last executing test programs: 21.127681864s ago: executing program 2 (id=770): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_open_dev$loop(0x0, 0xd76, 0x181400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) write$FUSE_INIT(r5, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4008, 0x7, 0x7, 0x80000001, 0x1, 0x0, 0x0, 0x100, 0x3}}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xb688, 0x1c803, 0x1, 0x20002f7, 0x0, r4}) io_uring_enter(r6, 0x6250, 0x366, 0x30, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r7, 0x20000, 0x1) sendfile(0xffffffffffffffff, r3, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x801) 19.078449302s ago: executing program 1 (id=772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x2041) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, 0x0, 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000002300)=ANY=[@ANYBLOB], 0x9) 18.12959234s ago: executing program 1 (id=774): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) syz_io_uring_setup(0x4276, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x4, 0x275}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, 0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 16.553287689s ago: executing program 3 (id=776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000012d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004890) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) flock(r5, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x804c4700, 0x0) sendmmsg$alg(r7, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x106}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce9", 0x39}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000280)=""/251, 0xfb}], 0x4}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4000, 0x0, @mcast2, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x6, 0x8, 0x6, 0x9}, {0x40, 0x7, 0x9, 0x6}, {0x101, 0xce, 0x0, 0x3}, {0x10c, 0xf, 0x6, 0x5}, {0x1, 0x6, 0xfe, 0x80000001}, {0x8, 0x7, 0x8b, 0xc}]}) 16.240744163s ago: executing program 2 (id=777): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000a00)={0x800, 0x640, 0x10, 0x300, 0x7, 0x4, 0x8, 0x0, {0x77, 0x10001}, {0x3}, {0x4, 0x9}, {0x1fd, 0xffffffff, 0x1}, 0x0, 0x0, 0x7f8, 0x10, 0x0, 0x6, 0x0, 0xd, 0x4, 0x0, 0xd, 0x4000080, 0x1b, 0x0, 0x36da993df1f56046, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getegid() fchown(r0, 0x0, r3) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0}, 0x8800) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r5, &(0x7f00000004c0)=[{{&(0x7f0000000380)=@in, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000700)=""/99, 0x63}], 0x4, &(0x7f0000000780)=""/127, 0x7f}, 0x6}], 0x1, 0x80000002, &(0x7f0000000840)={r6, r7+10000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r8, &(0x7f0000000740), 0xff67) fcntl$addseals(r8, 0x409, 0x8) 15.249890168s ago: executing program 3 (id=778): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000180)={0x800000003, 0x1, 0x2, 0x4, 0x1, 0x0, [{0x10, 0x75264262, 0x7, '\x00', 0xcc746da741e42a11}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 13.848851169s ago: executing program 1 (id=781): bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x1000000000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='hybla\x00', 0xfffffee6) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000000180)) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) fdatasync(0xffffffffffffffff) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x100, 0x0) msgsnd(0x0, 0xfffffffffffffffc, 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000000)={@any, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 12.618335031s ago: executing program 4 (id=782): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000082505a8a440000102030509021b0001011f070009040007020701010000000002400001"], &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x55, 0xb7, 0x5, 0xff, 0x1}, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000540)=ANY=[@ANYBLOB="f00000001000010029bd7000fddbdf2500000000000000000000ffffac141429640101010000000000000000000000004e2001ff4e2300000a00a000ff0000009b34", @ANYRES32=0x0, @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0xc4}, 0x4c8c0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00#\a'], 0x0}, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x80, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 12.602275886s ago: executing program 1 (id=783): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000003140)=""/4083, 0xff3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socket(0x29, 0x800, 0xfffffff7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newchain={0x118c, 0x64, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0, 0x4}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x1160, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x1}}, @TCA_U32_ACT={0x1144, 0x7, [@m_skbedit={0xfc, 0x3, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0x9}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x4, 0x3, 0x8, 0x1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x7, 0x2, 0x6, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff7, 0x3}}]}, {0x7f, 0x6, "e39f74d9aa829699038e0d6b7ca214e14a0c6aec33731aecba4fcf9ffa27abbdcb07644120c69ab9eec17a12359223cb48f269ae35f5b7a6771f678b734ec7e5d8022a3ef5c4b05db5ac1ec9cbb3a07395bd72f78c4dea821f5fecc096814a04e724ea6ca59564a98139a861030930384869e94c676628775f7cb0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x1044, 0x12, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x4}]}}]}, 0x118c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {0xfff2, 0xffff}, {0x5, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) add_key$keyring(&(0x7f00000006c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) connect$bt_rfcomm(r8, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) sendmsg$sock(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) 11.549739049s ago: executing program 0 (id=785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0xd0, 0x2, 0x6, 0x101, 0x6000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}}]}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xd0}}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x200, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x0, 0xc8) syz_open_dev$dri(0x0, 0x1ff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r5 = syz_open_dev$media(0x0, 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) pselect6(0x0, 0x0, &(0x7f0000000140)={0x80000001, 0x1, 0x3, 0x7, 0x5, 0x2, 0x9, 0x4c8c0ef}, &(0x7f00000001c0)={0x0, 0xa7, 0x5, 0x0, 0x49, 0x4e434b45, 0xfb, 0xd4d}, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={[0x7]}, 0x8}) capset(&(0x7f0000000040)={0x20071026}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_proto_private(r6, 0x89e3, &(0x7f0000000080)) 11.369329824s ago: executing program 2 (id=786): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x9ec, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) syz_io_uring_setup(0x4276, &(0x7f0000000240)={0x0, 0x5ff8, 0x8000, 0x4, 0x275}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r3, 0x5412, 0x0) syz_io_uring_setup(0x3b7, &(0x7f0000000340)={0x0, 0xcbe, 0x100, 0x1, 0x376}, 0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000580)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3c, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r5}}) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) 11.174542342s ago: executing program 3 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0xe0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r9 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 10.437328728s ago: executing program 0 (id=788): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101882, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) socket$packet(0x11, 0x3, 0x300) msgctl$IPC_SET(0x0, 0x1, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x9}, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x54}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, 0x0}) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r1}}, 0xfffffd64) 9.383324384s ago: executing program 0 (id=789): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffc, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) read(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000500)={0xd}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r6 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0xf) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r7, r7, 0x0, 0x200000) 8.051368232s ago: executing program 1 (id=790): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x515041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r5, &(0x7f0000004dc0)={0x2020}, 0x2020) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2508000000480006800800060006000000060005004e230000080006001900000014000400fe8000000000000000000000000000100600010002000000050002000700000008000700", @ANYRES32=0x0, @ANYBLOB="08000200c5000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140a, 0xd01, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9040}, 0xc010) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x205, 0x1, 0x2, 0x1, 0x9, @local}, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x8000}) dup3(r0, r8, 0x80000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 7.985712053s ago: executing program 3 (id=791): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000640)={0x82, 0x800, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r3, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r7, 0x1000000000931f, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0x5) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x5c}}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) 6.468810619s ago: executing program 4 (id=792): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.090193341s ago: executing program 0 (id=793): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000240)='kyber_latency\x00', r4}, 0x18) llistxattr(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x400, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r6, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r7, 0x0, 0x0) close(r7) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x83, 0x4040) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) r9 = openat(r8, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) fcntl$lock(r9, 0x24, &(0x7f0000001800)={0x1, 0x0, 0xffffffffffffff7f, 0x5a60}) 6.060159688s ago: executing program 2 (id=794): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf) move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 5.897310591s ago: executing program 3 (id=795): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfc5e, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0xfffffffc, 0x3, 0x800], [0x9, 0x0, 0xfffffffe], [0xffffffff, 0x0, 0x0, 0x9]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r10, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffa}, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000180)={r11}) r12 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$EVIOCSFF(r12, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r12, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x9e, 0x69, 0x8, 0x2040, 0xd300, 0x16b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf6, 0x0, 0x0, 0x65, 0x80, 0xca}}]}}]}}, 0x0) 4.856444697s ago: executing program 4 (id=796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4, 0x0, 0x36}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x73682a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x6, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4.332166998s ago: executing program 2 (id=797): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000600)={{0x3, @netrom}, [@remote, @rose, @bcast, @bcast, @null, @netrom, @rose, @rose]}, &(0x7f0000000680)=0x48, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000007c0)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000800)={0x3, @null, r2}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000005c0)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x84}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='f2fs\x00', 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r8) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010067bd7000fbdbdf25010000005400018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00001d0500000008000900390000000600020011000800000000000608040001150000"], 0x68}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 3.701044539s ago: executing program 4 (id=798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1d}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000012d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) mkdirat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004890) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) flock(r5, 0xe) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x804c4700, 0x0) sendmmsg$alg(r7, &(0x7f0000001380)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="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", 0x106}, {&(0x7f0000000700)="3e3a388d6679a4d54252c4c5fcf45ad93c75220c854270f591b4d36ebac30a67f3a278700970170e8a8519577a59b4e295a857eb952ce42ce9", 0x39}], 0x2, 0x0, 0x0, 0x11}], 0x1, 0xc48d4) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000280)=""/251, 0xfb}], 0x4}, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4000, 0x0, @mcast2, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x6, 0x8, 0x6, 0x9}, {0x40, 0x7, 0x9, 0x6}, {0x101, 0xce, 0x0, 0x3}, {0x10c, 0xf, 0x6, 0x5}, {0x1, 0x6, 0xfe, 0x80000001}, {0x8, 0x7, 0x8b, 0xc}]}) 3.698025201s ago: executing program 1 (id=799): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={0x0, @default, @netrom={'nr', 0x0}, 0x955, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x401, 0x5, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) unshare(0x44000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004040000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x6c, &(0x7f0000000a40)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005e03000000006c907800000000000000000420880b00000000000008e436973c3137bcc2071000080088be00000000104000000100000045000000080022eb00000000200080000200000000e4408be63300000800655800000000b2fd71bddc0521970e3f7c4720c55ecd82c6cbe08666c74bcc04e89050a49a076335bbba03ee267a7ed95d28c9706cb42b"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r3, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x80000) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close(0x3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201010102000007"], 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65dd}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f000000000320"]) r6 = io_uring_setup(0x425b, &(0x7f0000000440)={0x0, 0x825d, 0x40, 0x1, 0x39e}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r6], 0x1) 2.704747736s ago: executing program 4 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001458b5950000004000000293e1e71af2", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a000000"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.765122191s ago: executing program 4 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffd}, 0x1c) listen(r0, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) close(0x4) syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r9 = openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r9) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.030383795s ago: executing program 0 (id=802): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff}) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r6, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000002c0)={0x20000000, 0x342, 0x9}) 319.317556ms ago: