80 [ 1454.228999][T23083] ret_from_fork_asm+0x1a/0x30 [ 1454.233732][T23083] page_owner free stack trace missing [ 1454.239067][T23083] [ 1454.241362][T23083] Memory state around the buggy address: [ 1454.246964][T23083] ffff88802ce61100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1454.254997][T23083] ffff88802ce61180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1454.263039][T23083] >ffff88802ce61200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.271066][T23083] ^ [ 1454.275883][T23083] ffff88802ce61280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.283910][T23083] ffff88802ce61300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1454.291953][T23083] ================================================================== [ 1454.500640][T23083] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1454.507881][T23083] CPU: 1 UID: 0 PID: 23083 Comm: syz.5.3861 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.518813][T23083] Tainted: [L]=SOFTLOCKUP [ 1454.523143][T23083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1454.533207][T23083] Call Trace: [ 1454.536486][T23083] [ 1454.539406][T23083] dump_stack_lvl+0x100/0x190 [ 1454.544063][T23083] vpanic+0x552/0x970 [ 1454.548026][T23083] ? __pfx_vpanic+0x10/0x10 [ 1454.552500][T23083] ? dvb_device_open+0x33f/0x3b0 [ 1454.557409][T23083] panic+0xd1/0xe0 [ 1454.561099][T23083] ? __pfx_panic+0x10/0x10 [ 1454.565488][T23083] ? dvb_device_open+0x33f/0x3b0 [ 1454.570419][T23083] ? preempt_schedule_common+0x42/0xc0 [ 1454.575890][T23083] check_panic_on_warn.cold+0x19/0x34 [ 1454.581271][T23083] end_report.part.0+0x3a/0x90 [ 1454.586055][T23083] kasan_report.cold+0xe/0x18 [ 1454.590743][T23083] ? dvb_device_open+0x33f/0x3b0 [ 1454.595685][T23083] ? __pfx_dvb_device_open+0x10/0x10 [ 1454.600950][T23083] dvb_device_open+0x33f/0x3b0 [ 1454.605688][T23083] ? __pfx_dvb_device_open+0x10/0x10 [ 1454.610947][T23083] chrdev_open+0x234/0x6a0 [ 1454.615335][T23083] ? __pfx_chrdev_open+0x10/0x10 [ 1454.620244][T23083] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1454.626546][T23083] do_dentry_open+0x6d8/0x1660 [ 1454.631301][T23083] ? __pfx_chrdev_open+0x10/0x10 [ 1454.636229][T23083] vfs_open+0x82/0x3f0 [ 1454.640272][T23083] path_openat+0x208c/0x31a0 [ 1454.644853][T23083] ? __pfx_path_openat+0x10/0x10 [ 1454.649765][T23083] do_file_open+0x20e/0x430 [ 1454.654242][T23083] ? __pfx_do_file_open+0x10/0x10 [ 1454.659242][T23083] ? alloc_fd+0x476/0x790 [ 1454.663544][T23083] ? do_getname+0x191/0x390 [ 1454.668023][T23083] do_sys_openat2+0x10d/0x1e0 [ 1454.672684][T23083] ? __pfx_do_sys_openat2+0x10/0x10 [ 1454.677858][T23083] __x64_sys_openat+0x12d/0x210 [ 1454.682683][T23083] ? __pfx___x64_sys_openat+0x10/0x10 [ 1454.688031][T23083] ? do_user_addr_fault+0x8d6/0x12f0 [ 1454.693313][T23083] do_syscall_64+0x106/0xf80 [ 1454.697887][T23083] ? clear_bhb_loop+0x40/0x90 [ 1454.702542][T23083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.708438][T23083] RIP: 0033:0x7f8d23f5cfce [ 1454.712865][T23083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1454.732478][T23083] RSP: 002b:00007f8d24d93b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1454.740880][T23083] RAX: ffffffffffffffda RBX: 00007f8d24d946c0 RCX: 00007f8d23f5cfce [ 1454.748831][T23083] RDX: 0000000000000002 RSI: 00007f8d24d93c00 RDI: ffffffffffffff9c [ 1454.756776][T23083] RBP: 00007f8d24d93c00 R08: 0000000000000000 R09: 0000000000000000 [ 1454.764731][T23083] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1454.772672][T23083] R13: 00007f8d24216038 R14: 00007f8d24215fa0 R15: 00007fff8924c798 [ 1454.780622][T23083] [ 1454.783890][T23083] Kernel Offset: disabled [ 1454.788188][T23083] Rebooting in 86400 seconds..