executing program 0 (id=803): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00#\a'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) ftruncate(r7, 0x6) 234.867623ms ago: executing program 3 (id=804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x8, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x29, 0xffff, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2de, 0xaaa1, 0xffffffff, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r8, 0x8028640c, 0x0) dup(r7) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2 (id=805): writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newtaction={0xb8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_ife={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x100000}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xa497}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf765}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa0000}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x5, 0x5, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@null, 0x7, 'vlan0\x00'}) kernel console output (not intermixed with test programs): T7801] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 271.979809][ T5821] usb 1-1: can't set config #0, error -71 [ 272.157795][ T5821] usb 1-1: USB disconnect, device number 8 [ 272.168807][ T30] audit: type=1400 audit(1762515468.870:411): avc: denied { create } for pid=7807 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.200112][ T30] audit: type=1400 audit(1762515469.900:412): avc: denied { bind } for pid=7809 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.405808][ T30] audit: type=1400 audit(1762515469.900:413): avc: denied { node_bind } for pid=7809 comm="syz.0.408" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 273.666109][ T7821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.393189][ T30] audit: type=1400 audit(1762515472.090:414): avc: denied { ioctl } for pid=7807 comm="syz.1.407" path="socket:[15861]" dev="sockfs" ino=15861 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 275.418045][ T7808] netlink: 'syz.1.407': attribute type 5 has an invalid length. [ 275.961530][ T7851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7851 comm=syz.2.413 [ 275.961625][ T7851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=12 sclass=netlink_audit_socket pid=7851 comm=syz.2.413 [ 275.961666][ T7851] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7851 comm=syz.2.413 [ 276.684763][ T7849] tty tty25: ldisc open failed (-12), clearing slot 24 [ 276.782062][ T30] audit: type=1400 audit(1762515472.580:415): avc: denied { audit_read } for pid=7838 comm="syz.2.413" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.150688][ T30] audit: type=1400 audit(1762515472.670:416): avc: denied { audit_write } for pid=7838 comm="syz.2.413" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 277.366355][ T3518] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 278.047881][ T3518] Bluetooth: hci5: Frame reassembly failed (-84) [ 278.200595][ T5821] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.379952][ T5821] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 278.400119][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.479779][ T5821] usb 2-1: Product: syz [ 278.611062][ T5821] usb 2-1: Manufacturer: syz [ 278.615721][ T5821] usb 2-1: SerialNumber: syz [ 279.067664][ T30] audit: type=1400 audit(1762515475.450:417): avc: denied { ioctl } for pid=7866 comm="syz.3.420" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.142231][ T5821] usb 2-1: config 0 descriptor?? [ 279.170624][ T5821] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 279.211581][ T5821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.252869][ T5821] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 279.283229][ T5821] usb 2-1: media controller created [ 279.340157][ T30] audit: type=1326 audit(1762515476.040:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 279.364105][ T5821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.480831][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 279.487289][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 280.036098][ T30] audit: type=1326 audit(1762515476.040:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 280.323878][ T30] audit: type=1326 audit(1762515476.180:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 280.360787][ T5821] DVB: Unable to find symbol mt352_attach() [ 280.409562][ T30] audit: type=1326 audit(1762515476.180:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 280.759853][ T7889] netlink: 'syz.2.424': attribute type 1 has an invalid length. [ 280.770799][ T5821] DVB: Unable to find symbol nxt6000_attach() [ 280.799087][ T5821] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 280.901242][ T30] audit: type=1326 audit(1762515476.180:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89fb18df10 code=0x7ffc0000 [ 280.924469][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.021746][ T30] audit: type=1326 audit(1762515476.180:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 281.044984][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.076385][ T30] audit: type=1326 audit(1762515476.180:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7870 comm="syz.2.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89fb18f6c9 code=0x7ffc0000 [ 281.511708][ T5821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 281.770704][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 282.011277][ T5821] dvb-usb: schedule remote query interval to 1000 msecs. [ 282.018418][ T5821] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 282.070449][ T5821] dvb-usb: bulk message failed: -22 (7/0) [ 282.076642][ T5821] dvb-usb: bulk message failed: -22 (7/0) [ 282.434199][ T5821] usb 2-1: USB disconnect, device number 15 [ 282.518271][ T5821] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 282.580062][ T7903] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 282.588824][ T7903] netlink: 40 bytes leftover after parsing attributes in process `syz.0.427'. [ 282.598111][ T7903] veth0_vlan: entered allmulticast mode [ 282.604179][ T7903] bridge0: port 3(veth0_vlan) entered blocking state [ 282.610933][ T7903] bridge0: port 3(veth0_vlan) entered disabled state [ 282.619163][ T7903] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 282.657779][ T24] IPVS: starting estimator thread 0... [ 282.800622][ T7905] IPVS: using max 62 ests per chain, 148800 per kthread [ 283.632812][ T7887] syz.3.423 (7887): drop_caches: 2 [ 284.826696][ T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 285.000591][ T5821] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 285.119288][ T24] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 285.144758][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.205710][ T24] usb 1-1: Product: syz [ 285.451472][ T24] usb 1-1: Manufacturer: syz [ 285.459069][ T24] usb 1-1: SerialNumber: syz [ 285.478254][ T24] usb 1-1: config 0 descriptor?? [ 285.489587][ T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 285.508740][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 285.692215][ T7920] dvb-usb: bulk message failed: -22 (7/0) [ 285.723908][ T5821] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 285.732650][ T5821] usb 2-1: config 5 has no interface number 0 [ 286.214607][ T5821] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 286.517512][ T5821] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.539135][ T5821] usb 2-1: config 5 interface 123 has no altsetting 0 [ 286.625668][ T5821] usb 2-1: string descriptor 0 read error: -71 [ 286.641681][ T5821] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 286.680629][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.777953][ T5821] usb 2-1: can't set config #5, error -71 [ 286.823677][ T5821] usb 2-1: USB disconnect, device number 16 [ 287.021580][ T30] audit: type=1400 audit(1762515483.720:425): avc: denied { watch watch_reads } for pid=7943 comm="syz.4.437" path="/83" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 287.250626][ T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 287.263632][ T24] usb 1-1: USB disconnect, device number 9 [ 287.310555][ T5945] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 287.885062][ T5945] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.937279][ T5945] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.992150][ T5945] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.037617][ T7951] veth1_macvtap: left promiscuous mode [ 288.047718][ T7951] macsec0: entered promiscuous mode [ 288.051941][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.072738][ T7951] macsec0: entered allmulticast mode [ 288.145410][ T5945] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.161941][ T5945] usb 3-1: invalid MIDI out EP 0 [ 288.739672][ T5945] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 290.899880][ T7980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1553 sclass=netlink_route_socket pid=7980 comm=syz.4.444 [ 291.316155][ T5945] usb 3-1: USB disconnect, device number 15 [ 291.866595][ T7996] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 292.380216][ T5945] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 292.448697][ T7996] cramfs: wrong magic [ 292.459724][ T7999] No control pipe specified [ 292.742124][ T5945] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 292.751512][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.790319][ T5945] usb 3-1: Product: syz [ 292.827966][ T5945] usb 3-1: Manufacturer: syz [ 292.890605][ T5945] usb 3-1: SerialNumber: syz [ 292.896847][ T5945] usb 3-1: config 0 descriptor?? [ 293.583764][ T5945] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 293.743163][ T30] audit: type=1400 audit(1762515490.450:426): avc: denied { checkpoint_restore } for pid=8001 comm="syz.0.448" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.979240][ T30] audit: type=1400 audit(1762515490.680:427): avc: denied { read write } for pid=8017 comm="syz.1.452" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 294.027211][ T30] audit: type=1400 audit(1762515490.680:428): avc: denied { open } for pid=8017 comm="syz.1.452" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 294.159082][ T30] audit: type=1400 audit(1762515490.850:429): avc: denied { watch } for pid=8017 comm="syz.1.452" path="pipe:[16192]" dev="pipefs" ino=16192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 294.186270][ T30] audit: type=1400 audit(1762515490.860:430): avc: denied { setattr } for pid=8017 comm="syz.1.452" name="" dev="pipefs" ino=16192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 294.212533][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 294.528201][ T30] audit: type=1400 audit(1762515491.220:431): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 294.780206][ T8018] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 294.787146][ T8018] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 295.104597][ T8018] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.370125][ T8027] wireguard0: entered promiscuous mode [ 295.371349][ T8018] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 295.375841][ T8027] wireguard0: entered allmulticast mode [ 295.430049][ T8018] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.535649][ T8018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 295.557012][ T8018] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 295.595618][ T8018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.607600][ T8018] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 296.010587][ T30] audit: type=1400 audit(1762515492.560:432): avc: denied { shutdown } for pid=8031 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.140602][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 296.186326][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 296.203679][ T30] audit: type=1400 audit(1762515492.890:433): avc: denied { bind } for pid=8034 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.180601][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 297.500719][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 297.604987][ T5945] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 297.660684][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 297.761525][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 297.785614][ T5945] usb 3-1: USB disconnect, device number 16 [ 297.894077][ T30] audit: type=1400 audit(1762515494.600:434): avc: denied { remount } for pid=8039 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 298.221620][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 298.679386][ T8051] netlink: 56 bytes leftover after parsing attributes in process `syz.0.458'. [ 299.260663][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 299.580935][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 299.740744][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 300.332662][ T8059] Zero length message leads to an empty skb [ 300.353710][ T30] audit: type=1400 audit(1762515496.940:435): avc: denied { getopt } for pid=8056 comm="syz.3.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.880599][ T979] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 301.078932][ T30] audit: type=1400 audit(1762515497.760:436): avc: denied { shutdown } for pid=8071 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.869874][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 301.894058][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 301.912220][ T30] audit: type=1400 audit(1762515497.760:437): avc: denied { read } for pid=8071 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 301.933770][ T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.986870][ T979] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.030093][ T979] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 302.138988][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.147695][ T979] usb 3-1: Product: syz [ 302.152202][ T979] usb 3-1: Manufacturer: syz [ 302.156797][ T979] usb 3-1: SerialNumber: syz [ 302.188961][ T979] usb 3-1: config 0 descriptor?? [ 303.172162][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 304.862627][ T9] usb 3-1: USB disconnect, device number 17 [ 305.554046][ T8108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.733814][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 306.862579][ T30] audit: type=1400 audit(1762515503.540:438): avc: denied { read } for pid=8116 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 308.720854][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 309.478281][ T8143] sp0: Synchronizing with TNC [ 309.919261][ T30] audit: type=1400 audit(1762515506.210:439): avc: denied { read write } for pid=8134 comm="syz.4.477" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 310.714274][ T30] audit: type=1400 audit(1762515506.210:440): avc: denied { open } for pid=8134 comm="syz.4.477" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 310.975241][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.480'. [ 311.017067][ T30] audit: type=1400 audit(1762515507.650:441): avc: denied { mount } for pid=8149 comm="syz.3.480" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 312.280045][ T8166] Bluetooth: MGMT ver 1.23 [ 312.747856][ T30] audit: type=1400 audit(1762515509.450:442): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 312.791037][ T5883] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 312.927097][ T24] usb 1-1: device descriptor read/all, error -71 [ 312.950739][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 312.964357][ T5883] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 312.984620][ T5883] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 313.010616][ T5821] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.045592][ T30] audit: type=1400 audit(1762515509.750:443): avc: denied { setopt } for pid=8173 comm="syz.0.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 313.070390][ T30] audit: type=1400 audit(1762515509.750:444): avc: denied { wake_alarm } for pid=8173 comm="syz.0.486" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.196751][ T5883] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.200550][ T1207] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 313.206150][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.871477][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.933976][ T5883] usb 5-1: Product: 媲鏲ꒀ㴠㲄䛩蒕冬ᶧ꯯铍뤃㘸껔훢友⇅ᎄ㥈⍊鈴ㆎߚ慳檷᷃ᣅϞ䫄蹰꺒蛘㙢⊃␵ᨂ諝䃰拓藵뷤芵ꩭ䏶 [ 313.952677][ T5883] usb 5-1: Manufacturer: 鞛덂ⴳ夵裐ㆊ㶱⽪诇翘掑쮘觞⼨䫛꣗枼恏麹폦﮼ᾰ媑㿙寄∧썔쇐묣鬁걳ᷰ䖷ྑ㎙殎剨䝲ᣴ㧩⒘↉⚦麁庢ﺀ븱白兼厷얭ꐀᑫ荧봚퍯怞⥳蝼ꦔ㾛埃Ɑϕ椾鄨Ք厺ᚘ㓁嵜学䂊⯈鴖ˊ톇嚵弳딣蛪馯 [ 313.952873][ T5821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.981362][ T5883] usb 5-1: SerialNumber: 삓썲঳贬ᓮ禱酮쫪鿁眡쒛嵟蔅㯗㮛岺݇㯿䱼惛燛跫䒅퇤줺殟뿓節閁ʡੴ㓨潩훓氿悞믨玆ႅࡴ뛃姰⚇邤﫼受竢殡憙룓鑃훻┴瀰鏞㺝镪ᇼ좖넢䞾ࢄ퍃緒冸Ძ隌莝껞⦟蔆坞ἦ᜚棻校퇇솙 [ 314.116139][ T8177] netlink: 72 bytes leftover after parsing attributes in process `syz.0.486'. [ 314.137469][ T1207] usb 4-1: Using ep0 maxpacket: 32 [ 314.197649][ T1207] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.205991][ T1207] usb 4-1: config 0 has no interface number 0 [ 314.337967][ T5883] cdc_ncm 5-1:1.0: bind() failure [ 314.370789][ T1207] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.388819][ T5821] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.398198][ T1207] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.414219][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.420383][ T5883] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 314.425163][ T1207] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 314.471642][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.491349][ T5821] usb 2-1: config 0 descriptor?? [ 314.518050][ T1207] usb 4-1: config 0 descriptor?? [ 314.525522][ T5883] cdc_ncm 5-1:1.1: bind() failure [ 314.578012][ T5883] usb 5-1: USB disconnect, device number 11 [ 314.901227][ T30] audit: type=1400 audit(1762515511.600:445): avc: denied { module_request } for pid=8180 comm="syz.4.488" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 315.965376][ T5945] usb 2-1: USB disconnect, device number 17 [ 317.403436][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.409751][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.592192][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 317.603240][ T1207] usbhid 4-1:0.1: can't add hid device: -71 [ 317.685973][ T1207] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 317.720279][ T1207] usb 4-1: USB disconnect, device number 13 [ 317.900874][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 318.140631][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 318.263340][ T8215] process 'syz.0.493' launched './file0' with NULL argv: empty string added [ 318.753248][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.763936][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 318.773400][ T30] audit: type=1400 audit(1762515514.980:446): avc: denied { execute_no_trans } for pid=8209 comm="syz.0.493" path="/90/file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.945452][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 318.970565][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 319.062714][ T30] audit: type=1400 audit(1762515515.640:447): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 319.100805][ T9] usb 5-1: Product: syz [ 319.105045][ T9] usb 5-1: Manufacturer: syz [ 319.175993][ T9] usb 5-1: SerialNumber: syz [ 319.186598][ T9] usb 5-1: config 0 descriptor?? [ 319.419402][ T8222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.495'. [ 319.585158][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 320.407546][ T30] audit: type=1400 audit(1762515516.780:448): avc: denied { create } for pid=8219 comm="syz.3.496" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 320.430664][ T30] audit: type=1400 audit(1762515516.790:449): avc: denied { link } for pid=8219 comm="syz.3.496" name="#8" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 320.453951][ T30] audit: type=1400 audit(1762515516.790:450): avc: denied { rename } for pid=8219 comm="syz.3.496" name="#9" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 320.755545][ T8232] xt_hashlimit: max too large, truncated to 1048576 [ 320.772465][ T1207] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 320.799668][ T8232] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 320.932466][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 320.980574][ T1207] usb 3-1: Using ep0 maxpacket: 32 [ 320.997872][ T1207] usb 3-1: config 0 has no interfaces? [ 321.001065][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'. [ 321.082720][ T1207] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 321.252450][ T5876] usb 5-1: USB disconnect, device number 12 [ 321.271073][ T1207] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 321.300583][ T1207] usb 3-1: Product: syz [ 321.795907][ T1207] usb 3-1: Manufacturer: syz [ 321.817088][ T1207] usb 3-1: SerialNumber: syz [ 321.861438][ T1207] usb 3-1: config 0 descriptor?? [ 322.580636][ T30] audit: type=1400 audit(1762515519.030:451): avc: denied { write } for pid=8241 comm="syz.4.501" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 322.613036][ T9] usb 3-1: USB disconnect, device number 18 [ 322.641794][ T30] audit: type=1400 audit(1762515519.040:452): avc: denied { open } for pid=8241 comm="syz.4.501" path="/95/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 323.124179][ T30] audit: type=1400 audit(1762515519.820:453): avc: denied { read } for pid=8230 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.057879][ T8266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=8266 comm=syz.4.504 [ 324.607778][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 325.606768][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 325.704023][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.506'. [ 326.055367][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 326.074756][ T30] audit: type=1400 audit(1762515522.220:454): avc: denied { read } for pid=8269 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 326.753118][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056fb1400: rx timeout, send abort [ 326.763255][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888056fb1400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 326.825424][ T30] audit: type=1400 audit(1762515523.490:455): avc: denied { read } for pid=5167 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 326.825482][ T30] audit: type=1400 audit(1762515523.490:456): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.825507][ T30] audit: type=1400 audit(1762515523.490:457): avc: denied { search } for pid=5167 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.825531][ T30] audit: type=1400 audit(1762515523.490:458): avc: denied { add_name } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.825554][ T30] audit: type=1400 audit(1762515523.490:459): avc: denied { create } for pid=5167 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.825582][ T30] audit: type=1400 audit(1762515523.500:460): avc: denied { append open } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.825605][ T30] audit: type=1400 audit(1762515523.500:461): avc: denied { getattr } for pid=5167 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 326.840566][ T8278] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.965476][ T30] audit: type=1400 audit(1762515524.670:462): avc: denied { getopt } for pid=8285 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 328.468713][ T30] audit: type=1400 audit(1762515525.050:463): avc: denied { map } for pid=8284 comm="syz.4.510" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 329.062080][ T8298] netlink: 'syz.3.509': attribute type 12 has an invalid length. [ 329.116080][ T8306] netlink: 'syz.0.511': attribute type 1 has an invalid length. [ 329.161790][ T8293] tty tty1: ldisc open failed (-12), clearing slot 0 [ 329.168782][ T8290] tty tty1: ldisc open failed (-12), clearing slot 0 [ 329.226073][ T8299] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 329.272435][ T8309] netlink: 'syz.1.513': attribute type 4 has an invalid length. [ 330.095707][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 330.986310][ T5905] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 331.272011][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 331.272026][ T30] audit: type=1400 audit(1762515527.970:497): avc: denied { write } for pid=8322 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 331.278414][ T8326] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 331.298025][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.352240][ T5905] usb 3-1: device descriptor read/64, error -71 [ 331.537949][ T30] audit: type=1400 audit(1762515528.190:498): avc: denied { create } for pid=8329 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.560639][ T30] audit: type=1400 audit(1762515528.230:499): avc: denied { write } for pid=8329 comm="syz.0.518" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.664116][ T8326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 331.701261][ T5905] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 331.733654][ T8334] Invalid ELF header magic: != ELF [ 331.780705][ T30] audit: type=1400 audit(1762515528.320:500): avc: denied { map } for pid=8329 comm="syz.0.518" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 331.871018][ T5905] usb 3-1: device descriptor read/64, error -71 [ 332.016436][ T5905] usb usb3-port1: attempt power cycle [ 332.037701][ T30] audit: type=1400 audit(1762515528.440:501): avc: denied { sys_module } for pid=8327 comm="syz.4.519" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 332.067881][ T30] audit: type=1400 audit(1762515528.440:502): avc: denied { module_load } for pid=8327 comm="syz.4.519" path="/100/bus" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 332.101302][ T30] audit: type=1400 audit(1762515528.490:503): avc: denied { create } for pid=8327 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.123365][ T30] audit: type=1400 audit(1762515528.700:504): avc: denied { execmem } for pid=8329 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 332.143123][ T30] audit: type=1400 audit(1762515528.700:505): avc: denied { execute } for pid=8329 comm="syz.0.518" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 332.167362][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.242161][ T30] audit: type=1400 audit(1762515528.740:506): avc: denied { shutdown } for pid=8327 comm="syz.4.519" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 332.262453][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.370583][ T5905] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 332.439952][ T5905] usb 3-1: device descriptor read/8, error -71 [ 333.101029][ T5905] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 333.121249][ T5905] usb 3-1: device descriptor read/8, error -71 [ 333.338999][ T5905] usb usb3-port1: unable to enumerate USB device [ 333.465087][ T8352] netlink: 52 bytes leftover after parsing attributes in process `syz.0.523'. [ 333.534067][ T3518] Bluetooth: hci5: Frame reassembly failed (-84) [ 333.832447][ T8361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.524'. [ 334.195125][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 334.561211][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.572499][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 334.585396][ T5876] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.687395][ T5876] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.770846][ T8367] tipc: Disabling bearer [ 334.868728][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.879555][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.889778][ T5876] usb 1-1: Product: syz [ 335.328572][ T5876] usb 1-1: Manufacturer: syz [ 335.335410][ T5876] usb 1-1: SerialNumber: syz [ 335.591972][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 336.119115][ T8376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 336.198177][ T8376] libceph: resolve '0..' (ret=-3): failed [ 336.530547][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 336.530560][ T30] audit: type=1400 audit(1762515533.220:541): avc: denied { read write } for pid=8378 comm="syz.2.529" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 336.637898][ T30] audit: type=1400 audit(1762515533.220:542): avc: denied { open } for pid=8378 comm="syz.2.529" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 336.664331][ T30] audit: type=1400 audit(1762515533.270:543): avc: denied { create } for pid=8378 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.859403][ T30] audit: type=1400 audit(1762515533.330:544): avc: denied { connect } for pid=8378 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.880165][ T30] audit: type=1400 audit(1762515533.330:545): avc: denied { setopt } for pid=8378 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.901056][ T30] audit: type=1400 audit(1762515533.330:546): avc: denied { name_bind } for pid=8378 comm="syz.2.529" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 336.924477][ T30] audit: type=1400 audit(1762515533.340:547): avc: denied { bind } for pid=8378 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.944905][ T30] audit: type=1400 audit(1762515533.340:548): avc: denied { read } for pid=8378 comm="syz.2.529" path="socket:[18886]" dev="sockfs" ino=18886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 337.016363][ T8352] batman_adv: batadv0: Adding interface: gretap2 [ 337.023265][ T8352] batman_adv: batadv0: Interface activated: gretap2 [ 337.065841][ T30] audit: type=1400 audit(1762515533.770:549): avc: denied { module_request } for pid=8351 comm="syz.0.523" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 337.614966][ T30] audit: type=1400 audit(1762515534.320:550): avc: denied { create } for pid=8391 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.330768][ T5876] cdc_ncm 1-1:1.0: bind() failure [ 339.346401][ T5876] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 339.385526][ T5876] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 339.422645][ T5876] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 339.446838][ T8408] netlink: 'syz.4.534': attribute type 4 has an invalid length. [ 339.493858][ T5876] usb 1-1: USB disconnect, device number 12 [ 339.539958][ T8405] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 339.566125][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.575243][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.346648][ T8426] netlink: 48 bytes leftover after parsing attributes in process `syz.2.537'. [ 341.170335][ T8425] pim6reg: entered allmulticast mode [ 341.418883][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 341.506212][ T8436] lo speed is unknown, defaulting to 1000 [ 341.512338][ T8436] lo speed is unknown, defaulting to 1000 [ 341.518472][ T8436] lo speed is unknown, defaulting to 1000 [ 341.674051][ T8436] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 341.751959][ T8442] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 341.796725][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 341.796757][ T30] audit: type=1400 audit(1762515538.470:570): avc: denied { setopt } for pid=8437 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.159166][ T8436] lo speed is unknown, defaulting to 1000 [ 342.173810][ T30] audit: type=1400 audit(1762515538.480:571): avc: denied { write } for pid=8437 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 342.215548][ T8436] lo speed is unknown, defaulting to 1000 [ 342.248846][ T30] audit: type=1400 audit(1762515538.500:572): avc: denied { ioctl } for pid=8437 comm="syz.4.539" path="socket:[18967]" dev="sockfs" ino=18967 ioctlcmd=0x6617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.288106][ T8436] lo speed is unknown, defaulting to 1000 [ 342.426999][ T8436] lo speed is unknown, defaulting to 1000 [ 342.467728][ T8436] lo speed is unknown, defaulting to 1000 [ 343.045257][ T30] audit: type=1400 audit(1762515539.750:573): avc: denied { read write } for pid=8446 comm="syz.3.542" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 343.283400][ T30] audit: type=1400 audit(1762515539.750:574): avc: denied { open } for pid=8446 comm="syz.3.542" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 343.559119][ T8452] netlink: 64 bytes leftover after parsing attributes in process `syz.0.543'. [ 343.836940][ T30] audit: type=1400 audit(1762515539.870:575): avc: denied { bind } for pid=8446 comm="syz.3.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 343.911616][ T8453] bond3: Unable to set up delay as MII monitoring is disabled [ 344.280822][ T8453] bond3 (unregistering): Released all slaves [ 344.288714][ T30] audit: type=1400 audit(1762515540.740:576): avc: denied { create } for pid=8457 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 344.319684][ T30] audit: type=1400 audit(1762515540.900:577): avc: denied { name_bind } for pid=8459 comm="syz.1.544" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 344.719321][ T30] audit: type=1400 audit(1762515540.980:578): avc: denied { node_bind } for pid=8459 comm="syz.1.544" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 344.804636][ T30] audit: type=1400 audit(1762515541.020:579): avc: denied { map } for pid=8457 comm="syz.4.546" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.092098][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 345.512842][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 345.520023][ T9] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.531791][ T9] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.557175][ T9] usb 2-1: config 128 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.714639][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= c.00 [ 345.735844][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.786814][ T8469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 346.678690][ T9] usbhid 2-1:128.0: can't add hid device: -71 [ 346.834399][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 346.834415][ T30] audit: type=1400 audit(1762515543.540:587): avc: denied { getopt } for pid=8487 comm="syz.0.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.837023][ T9] usbhid 2-1:128.0: probe with driver usbhid failed with error -71 [ 346.889594][ T9] usb 2-1: USB disconnect, device number 18 [ 347.750785][ T30] audit: type=1400 audit(1762515544.170:588): avc: denied { ioctl } for pid=8455 comm="syz.2.545" path="socket:[19029]" dev="sockfs" ino=19029 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.810598][ T30] audit: type=1400 audit(1762515544.180:589): avc: denied { read } for pid=8455 comm="syz.2.545" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 347.852681][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 347.880843][ T30] audit: type=1400 audit(1762515544.190:590): avc: denied { open } for pid=8455 comm="syz.2.545" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.040840][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 348.070952][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 348.079095][ T24] usb 4-1: config 0 has no interface number 0 [ 348.099346][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.118767][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.149013][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 348.160627][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.223222][ T24] usb 4-1: config 0 descriptor?? [ 348.268318][ T30] audit: type=1400 audit(1762515544.960:591): avc: denied { create } for pid=8491 comm="syz.1.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.357033][ T8482] syz.4.549 (8482): drop_caches: 2 [ 348.671089][ T30] audit: type=1400 audit(1762515545.370:592): avc: denied { name_bind } for pid=8496 comm="syz.2.554" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 349.363651][ T30] audit: type=1400 audit(1762515546.050:593): avc: denied { mount } for pid=8485 comm="syz.3.552" name="/" dev="ramfs" ino=18218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 349.830399][ T30] audit: type=1800 audit(1762515546.530:594): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.556" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 350.593980][ T30] audit: type=1400 audit(1762515547.300:595): avc: denied { read } for pid=8514 comm="syz.1.557" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 350.690278][ T30] audit: type=1400 audit(1762515547.300:596): avc: denied { open } for pid=8514 comm="syz.1.557" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 351.174480][ T8515] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 351.181012][ T8515] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.212565][ T8515] vhci_hcd vhci_hcd.0: Device attached [ 351.271719][ T8521] usbip_core: unknown command [ 351.276565][ T8521] vhci_hcd: unknown pdu 184549376 [ 351.490603][ T5883] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 351.540668][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 351.680707][ T8521] usbip_core: unknown command [ 351.702473][ T12] vhci_hcd: stop threads [ 351.793925][ T8526] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 352.141075][ T12] vhci_hcd: release socket [ 352.147219][ T12] vhci_hcd: disconnect device [ 352.224480][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 352.239904][ T9] usb 2-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 352.310365][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.399427][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 352.399438][ T30] audit: type=1400 audit(1762515549.100:598): avc: denied { unlink } for pid=5813 comm="syz-executor" name="file0" dev="tmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 352.495886][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 352.512265][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.524062][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 352.526061][ T9] usb 2-1: Product: syz [ 352.530038][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 352.537353][ T30] audit: type=1400 audit(1762515549.180:599): avc: denied { read write } for pid=8528 comm="syz.4.559" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 352.567639][ T9] usb 2-1: Manufacturer: syz [ 352.572532][ T9] usb 2-1: SerialNumber: syz [ 352.583356][ T30] audit: type=1400 audit(1762515549.180:600): avc: denied { open } for pid=8528 comm="syz.4.559" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 352.608096][ T9] usb 2-1: config 0 descriptor?? [ 352.966984][ T24] usb 4-1: USB disconnect, device number 14 [ 352.984844][ T30] audit: type=1400 audit(1762515549.190:601): avc: denied { ioctl } for pid=8528 comm="syz.4.559" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 353.378177][ T30] audit: type=1400 audit(1762515549.360:602): avc: denied { ioctl } for pid=8528 comm="syz.4.559" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 353.639217][ T30] audit: type=1400 audit(1762515550.330:603): avc: denied { mount } for pid=8535 comm="syz.2.560" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 353.769094][ T30] audit: type=1400 audit(1762515550.400:604): avc: denied { read write } for pid=8535 comm="syz.2.560" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 353.794281][ T30] audit: type=1400 audit(1762515550.400:605): avc: denied { open } for pid=8535 comm="syz.2.560" path="/117/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 353.972012][ T30] audit: type=1400 audit(1762515550.620:606): avc: denied { name_bind 0x1000000 } for pid=8544 comm="syz.3.561" path="socket:[18283]" dev="sockfs" ino=18283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 354.120157][ T30] audit: type=1400 audit(1762515550.650:607): avc: denied { read } for pid=8544 comm="syz.3.561" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 354.141334][ T8549] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.170262][ T8549] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.206025][ T8549] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.228694][ T8549] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.542074][ T9] usb 2-1: USB disconnect, device number 19 [ 355.232469][ T8558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.564'. [ 356.077056][ T8574] evm: overlay not supported [ 356.091957][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 356.273246][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 356.291703][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 356.309808][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 356.865648][ T5883] vhci_hcd: vhci_device speed not set [ 358.818185][ T8601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2336 sclass=netlink_route_socket pid=8601 comm=syz.1.573 [ 360.205775][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 360.205791][ T30] audit: type=1400 audit(1762515556.910:635): avc: denied { read write } for pid=8611 comm="syz.0.576" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 360.875399][ T30] audit: type=1400 audit(1762515556.910:636): avc: denied { open } for pid=8611 comm="syz.0.576" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 360.900592][ T30] audit: type=1400 audit(1762515556.910:637): avc: denied { ioctl } for pid=8611 comm="syz.0.576" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 361.127294][ T30] audit: type=1400 audit(1762515557.270:638): avc: denied { connect } for pid=8612 comm="syz.1.575" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.648105][ T8631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8631 comm=syz.2.578 [ 363.161199][ T30] audit: type=1400 audit(1762515559.810:639): avc: denied { mounton } for pid=8640 comm="syz.0.582" path="/proc/483/task" dev="proc" ino=19227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 363.430582][ T30] audit: type=1400 audit(1762515559.820:640): avc: denied { mount } for pid=8640 comm="syz.0.582" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 364.192777][ T30] audit: type=1400 audit(1762515560.900:641): avc: denied { mount } for pid=8626 comm="syz.1.579" name="/" dev="rpc_pipefs" ino=19611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 364.222337][ T8630] Set syz0 is full, maxelem 0 reached [ 364.302037][ T30] audit: type=1400 audit(1762515560.920:642): avc: denied { create } for pid=8626 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 364.405155][ T30] audit: type=1400 audit(1762515560.930:643): avc: denied { listen } for pid=8626 comm="syz.1.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 366.473499][ T30] audit: type=1400 audit(1762515562.810:644): avc: denied { firmware_load } for pid=8662 comm="syz.4.586" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 366.653108][ T8668] syz.4.586 (8668) used greatest stack depth: 19288 bytes left [ 367.440381][ T8669] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 367.449396][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 367.488515][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.587'. [ 367.710617][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 367.822155][ T30] audit: type=1400 audit(1762515564.520:645): avc: denied { read write } for pid=8658 comm="syz.0.585" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 367.902138][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 367.910451][ T9] usb 2-1: config 0 has no interface number 0 [ 367.934629][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 367.945095][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.978514][ T30] audit: type=1400 audit(1762515564.520:646): avc: denied { open } for pid=8658 comm="syz.0.585" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.010172][ T9] usb 2-1: Product: syz [ 368.068489][ T30] audit: type=1400 audit(1762515564.560:647): avc: denied { ioctl } for pid=8658 comm="syz.0.585" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 368.209748][ T9] usb 2-1: Manufacturer: syz [ 368.213602][ T6476] Bluetooth: hci5: Frame reassembly failed (-84) [ 368.238865][ T9] usb 2-1: SerialNumber: syz [ 368.292088][ T9] usb 2-1: config 0 descriptor?? [ 368.637528][ T8693] overlayfs: missing 'lowerdir' [ 368.984047][ T30] audit: type=1400 audit(1762515565.340:648): avc: denied { mounton } for pid=8689 comm="syz.3.592" path="/110/bus" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 369.129587][ T9] yurex 2-1:0.50: Could not find endpoints [ 369.983484][ T9] usb 2-1: USB disconnect, device number 20 [ 369.997904][ T30] audit: type=1400 audit(1762515565.950:649): avc: denied { write } for pid=8672 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 370.182455][ T30] audit: type=1400 audit(1762515566.890:650): avc: denied { write } for pid=8700 comm="syz.3.593" path="socket:[19708]" dev="sockfs" ino=19708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 370.300886][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 370.330971][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.490755][ T30] audit: type=1400 audit(1762515567.170:651): avc: denied { connect } for pid=8700 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.886138][ T30] audit: type=1400 audit(1762515567.170:652): avc: denied { write } for pid=8700 comm="syz.3.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.913091][ T30] audit: type=1400 audit(1762515567.180:653): avc: denied { ioctl } for pid=8700 comm="syz.3.593" path="socket:[19362]" dev="sockfs" ino=19362 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.888290][ T30] audit: type=1400 audit(1762515568.160:654): avc: denied { ioctl } for pid=8706 comm="syz.1.595" path="socket:[19721]" dev="sockfs" ino=19721 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 371.889175][ T8714] fuse: Bad value for 'user_id' [ 371.936521][ T30] audit: type=1400 audit(1762515568.160:655): avc: denied { open } for pid=8706 comm="syz.1.595" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 372.011597][ T8714] fuse: Bad value for 'user_id' [ 372.073261][ T30] audit: type=1400 audit(1762515568.180:656): avc: denied { ioctl } for pid=8706 comm="syz.1.595" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 372.169917][ T30] audit: type=1400 audit(1762515568.640:657): avc: denied { create } for pid=8707 comm="syz.3.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 372.312674][ T8714] Set syz1 is full, maxelem 14 reached [ 372.329353][ T30] audit: type=1400 audit(1762515569.030:658): avc: denied { write } for pid=8723 comm="syz.1.598" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 372.790249][ T30] audit: type=1400 audit(1762515569.110:659): avc: denied { setopt } for pid=8720 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 372.817264][ T8724] syz_tun: entered allmulticast mode [ 374.497841][ T30] audit: type=1400 audit(1762515571.140:660): avc: denied { write } for pid=8731 comm="syz.4.600" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 374.622468][ T30] audit: type=1400 audit(1762515571.320:661): avc: denied { append } for pid=8743 comm="syz.0.601" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.860242][ T8746] loop6: detected capacity change from 0 to 524288000 [ 374.901162][ T8745] batman_adv: batadv0: Adding interface: ipvlan2 [ 375.021753][ T8745] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.126006][ T8755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.603'. [ 375.165281][ T8745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.306354][ T8745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.316426][ T8745] batman_adv: batadv0: Interface activated: ipvlan2 [ 375.343495][ T8751] Device name not specified. [ 375.343495][ T8751] [ 375.962181][ T30] audit: type=1400 audit(1762515572.290:662): avc: denied { link } for pid=8749 comm="syz.4.602" name="file1" dev="overlay" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 376.650704][ T30] audit: type=1400 audit(1762515572.840:663): avc: denied { setopt } for pid=8747 comm="syz.3.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.356095][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.362623][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 378.368777][ T30] audit: type=1400 audit(1762515575.060:665): avc: denied { getopt } for pid=8780 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.388655][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.377413][ T8794] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.492799][ T30] audit: type=1400 audit(1762515576.120:666): avc: denied { append } for pid=8787 comm="syz.0.609" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.525722][ T9] lo speed is unknown, defaulting to 1000 [ 379.535707][ T30] audit: type=1400 audit(1762515576.130:667): avc: denied { mount } for pid=8787 comm="syz.0.609" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 379.757270][ T3518] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 379.776526][ T3518] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 379.923651][ T3518] Bluetooth: hci5: Frame reassembly failed (-84) [ 379.943891][ T8763] syz.2.604 (8763): drop_caches: 2 [ 381.684737][ T30] audit: type=1400 audit(1762515578.390:668): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 381.781076][ T8817] netlink: 80 bytes leftover after parsing attributes in process `syz.2.613'. [ 381.792370][ T30] audit: type=1400 audit(1762515578.480:669): avc: denied { read } for pid=8811 comm="syz.2.613" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 381.850755][ T30] audit: type=1400 audit(1762515578.480:670): avc: denied { open } for pid=8811 comm="syz.2.613" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 381.874542][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 381.882062][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 381.915687][ T30] audit: type=1400 audit(1762515578.500:671): avc: denied { ioctl } for pid=8811 comm="syz.2.613" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 382.712421][ T30] audit: type=1400 audit(1762515578.730:672): avc: denied { map } for pid=8819 comm="syz.3.616" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 382.736261][ T30] audit: type=1400 audit(1762515578.730:673): avc: denied { create } for pid=8819 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 383.108162][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 383.126498][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 383.400689][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 383.492359][ T30] audit: type=1400 audit(1762515579.480:674): avc: denied { write } for pid=8814 comm="syz.4.614" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 383.660811][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 383.668091][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.728120][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 383.800554][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.840573][ T9] usb 1-1: Product: syz [ 383.894009][ T9] usb 1-1: Manufacturer: syz [ 383.898696][ T9] usb 1-1: SerialNumber: syz [ 383.989199][ T8834] xt_NFQUEUE: number of total queues is 0 [ 384.089477][ T8835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=8835 comm=syz.3.617 [ 384.285250][ T9] usb 1-1: config 0 descriptor?? [ 384.341898][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 384.725051][ T8842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.310581][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 386.223275][ T6476] usb 1-1: Failed to submit usb control message: -110 [ 386.230370][ T6476] usb 1-1: unable to send the bmi data to the device: -110 [ 386.255189][ T5905] usb 1-1: USB disconnect, device number 13 [ 386.261656][ T6476] usb 1-1: unable to get target info from device [ 386.268067][ T6476] usb 1-1: could not get target info (-110) [ 386.286951][ T6476] usb 1-1: could not probe fw (-110) [ 386.451482][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 386.463893][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.472206][ T24] usb 4-1: config 0 has no interface number 0 [ 386.481232][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.631089][ T8858] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 386.638683][ T30] audit: type=1400 audit(1762515583.330:675): avc: denied { write } for pid=8851 comm="syz.0.622" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 386.641645][ T8858] xt_nfacct: accounting object `syz1' does not exist [ 386.680649][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.690710][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 386.699753][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.719191][ T24] usb 4-1: config 0 descriptor?? [ 386.735301][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 386.747943][ T8861] trusted_key: encrypted_key: insufficient parameters specified [ 386.922532][ T30] audit: type=1400 audit(1762515583.630:676): avc: denied { sqpoll } for pid=8851 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 389.943005][ T8882] hfsplus: unable to find HFS+ superblock [ 391.318625][ T8897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.697139][ T24] usbhid 4-1:0.1: can't add hid device: -71 [ 391.703668][ T24] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 391.741549][ T24] usb 4-1: USB disconnect, device number 15 [ 391.860607][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 392.033933][ T30] audit: type=1400 audit(1762515588.670:677): avc: denied { connect } for pid=8898 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 392.088285][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 392.100587][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.133037][ T9] usb 1-1: Product: syz [ 392.142906][ T9] usb 1-1: Manufacturer: syz [ 392.145066][ T30] audit: type=1400 audit(1762515588.670:678): avc: denied { name_connect } for pid=8898 comm="syz.1.631" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 392.235870][ T8903] sit1: entered allmulticast mode [ 392.362498][ T9] usb 1-1: SerialNumber: syz [ 392.547487][ T9] usb 1-1: config 0 descriptor?? [ 392.562717][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 392.646896][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 392.656671][ T8912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.633'. [ 392.943567][ T9] gspca_sunplus: reg_r err -71 [ 392.957657][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 392.996604][ T9] usb 1-1: USB disconnect, device number 14 [ 393.471619][ T8916] hub 1-0:1.0: USB hub found [ 393.478072][ T8916] hub 1-0:1.0: 1 port detected [ 393.835270][ T8918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33792 sclass=netlink_route_socket pid=8918 comm=syz.2.635 [ 394.180463][ T30] audit: type=1400 audit(1762515590.880:679): avc: denied { bind } for pid=8920 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.206987][ T30] audit: type=1400 audit(1762515590.880:680): avc: denied { name_bind } for pid=8920 comm="syz.0.636" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 394.240921][ T30] audit: type=1400 audit(1762515590.880:681): avc: denied { node_bind } for pid=8920 comm="syz.0.636" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 394.414360][ T30] audit: type=1400 audit(1762515591.040:682): avc: denied { bind } for pid=8920 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.144630][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'. [ 395.323009][ T30] audit: type=1400 audit(1762515591.950:683): avc: denied { create } for pid=8920 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 395.531847][ T30] audit: type=1400 audit(1762515592.220:684): avc: denied { map } for pid=8932 comm="syz.2.639" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.756197][ T30] audit: type=1400 audit(1762515592.220:685): avc: denied { execute } for pid=8932 comm="syz.2.639" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.780373][ T8942] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 3, id = 0 [ 396.324357][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 396.483825][ T9] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 396.492090][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.536521][ T9] usb 3-1: config 0 has no interface number 0 [ 396.554013][ T30] audit: type=1400 audit(1762515593.250:686): avc: denied { connect } for pid=8922 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 396.586664][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 396.635127][ T9] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 155, setting to 64 [ 396.676684][ T9] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.719723][ T9] usb 3-1: config 0 interface 52 has no altsetting 0 [ 396.729303][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 396.857245][ T9] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 396.970596][ T9] usb 3-1: Manufacturer: syz [ 397.028458][ T9] usb 3-1: config 0 descriptor?? [ 397.170684][ T9] hub 3-1:0.52: bad descriptor, ignoring hub [ 397.197913][ T9] hub 3-1:0.52: probe with driver hub failed with error -5 [ 397.730667][ T9] usb 3-1: Can not set alternate setting to 1, error: -71 [ 397.737895][ T9] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 397.808868][ T9] usb 3-1: USB disconnect, device number 23 [ 397.870426][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 398.426554][ T8947] syz.0.641 (8947): drop_caches: 2 [ 399.564127][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 399.789512][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 399.991089][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 399.991112][ T30] audit: type=1400 audit(1762515596.690:692): avc: denied { ioctl } for pid=8970 comm="syz.2.647" path="socket:[20065]" dev="sockfs" ino=20065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.224566][ T30] audit: type=1400 audit(1762515596.930:693): avc: denied { load_policy } for pid=8970 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 401.016001][ T8973] SELinux: failed to load policy [ 401.576774][ T8980] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.649'. [ 401.764436][ T8981] kernel profiling enabled (shift: 17) [ 402.271858][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 403.150621][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 403.183209][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.212953][ T9] usb 5-1: config 0 has no interface number 0 [ 403.240605][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.308722][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.624134][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 404.163585][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.221013][ T9] usb 5-1: config 0 descriptor?? [ 404.232645][ T8996] cgroup: release_agent respecified [ 404.464293][ T9] usb 5-1: can't set config #0, error -71 [ 404.480061][ T9] usb 5-1: USB disconnect, device number 13 [ 406.180679][ T889] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 406.337989][ T30] audit: type=1400 audit(1762515603.000:694): avc: denied { mount } for pid=9008 comm="syz.4.659" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 406.441996][ T889] usb 2-1: Using ep0 maxpacket: 8 [ 406.447265][ T30] audit: type=1400 audit(1762515603.070:695): avc: denied { write } for pid=9011 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 406.470064][ T889] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.482014][ T889] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.493072][ T889] usb 2-1: config 128 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.527265][ T889] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= c.00 [ 406.560545][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.609316][ T30] audit: type=1400 audit(1762515603.310:696): avc: denied { read } for pid=9023 comm="syz.4.660" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.659466][ T30] audit: type=1400 audit(1762515603.310:697): avc: denied { open } for pid=9023 comm="syz.4.660" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 406.796539][ T30] audit: type=1400 audit(1762515603.490:698): avc: denied { execmem } for pid=9023 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 406.898339][ T889] usbhid 2-1:128.0: can't add hid device: -71 [ 407.012140][ T889] usbhid 2-1:128.0: probe with driver usbhid failed with error -71 [ 407.318445][ T30] audit: type=1400 audit(1762515603.590:699): avc: denied { read write } for pid=8999 comm="syz.1.656" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.353580][ T889] usb 2-1: USB disconnect, device number 21 [ 407.509144][ T30] audit: type=1400 audit(1762515603.590:700): avc: denied { open } for pid=8999 comm="syz.1.656" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.602736][ T30] audit: type=1400 audit(1762515603.590:701): avc: denied { ioctl } for pid=8999 comm="syz.1.656" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 407.700564][ T30] audit: type=1400 audit(1762515603.790:702): avc: denied { create } for pid=9007 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.845180][ T30] audit: type=1400 audit(1762515603.790:703): avc: denied { write } for pid=9007 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.390566][ T9040] lo speed is unknown, defaulting to 1000 [ 408.772736][ T9045] bridge0: port 1(gretap0) entered blocking state [ 408.779751][ T9045] bridge0: port 1(gretap0) entered disabled state [ 408.789120][ T9045] gretap0: entered allmulticast mode [ 408.810714][ T9045] gretap0: entered promiscuous mode [ 409.640593][ T5883] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 409.820821][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 409.827853][ T5883] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.844401][ T5883] usb 5-1: config 0 has no interface number 0 [ 409.852071][ T5883] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.975094][ T5883] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.995405][ T5883] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 410.012266][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.102108][ T5883] usb 5-1: config 0 descriptor?? [ 410.321133][ T9061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.667'. [ 412.387375][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 412.387392][ T30] audit: type=1400 audit(1762515609.090:745): avc: denied { map_read map_write } for pid=9065 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 412.617839][ T30] audit: type=1400 audit(1762515609.120:746): avc: denied { module_request } for pid=9065 comm="syz.3.668" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 412.985524][ T30] audit: type=1400 audit(1762515609.180:747): avc: denied { read } for pid=9065 comm="syz.3.668" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 413.063676][ T30] audit: type=1400 audit(1762515609.180:748): avc: denied { open } for pid=9065 comm="syz.3.668" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 413.198162][ T30] audit: type=1400 audit(1762515609.360:749): avc: denied { sys_module } for pid=9065 comm="syz.3.668" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 413.226919][ T30] audit: type=1400 audit(1762515609.590:750): avc: denied { write } for pid=9065 comm="syz.3.668" name="route" dev="proc" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 413.255947][ T30] audit: type=1400 audit(1762515609.640:751): avc: denied { create } for pid=9065 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 413.275144][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.699084][ T5883] usbhid 5-1:0.1: can't add hid device: -71 [ 413.740359][ T30] audit: type=1400 audit(1762515609.650:752): avc: denied { setopt } for pid=9065 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 413.756044][ T5883] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 413.815296][ T5883] usb 5-1: USB disconnect, device number 14 [ 413.942511][ T30] audit: type=1400 audit(1762515609.650:753): avc: denied { accept } for pid=9065 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.456540][ T30] audit: type=1400 audit(1762515609.870:754): avc: denied { mac_admin } for pid=9065 comm="syz.3.668" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.955471][ T9094] netlink: 'syz.3.674': attribute type 2 has an invalid length. [ 416.096492][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.675'. [ 417.405727][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 417.406050][ T30] audit: type=1400 audit(1762515614.110:779): avc: denied { create } for pid=9120 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.457446][ T30] audit: type=1400 audit(1762515614.110:780): avc: denied { setopt } for pid=9120 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.699682][ T30] audit: type=1400 audit(1762515614.110:781): avc: denied { bind } for pid=9120 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.931139][ T30] audit: type=1400 audit(1762515614.110:782): avc: denied { read } for pid=9120 comm="syz.2.680" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.002951][ T30] audit: type=1400 audit(1762515614.110:783): avc: denied { open } for pid=9120 comm="syz.2.680" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.221716][ T30] audit: type=1400 audit(1762515614.120:784): avc: denied { ioctl } for pid=9120 comm="syz.2.680" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 418.246890][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.813389][ T30] audit: type=1400 audit(1762515615.420:785): avc: denied { bind } for pid=9132 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 418.993696][ T30] audit: type=1400 audit(1762515615.440:786): avc: denied { connect } for pid=9132 comm="syz.4.682" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.014071][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.131622][ T30] audit: type=1400 audit(1762515615.450:787): avc: denied { setopt } for pid=9132 comm="syz.4.682" laddr=fe80::b lport=127 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 419.657297][ T9145] netlink: 'syz.0.683': attribute type 20 has an invalid length. [ 419.665676][ T9145] IPv6: NLM_F_CREATE should be specified when creating new route [ 419.675639][ T9145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.683217][ T9145] IPv6: NLM_F_CREATE should be set when creating new route [ 419.832421][ T30] audit: type=1326 audit(1762515616.520:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.4.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4798f6c9 code=0x7ffc0000 [ 421.469665][ T9168] netlink: 'syz.2.686': attribute type 2 has an invalid length. [ 423.873345][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 423.873362][ T30] audit: type=1400 audit(1762515620.560:809): avc: denied { read write } for pid=9184 comm="syz.2.693" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 423.903411][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.979602][ T30] audit: type=1400 audit(1762515620.560:810): avc: denied { open } for pid=9184 comm="syz.2.693" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 424.004915][ T30] audit: type=1400 audit(1762515620.560:811): avc: denied { ioctl } for pid=9184 comm="syz.2.693" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 424.030305][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.230700][ T30] audit: type=1400 audit(1762515620.850:812): avc: denied { create } for pid=9192 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.373953][ T9195] mkiss: ax0: crc mode is auto. [ 424.612044][ T9196] xt_connbytes: Forcing CT accounting to be enabled [ 424.619374][ T9196] set match dimension is over the limit! [ 424.780892][ T30] audit: type=1400 audit(1762515621.120:813): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.900532][ T30] audit: type=1400 audit(1762515621.120:814): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.963828][ T30] audit: type=1400 audit(1762515621.120:815): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 425.104223][ T30] audit: type=1400 audit(1762515621.120:816): avc: denied { read } for pid=5480 comm="dhcpcd" name="n103" dev="tmpfs" ino=5211 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.183679][ T30] audit: type=1400 audit(1762515621.120:817): avc: denied { open } for pid=5480 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5211 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 425.431318][ T30] audit: type=1400 audit(1762515621.120:818): avc: denied { getattr } for pid=5480 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=5211 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 426.734377][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 427.627114][ T9230] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 427.820961][ T9230] lo speed is unknown, defaulting to 1000 [ 428.461031][ T9236] fuse: Bad value for 'fd' [ 429.779266][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 429.779285][ T30] audit: type=1400 audit(1762515625.630:837): avc: denied { read write } for pid=9238 comm="syz.1.704" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 429.810121][ T30] audit: type=1400 audit(1762515625.630:838): avc: denied { open } for pid=9238 comm="syz.1.704" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 429.835243][ T30] audit: type=1400 audit(1762515626.170:839): avc: denied { connect } for pid=9238 comm="syz.1.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.015747][ T9253] bridge2: entered promiscuous mode [ 430.021218][ T9253] bridge2: entered allmulticast mode [ 431.049784][ T30] audit: type=1400 audit(1762515627.730:840): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 431.217807][ T30] audit: type=1400 audit(1762515627.910:841): avc: denied { create } for pid=9258 comm="syz.0.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 433.134946][ T30] audit: type=1400 audit(1762515629.840:842): avc: denied { write } for pid=9269 comm="syz.3.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 433.297231][ T9277] netlink: 'syz.4.710': attribute type 4 has an invalid length. [ 433.305005][ T30] audit: type=1400 audit(1762515629.980:843): avc: denied { read } for pid=9273 comm="syz.4.710" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.471362][ T30] audit: type=1400 audit(1762515629.980:844): avc: denied { open } for pid=9273 comm="syz.4.710" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.580284][ T30] audit: type=1400 audit(1762515629.990:845): avc: denied { ioctl } for pid=9273 comm="syz.4.710" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.682283][ T3556] Bluetooth: hci5: Frame reassembly failed (-84) [ 433.707353][ T30] audit: type=1400 audit(1762515630.410:846): avc: denied { map } for pid=9280 comm="syz.3.711" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 435.810577][ T30] audit: type=1400 audit(1762515631.190:847): avc: denied { write } for pid=9290 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 435.844093][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 435.848630][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 436.166265][ T9299] pim6reg: entered allmulticast mode [ 436.644003][ T30] audit: type=1400 audit(1762515633.310:848): avc: denied { map } for pid=9301 comm="syz.0.715" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.667420][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.700586][ T5883] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 436.866766][ T30] audit: type=1400 audit(1762515633.320:849): avc: denied { execute } for pid=9301 comm="syz.0.715" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 436.932051][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 437.012810][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.148750][ T5883] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09 [ 437.178013][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.244194][ T9310] Invalid ELF header type: 2 != 1 [ 437.680642][ T30] audit: type=1400 audit(1762515633.950:850): avc: denied { module_load } for pid=9307 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 437.701242][ T5883] usb 2-1: Product: syz [ 437.705683][ T5883] usb 2-1: Manufacturer: syz [ 437.710364][ T5883] usb 2-1: SerialNumber: syz [ 437.718228][ T30] audit: type=1400 audit(1762515633.970:851): avc: denied { map } for pid=9307 comm="syz.4.716" path="socket:[22615]" dev="sockfs" ino=22615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 437.761476][ T5883] usb 2-1: config 0 descriptor?? [ 437.889839][ T5883] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 437.898090][ T5883] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22) [ 437.952425][ T5883] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 438.064432][ T9318] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 438.108224][ T30] audit: type=1400 audit(1762515634.780:852): avc: denied { create } for pid=9313 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 438.321550][ T30] audit: type=1400 audit(1762515634.780:853): avc: denied { execute } for pid=9313 comm="syz.4.719" path="/148/net_prio.prioidx" dev="tmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 438.590792][ T30] audit: type=1400 audit(1762515635.080:854): avc: denied { create } for pid=9320 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 438.620704][ T30] audit: type=1400 audit(1762515635.080:855): avc: denied { ioctl } for pid=9320 comm="syz.2.720" path="socket:[21844]" dev="sockfs" ino=21844 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 438.647006][ T30] audit: type=1400 audit(1762515635.210:856): avc: denied { read } for pid=9320 comm="syz.2.720" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 439.588375][ T5876] usb 2-1: USB disconnect, device number 22 [ 439.599387][ T9296] pim6reg: left allmulticast mode [ 439.744101][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.750792][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.117939][ T9339] overlayfs: missing 'lowerdir' [ 441.091232][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 441.091247][ T30] audit: type=1400 audit(1762515637.800:875): avc: denied { append } for pid=9346 comm="syz.3.726" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 441.190575][ T30] audit: type=1400 audit(1762515637.840:876): avc: denied { bind } for pid=9344 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.222660][ T9348] bridge0: entered promiscuous mode [ 441.228343][ T9348] macsec1: entered promiscuous mode [ 441.377936][ T30] audit: type=1400 audit(1762515637.840:877): avc: denied { setopt } for pid=9344 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.385634][ T9348] bridge0: port 3(macsec1) entered blocking state [ 441.397149][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.397791][ T30] audit: type=1400 audit(1762515637.840:878): avc: denied { accept } for pid=9344 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.430668][ T30] audit: type=1400 audit(1762515637.840:879): avc: denied { write } for pid=9344 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.460187][ T30] audit: type=1400 audit(1762515637.840:880): avc: denied { read } for pid=9344 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 441.480598][ T30] audit: type=1400 audit(1762515637.970:881): avc: denied { sqpoll } for pid=9346 comm="syz.3.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 441.513094][ T9357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=9357 comm=syz.0.727 [ 441.592480][ T30] audit: type=1400 audit(1762515638.280:882): avc: denied { read } for pid=9349 comm="syz.0.727" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.615790][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.664363][ T30] audit: type=1400 audit(1762515638.280:883): avc: denied { open } for pid=9349 comm="syz.0.727" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 441.695350][ T9348] bridge0: port 3(macsec1) entered disabled state [ 441.722921][ T9348] macsec1: entered allmulticast mode [ 441.738528][ T9348] bridge0: entered allmulticast mode [ 441.974889][ T9348] macsec1: left allmulticast mode [ 442.125955][ T30] audit: type=1400 audit(1762515638.420:884): avc: denied { read append } for pid=9346 comm="syz.3.726" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 442.149421][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.193721][ T9348] bridge0: left allmulticast mode [ 442.241408][ T9348] bridge0: left promiscuous mode [ 442.756908][ T9370] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 442.764696][ T9370] netlink: 56 bytes leftover after parsing attributes in process `syz.4.728'. [ 445.127878][ T9390] Error: Driver 'c6xdigio' is already registered, aborting... [ 445.659421][ T9390] lo speed is unknown, defaulting to 1000 [ 446.221413][ T9400] fuse: Invalid rootmode [ 446.387326][ T9400] lo speed is unknown, defaulting to 1000 [ 446.623968][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 446.623985][ T30] audit: type=1400 audit(1762515642.940:898): avc: denied { name_bind } for pid=9395 comm="syz.3.735" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 446.714675][ T9390] delete_channel: no stack [ 447.166818][ T9413] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 447.542245][ T30] audit: type=1400 audit(1762515643.900:899): avc: denied { open } for pid=9408 comm="syz.3.738" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 447.778182][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'. [ 447.821544][ T30] audit: type=1400 audit(1762515643.910:900): avc: denied { ioctl } for pid=9408 comm="syz.3.738" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 447.908156][ T30] audit: type=1400 audit(1762515643.910:901): avc: denied { checkpoint_restore } for pid=9408 comm="syz.3.738" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 448.122547][ T30] audit: type=1400 audit(1762515644.240:902): avc: denied { ioctl } for pid=9404 comm="syz.0.737" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21977 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 448.550627][ T5821] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 448.654665][ T30] audit: type=1400 audit(1762515645.336:903): avc: denied { mount } for pid=9404 comm="syz.0.737" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 448.864018][ T5821] usb 3-1: Using ep0 maxpacket: 32 [ 448.871627][ T5821] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.979868][ T5821] usb 3-1: config 0 has no interface number 0 [ 448.999254][ T5821] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.024541][ T5821] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.034528][ T5821] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 449.045680][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.062292][ T5821] usb 3-1: config 0 descriptor?? [ 449.548196][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 449.795325][ T5821] uclogic 0003:28BD:0094.0007: pen parameters not found [ 449.804383][ T5821] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 449.970902][ T30] audit: type=1400 audit(1762515646.596:904): avc: denied { bind } for pid=9430 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 450.024467][ T30] audit: type=1400 audit(1762515646.606:905): avc: denied { listen } for pid=9430 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 450.240645][ T30] audit: type=1400 audit(1762515646.626:906): avc: denied { accept } for pid=9430 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 451.360744][ T30] audit: type=1400 audit(1762515646.726:907): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 451.560100][ T979] usb 3-1: USB disconnect, device number 24 [ 451.840657][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 451.840672][ T30] audit: type=1400 audit(1762515648.546:911): avc: denied { map } for pid=9446 comm="syz.4.745" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.491163][ T30] audit: type=1400 audit(1762515648.806:912): avc: denied { mount } for pid=9446 comm="syz.4.745" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 452.540983][ T30] audit: type=1400 audit(1762515648.816:913): avc: denied { ioctl } for pid=9446 comm="syz.4.745" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 452.812951][ T30] audit: type=1400 audit(1762515649.496:914): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file5" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.835503][ T979] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 453.015368][ T979] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 453.620824][ T979] usb 3-1: config 0 interface 0 has no altsetting 0 [ 453.648373][ T979] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 453.795322][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.701760][ T979] usb 3-1: config 0 descriptor?? [ 454.716373][ T30] audit: type=1400 audit(1762515650.585:915): avc: denied { create } for pid=9467 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.718141][ T9452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 454.742743][ C1] vkms_vblank_simulate: vblank timer overrun [ 454.772910][ T30] audit: type=1400 audit(1762515650.585:916): avc: denied { setopt } for pid=9467 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.803960][ T30] audit: type=1400 audit(1762515650.585:917): avc: denied { bind } for pid=9467 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.860766][ T30] audit: type=1400 audit(1762515650.595:918): avc: denied { setopt } for pid=9467 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 454.866594][ T9469] team_slave_0: entered promiscuous mode [ 454.886108][ T9469] team_slave_1: entered promiscuous mode [ 454.992217][ T9469] macsec1: entered promiscuous mode [ 455.010676][ T9469] team0: entered promiscuous mode [ 455.021320][ T9469] macsec1: entered allmulticast mode [ 455.077378][ T9469] team0: entered allmulticast mode [ 455.151088][ T9469] team_slave_0: entered allmulticast mode [ 455.160619][ T9469] team_slave_1: entered allmulticast mode [ 455.178174][ T9469] team0: Device macsec1 is already an upper device of the team interface [ 455.265426][ T9469] team0: left allmulticast mode [ 455.270298][ T9469] team_slave_0: left allmulticast mode [ 455.622273][ T30] audit: type=1400 audit(1762515652.245:919): avc: denied { write } for pid=9451 comm="syz.2.746" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.648543][ T9469] team_slave_1: left allmulticast mode [ 455.661755][ T9469] team0: left promiscuous mode [ 455.682264][ T9469] team_slave_0: left promiscuous mode [ 455.687762][ T9469] team_slave_1: left promiscuous mode [ 456.117181][ T979] usbhid 3-1:0.0: can't add hid device: -71 [ 456.640987][ T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 456.651878][ T979] usb 3-1: USB disconnect, device number 25 [ 456.785560][ T30] audit: type=1400 audit(1762515653.475:920): avc: denied { connect } for pid=9484 comm="syz.3.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 458.250704][ T30] audit: type=1400 audit(1762515654.905:921): avc: denied { connect } for pid=9498 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.355984][ T30] audit: type=1400 audit(1762515654.905:922): avc: denied { write } for pid=9498 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 458.426792][ T30] audit: type=1400 audit(1762515655.065:923): avc: denied { mounton } for pid=9498 comm="syz.2.756" path="/155/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 459.806516][ T9516] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 460.520802][ T30] audit: type=1400 audit(1762515656.495:924): avc: denied { read } for pid=9513 comm="syz.4.759" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.583057][ T30] audit: type=1400 audit(1762515656.495:925): avc: denied { open } for pid=9513 comm="syz.4.759" path="/157/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.606236][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.612584][ T30] audit: type=1400 audit(1762515656.495:926): avc: denied { ioctl } for pid=9513 comm="syz.4.759" path="/157/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 460.636886][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.890104][ T30] audit: type=1400 audit(1762515656.505:927): avc: denied { create } for pid=9513 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 460.910646][ T30] audit: type=1400 audit(1762515656.505:928): avc: denied { setopt } for pid=9513 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 460.940041][ T30] audit: type=1400 audit(1762515656.505:929): avc: denied { connect } for pid=9513 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 461.126791][ T30] audit: type=1326 audit(1762515657.815:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9514 comm="syz.3.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061838f6c9 code=0x7ffc0000 [ 462.339407][ T9530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.183168][ T9535] ceph: No mds server is up or the cluster is laggy [ 463.205251][ T5883] libceph: connect (1)[c::]:6789 error -101 [ 463.211856][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 463.444249][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 463.444266][ T30] audit: type=1400 audit(1762515660.155:958): avc: denied { read write } for pid=9540 comm="syz.2.763" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 463.710546][ T9543] lo speed is unknown, defaulting to 1000 [ 463.717132][ T9543] lo speed is unknown, defaulting to 1000 [ 463.730618][ T9543] lo speed is unknown, defaulting to 1000 [ 463.812314][ T9543] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 463.961450][ T9543] lo speed is unknown, defaulting to 1000 [ 463.980184][ T9543] lo speed is unknown, defaulting to 1000 [ 463.996587][ T9543] lo speed is unknown, defaulting to 1000 [ 464.012831][ T9543] lo speed is unknown, defaulting to 1000 [ 464.028639][ T9543] lo speed is unknown, defaulting to 1000 [ 464.039443][ T30] audit: type=1400 audit(1762515660.155:959): avc: denied { open } for pid=9540 comm="syz.2.763" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 464.090352][ T30] audit: type=1400 audit(1762515660.415:960): avc: denied { create } for pid=9540 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 464.450704][ T30] audit: type=1400 audit(1762515660.415:961): avc: denied { write } for pid=9540 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 464.471012][ T30] audit: type=1400 audit(1762515660.895:962): avc: denied { write } for pid=9545 comm="syz.1.764" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 464.800597][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 465.364319][ T9549] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 465.404028][ T30] audit: type=1400 audit(1762515662.045:963): avc: denied { bind } for pid=9545 comm="syz.1.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 465.529124][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.767'. [ 465.597178][ T9562] : renamed from bridge_slave_0 (while UP) [ 466.500583][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 466.511300][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.537866][ T9] usb 1-1: config 0 has no interface number 0 [ 466.556001][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.620527][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.707224][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 466.754289][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.798001][ T30] audit: type=1400 audit(1762515663.505:964): avc: denied { write } for pid=9564 comm="syz.4.768" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 467.017938][ T9] usb 1-1: config 0 descriptor?? [ 467.070013][ T9571] netlink: 'syz.1.769': attribute type 20 has an invalid length. [ 467.077865][ T9571] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.085867][ T9571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.093092][ T9571] IPv6: NLM_F_CREATE should be set when creating new route [ 467.270671][ T5821] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 467.516234][ T5821] usb 5-1: unable to get BOS descriptor or descriptor too short [ 467.568944][ T5821] usb 5-1: config 8 has an invalid interface number: 92 but max is 0 [ 467.630285][ T5821] usb 5-1: config 8 has no interface number 0 [ 467.770292][ T5821] usb 5-1: config 8 interface 92 has no altsetting 0 [ 467.844463][ T5821] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=41.17 [ 467.882266][ T9] uclogic 0003:28BD:0094.0008: pen parameters not found [ 468.042177][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.057712][ T9] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring [ 468.151712][ T5821] usb 5-1: Product: syz [ 468.242492][ T5821] usb 5-1: Manufacturer: syz [ 469.044184][ T5821] usb 5-1: SerialNumber: syz [ 469.155706][ T30] audit: type=1400 audit(1762515665.825:965): avc: denied { write } for pid=9578 comm="syz.3.771" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 469.412900][ T5821] gspca_main: etoms-2.14.0 probing 102c:6251 [ 469.534686][ T9588] binder: 9578:9588 ioctl c0306201 0 returned -14 [ 469.860152][ T30] audit: type=1400 audit(1762515666.235:966): avc: denied { ioctl } for pid=9578 comm="syz.3.771" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.458961][ T30] audit: type=1400 audit(1762515666.235:967): avc: denied { set_context_mgr } for pid=9578 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 470.828776][ T5821] usb 5-1: USB disconnect, device number 15 [ 470.866002][ T30] audit: type=1400 audit(1762515666.425:968): avc: denied { create } for pid=9590 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 470.910650][ T30] audit: type=1400 audit(1762515666.425:969): avc: denied { read } for pid=9590 comm="syz.1.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 470.947994][ T30] audit: type=1400 audit(1762515667.095:970): avc: denied { execute } for pid=9578 comm="syz.3.771" name="file2" dev="ramfs" ino=22397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 471.069512][ T30] audit: type=1400 audit(1762515667.195:971): avc: denied { create } for pid=9578 comm="syz.3.771" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 471.097295][ T30] audit: type=1400 audit(1762515667.205:972): avc: denied { execute_no_trans } for pid=9578 comm="syz.3.771" path="/file2" dev="ramfs" ino=22397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 471.133692][ T979] usb 1-1: USB disconnect, device number 15 [ 471.223860][ T12] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 471.278305][ T12] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 471.456144][ T9605] netlink: 'syz.4.773': attribute type 21 has an invalid length. [ 471.464170][ T9605] netlink: 128 bytes leftover after parsing attributes in process `syz.4.773'. [ 471.473463][ T30] audit: type=1400 audit(1762515668.155:973): avc: denied { create } for pid=9597 comm="syz.4.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 471.497743][ T9605] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 471.538240][ T9605] netlink: 3 bytes leftover after parsing attributes in process `syz.4.773'. [ 471.577872][ T9574] Bluetooth: hci5: Frame reassembly failed (-84) [ 471.872538][ T9605] batadv1: entered promiscuous mode [ 471.878899][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 472.301510][ T9612] No source specified [ 472.326968][ T9612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 473.288863][ T5824] Bluetooth: hci5: command 0x1003 tx timeout [ 473.380614][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 473.420725][ T30] audit: type=1400 audit(1762515670.125:974): avc: denied { setattr } for pid=9614 comm="syz.2.777" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 476.286749][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 476.286764][ T30] audit: type=1400 audit(1762515672.995:979): avc: denied { create } for pid=9623 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 476.379081][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.783'. [ 476.434507][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 476.447319][ T30] audit: type=1400 audit(1762515673.125:980): avc: denied { write } for pid=9623 comm="syz.3.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 477.100579][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 477.109627][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.212579][ T30] audit: type=1400 audit(1762515673.425:981): avc: denied { bind } for pid=9648 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 477.260803][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.474140][ T9658] capability: warning: `syz.0.785' uses deprecated v2 capabilities in a way that may be insecure [ 478.224522][ T9] usb 5-1: config 0 has no interface number 0 [ 478.230965][ T30] audit: type=1400 audit(1762515673.425:982): avc: denied { name_bind } for pid=9648 comm="syz.0.784" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 478.252671][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 478.265655][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 478.274821][ T30] audit: type=1400 audit(1762515673.425:983): avc: denied { node_bind } for pid=9648 comm="syz.0.784" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 478.327658][ T30] audit: type=1400 audit(1762515673.455:984): avc: denied { connect } for pid=9648 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 478.347559][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.353058][ T9] usb 5-1: config 0 descriptor?? [ 478.367875][ T30] audit: type=1400 audit(1762515674.055:985): avc: denied { create } for pid=9655 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 478.385845][ T9] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 478.391706][ T30] audit: type=1400 audit(1762515674.215:986): avc: denied { ioctl } for pid=9655 comm="syz.0.785" path="socket:[23126]" dev="sockfs" ino=23126 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 478.419672][ T30] audit: type=1400 audit(1762515675.035:987): avc: denied { write } for pid=9645 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 478.440584][ T30] audit: type=1400 audit(1762515675.075:988): avc: denied { mount } for pid=9661 comm="syz.3.787" name="/" dev="autofs" ino=22525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 478.894993][ T6476] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 478.904183][ T6476] Bluetooth: hci5: Frame reassembly failed (-84) [ 478.947219][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.975269][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.975794][ T9665] loop6: detected capacity change from 0 to 524288000 [ 479.646736][ T9678] binder: BINDER_SET_CONTEXT_MGR already set [ 479.653089][ T9678] binder: 9675:9678 ioctl 4018620d 200000000040 returned -16 [ 480.464097][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 480.953227][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 482.124794][ T1207] usb 5-1: USB disconnect, device number 16 [ 482.430819][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 482.438248][ T30] audit: type=1400 audit(1762515679.105:994): avc: denied { firmware_load } for pid=9683 comm="syz.1.790" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 484.031827][ T30] audit: type=1400 audit(1762515680.735:995): avc: denied { associate } for pid=9698 comm="syz.0.793" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 484.169844][ T30] audit: type=1400 audit(1762515680.865:996): avc: denied { ioctl } for pid=9714 comm="syz.3.795" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 484.547735][ T9724] binder: 9717:9724 ioctl c0306201 0 returned -14 [ 484.655058][ T30] audit: type=1400 audit(1762515681.205:997): avc: denied { connect } for pid=9717 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 484.890815][ T1207] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 485.000789][ T30] audit: type=1400 audit(1762515681.205:998): avc: denied { setopt } for pid=9717 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.090620][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 485.106094][ T1207] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 485.160291][ T1207] usb 4-1: config 0 has no interface number 0 [ 485.279249][ T30] audit: type=1400 audit(1762515681.985:999): avc: denied { setopt } for pid=9725 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.301998][ T1207] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 485.800015][ T30] audit: type=1400 audit(1762515682.015:1000): avc: denied { ioctl } for pid=9728 comm="syz.1.799" path="socket:[23214]" dev="sockfs" ino=23214 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.825844][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.834933][ T1207] usb 4-1: Product: syz [ 485.842860][ T9736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.850088][ T1207] usb 4-1: Manufacturer: syz [ 485.920537][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.797'. [ 485.979166][ T1207] usb 4-1: SerialNumber: syz [ 486.071156][ T9731] lo speed is unknown, defaulting to 1000 [ 486.078482][ T1207] usb 4-1: config 0 descriptor?? [ 486.092049][ T9731] lo speed is unknown, defaulting to 1000 [ 486.215122][ T5945] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 486.339981][ T9744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22548 sclass=netlink_route_socket pid=9744 comm=syz.4.800 [ 486.912587][ T5945] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 486.926766][ T5945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.049083][ T5945] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 487.085650][ T5945] usb 2-1: config 1 has no interface number 1 [ 487.100533][ T5945] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.179692][ T1207] msi2500 4-1:0.246: Registered as swradio24 [ 487.198263][ T5945] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.245912][ T9751] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 487.271646][ T1207] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 487.353425][ T5945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.362621][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.380594][ T5945] usb 2-1: Product: syz [ 487.391146][ T5945] usb 2-1: Manufacturer: syz [ 487.516248][ T5945] usb 2-1: SerialNumber: syz [ 487.832708][ T5945] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 487.840270][ T5945] usb 2-1: MIDIStreaming interface descriptor not found [ 488.279272][ T9] usb 4-1: USB disconnect, device number 16 [ 488.311667][ T5945] usb 2-1: USB disconnect, device number 23 [ 488.576338][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.675620][ T30] audit: type=1326 audit(1762515685.385:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9760 comm="syz.3.804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f061838f6c9 code=0x0 [ 488.990174][ T9765] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 488.998636][ T9765] ================================================================== [ 489.006696][ T9765] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 489.014663][ T9765] Read of size 8 at addr ffff88802fc2f030 by task syz.3.804/9765 [ 489.022367][ T9765] [ 489.024699][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.3.804 Not tainted syzkaller #0 PREEMPT(full) [ 489.024724][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.024736][ T9765] Call Trace: [ 489.024742][ T9765] [ 489.024750][ T9765] dump_stack_lvl+0x116/0x1f0 [ 489.024783][ T9765] print_report+0xcd/0x630 [ 489.024804][ T9765] ? __virt_addr_valid+0x81/0x610 [ 489.024829][ T9765] ? __phys_addr+0xe8/0x180 [ 489.024854][ T9765] ? sysfs_remove_file_ns+0x63/0x70 [ 489.024873][ T9765] kasan_report+0xe0/0x110 [ 489.024893][ T9765] ? sysfs_remove_file_ns+0x63/0x70 [ 489.024916][ T9765] sysfs_remove_file_ns+0x63/0x70 [ 489.024935][ T9765] driver_remove_file+0x4a/0x60 [ 489.024956][ T9765] bus_remove_driver+0x224/0x2c0 [ 489.024983][ T9765] driver_unregister+0x76/0xb0 [ 489.025003][ T9765] comedi_device_detach_locked+0x12f/0xa50 [ 489.025030][ T9765] comedi_device_detach+0x67/0xb0 [ 489.025050][ T9765] comedi_device_attach+0x43d/0x900 [ 489.025075][ T9765] do_devconfig_ioctl+0x1b1/0x710 [ 489.025099][ T9765] ? __mutex_lock+0x1c5/0x1060 [ 489.025118][ T9765] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 489.025154][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.025186][ T9765] comedi_unlocked_ioctl+0x165d/0x2f00 [ 489.025205][ T9765] ? rcu_is_watching+0x12/0xc0 [ 489.025230][ T9765] ? irqentry_exit+0x3b/0x90 [ 489.025245][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.025273][ T9765] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 489.025293][ T9765] ? do_vfs_ioctl+0xdf6/0x14f0 [ 489.025317][ T9765] ? do_vfs_ioctl+0x1234/0x14f0 [ 489.025340][ T9765] ? do_vfs_ioctl+0x128/0x14f0 [ 489.025363][ T9765] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 489.025384][ T9765] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 489.025410][ T9765] ? rcu_is_watching+0x12/0xc0 [ 489.025432][ T9765] ? irqentry_exit+0x3b/0x90 [ 489.025448][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.025480][ T9765] ? __pfx_bpf_lsm_file_ioctl+0x10/0x10 [ 489.025499][ T9765] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 489.025518][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 489.025542][ T9765] do_syscall_64+0xcd/0xfa0 [ 489.025560][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.025578][ T9765] RIP: 0033:0x7f061838f6c9 [ 489.025592][ T9765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.025609][ T9765] RSP: 002b:00007f06165f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.025626][ T9765] RAX: ffffffffffffffda RBX: 00007f06185e6180 RCX: 00007f061838f6c9 [ 489.025638][ T9765] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 000000000000000b [ 489.025650][ T9765] RBP: 00007f0618411f91 R08: 0000000000000000 R09: 0000000000000000 [ 489.025662][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.025673][ T9765] R13: 00007f06185e6218 R14: 00007f06185e6180 R15: 00007ffc22398d18 [ 489.025694][ T9765] [ 489.025700][ T9765] [ 489.308764][ T9765] Allocated by task 8825: [ 489.313070][ T9765] kasan_save_stack+0x33/0x60 [ 489.317735][ T9765] kasan_save_track+0x14/0x30 [ 489.322390][ T9765] __kasan_kmalloc+0xaa/0xb0 [ 489.326957][ T9765] bus_add_driver+0x92/0x690 [ 489.331536][ T9765] driver_register+0x15c/0x4b0 [ 489.336278][ T9765] c6xdigio_attach+0xa3/0x4b0 [ 489.340938][ T9765] comedi_device_attach+0x3b3/0x900 [ 489.346120][ T9765] do_devconfig_ioctl+0x1b1/0x710 [ 489.351130][ T9765] comedi_unlocked_ioctl+0x165d/0x2f00 [ 489.356566][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 489.361316][ T9765] do_syscall_64+0xcd/0xfa0 [ 489.365797][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.371668][ T9765] [ 489.374004][ T9765] Freed by task 9516: [ 489.377968][ T9765] kasan_save_stack+0x33/0x60 [ 489.382624][ T9765] kasan_save_track+0x14/0x30 [ 489.387285][ T9765] __kasan_save_free_info+0x3b/0x60 [ 489.392466][ T9765] __kasan_slab_free+0x5f/0x80 [ 489.397208][ T9765] kfree+0x2b8/0x6d0 [ 489.401086][ T9765] kobject_put+0x1e7/0x5a0 [ 489.405485][ T9765] bus_remove_driver+0x16e/0x2c0 [ 489.410408][ T9765] driver_unregister+0x76/0xb0 [ 489.415150][ T9765] comedi_device_detach_locked+0x12f/0xa50 [ 489.420937][ T9765] do_devconfig_ioctl+0x555/0x710 [ 489.425947][ T9765] comedi_unlocked_ioctl+0x165d/0x2f00 [ 489.431382][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 489.436130][ T9765] do_syscall_64+0xcd/0xfa0 [ 489.440610][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.446480][ T9765] [ 489.448779][ T9765] The buggy address belongs to the object at ffff88802fc2f000 [ 489.448779][ T9765] which belongs to the cache kmalloc-256 of size 256 [ 489.462807][ T9765] The buggy address is located 48 bytes inside of [ 489.462807][ T9765] freed 256-byte region [ffff88802fc2f000, ffff88802fc2f100) [ 489.476492][ T9765] [ 489.478793][ T9765] The buggy address belongs to the physical page: [ 489.485193][ T9765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fc2fa00 pfn:0x2fc2e [ 489.495246][ T9765] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 489.503732][ T9765] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 489.512217][ T9765] page_type: f5(slab) [ 489.516185][ T9765] raw: 00fff00000000240 ffff88813ffa6b40 ffffea0001d41210 ffffea0000c04a10 [ 489.524752][ T9765] raw: ffff88802fc2fa00 0000000000100003 00000000f5000000 0000000000000000 [ 489.533317][ T9765] head: 00fff00000000240 ffff88813ffa6b40 ffffea0001d41210 ffffea0000c04a10 [ 489.541969][ T9765] head: ffff88802fc2fa00 0000000000100003 00000000f5000000 0000000000000000 [ 489.550620][ T9765] head: 00fff00000000001 ffffea0000bf0b81 00000000ffffffff 00000000ffffffff [ 489.559273][ T9765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 489.567918][ T9765] page dumped because: kasan: bad access detected [ 489.574314][ T9765] page_owner tracks the page as allocated [ 489.580003][ T9765] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5154, tgid 5154 (mount), ts 20318698561, free_ts 18981616772 [ 489.600742][ T9765] post_alloc_hook+0x1c0/0x230 [ 489.605510][ T9765] get_page_from_freelist+0x10a3/0x3a30 [ 489.611059][ T9765] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 489.616977][ T9765] alloc_pages_mpol+0x1fb/0x550 [ 489.621821][ T9765] new_slab+0x24a/0x360 [ 489.625968][ T9765] ___slab_alloc+0xdae/0x1a60 [ 489.630639][ T9765] __slab_alloc.constprop.0+0x63/0x110 [ 489.636089][ T9765] __kmalloc_noprof+0x501/0x880 [ 489.640926][ T9765] __list_lru_init+0xe8/0x4c0 [ 489.645602][ T9765] alloc_super+0x86d/0xb60 [ 489.650019][ T9765] sget_fc+0x116/0xc20 [ 489.654065][ T9765] get_tree_nodev+0x28/0x190 [ 489.658641][ T9765] vfs_get_tree+0x8e/0x340 [ 489.663050][ T9765] path_mount+0x7b9/0x23a0 [ 489.667459][ T9765] __x64_sys_mount+0x293/0x310 [ 489.672214][ T9765] do_syscall_64+0xcd/0xfa0 [ 489.676713][ T9765] page last free pid 1 tgid 1 stack trace: [ 489.682497][ T9765] __free_frozen_pages+0x7df/0x1160 [ 489.687687][ T9765] kasan_depopulate_vmalloc_pte+0x5b/0x80 [ 489.693419][ T9765] __apply_to_page_range+0xac1/0x13f0 [ 489.698783][ T9765] kasan_release_vmalloc+0xd1/0xe0 [ 489.703883][ T9765] purge_vmap_node+0x1c4/0xa30 [ 489.708644][ T9765] __purge_vmap_area_lazy+0xa06/0xc60 [ 489.713997][ T9765] _vm_unmap_aliases+0x43b/0x670 [ 489.718914][ T9765] change_page_attr_set_clr+0x252/0x4a0 [ 489.724441][ T9765] set_memory_nx+0xb5/0x110 [ 489.728923][ T9765] free_init_pages+0x79/0xd0 [ 489.733502][ T9765] free_kernel_image_pages+0x24/0x50 [ 489.738774][ T9765] kernel_init+0x30/0x2b0 [ 489.743084][ T9765] ret_from_fork+0x675/0x7d0 [ 489.747648][ T9765] ret_from_fork_asm+0x1a/0x30 [ 489.752397][ T9765] [ 489.754722][ T9765] Memory state around the buggy address: [ 489.760326][ T9765] ffff88802fc2ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 489.768364][ T9765] ffff88802fc2ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 489.776403][ T9765] >ffff88802fc2f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.784438][ T9765] ^ [ 489.790044][ T9765] ffff88802fc2f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 489.798080][ T9765] ffff88802fc2f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 489.806114][ T9765] ================================================================== [ 489.818773][ T9765] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 489.825974][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.3.804 Not tainted syzkaller #0 PREEMPT(full) [ 489.835160][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.845198][ T9765] Call Trace: [ 489.848457][ T9765] [ 489.851370][ T9765] dump_stack_lvl+0x3d/0x1f0 [ 489.855954][ T9765] vpanic+0x640/0x6f0 [ 489.859928][ T9765] panic+0xca/0xd0 [ 489.863636][ T9765] ? __pfx_panic+0x10/0x10 [ 489.868046][ T9765] check_panic_on_warn+0xab/0xb0 [ 489.872970][ T9765] end_report+0x107/0x170 [ 489.877282][ T9765] kasan_report+0xee/0x110 [ 489.881684][ T9765] ? sysfs_remove_file_ns+0x63/0x70 [ 489.886877][ T9765] sysfs_remove_file_ns+0x63/0x70 [ 489.891898][ T9765] driver_remove_file+0x4a/0x60 [ 489.896742][ T9765] bus_remove_driver+0x224/0x2c0 [ 489.901675][ T9765] driver_unregister+0x76/0xb0 [ 489.906425][ T9765] comedi_device_detach_locked+0x12f/0xa50 [ 489.912227][ T9765] comedi_device_detach+0x67/0xb0 [ 489.917239][ T9765] comedi_device_attach+0x43d/0x900 [ 489.922425][ T9765] do_devconfig_ioctl+0x1b1/0x710 [ 489.927439][ T9765] ? __mutex_lock+0x1c5/0x1060 [ 489.932187][ T9765] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 489.937724][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.942916][ T9765] comedi_unlocked_ioctl+0x165d/0x2f00 [ 489.948356][ T9765] ? rcu_is_watching+0x12/0xc0 [ 489.953171][ T9765] ? irqentry_exit+0x3b/0x90 [ 489.957751][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.962946][ T9765] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 489.968741][ T9765] ? do_vfs_ioctl+0xdf6/0x14f0 [ 489.973498][ T9765] ? do_vfs_ioctl+0x1234/0x14f0 [ 489.978344][ T9765] ? do_vfs_ioctl+0x128/0x14f0 [ 489.983104][ T9765] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 489.988122][ T9765] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 489.994096][ T9765] ? rcu_is_watching+0x12/0xc0 [ 489.998849][ T9765] ? irqentry_exit+0x3b/0x90 [ 490.003429][ T9765] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.008635][ T9765] ? __pfx_bpf_lsm_file_ioctl+0x10/0x10 [ 490.014172][ T9765] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 490.019970][ T9765] __x64_sys_ioctl+0x18e/0x210 [ 490.024734][ T9765] do_syscall_64+0xcd/0xfa0 [ 490.029222][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.035099][ T9765] RIP: 0033:0x7f061838f6c9 [ 490.039495][ T9765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.059083][ T9765] RSP: 002b:00007f06165f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.067477][ T9765] RAX: ffffffffffffffda RBX: 00007f06185e6180 RCX: 00007f061838f6c9 [ 490.075431][ T9765] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 000000000000000b [ 490.083382][ T9765] RBP: 00007f0618411f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.091330][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.099279][ T9765] R13: 00007f06185e6218 R14: 00007f06185e6180 R15: 00007ffc22398d18 [ 490.107241][ T9765] [ 490.110461][ T9765] Kernel Offset: disabled [ 490.114768][ T9765] Rebooting in 86400 seconds..