last executing test programs: 12m26.8179066s ago: executing program 1 (id=779): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x462}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) close(r0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x32d02566f1c38ddf, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f0000002140)) gettid() setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000d80)={0x2, &(0x7f0000000d40)=[{0x2, 0x5, 0x3, 0x6}, {0xb, 0xb9, 0x80, 0x4}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000dc0)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/206, 0xce}], 0x1}, 0xe}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/229, 0xe5}], 0x1, &(0x7f00000005c0)=""/209, 0xd1}, 0x80}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000840)=""/174, 0xae}, {&(0x7f0000000900)=""/6, 0x6}, {&(0x7f0000000980)=""/109, 0x6d}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/58, 0x3a}], 0x8, &(0x7f0000000b80)=""/96, 0x60}, 0x40}], 0x3, 0x140, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r5, 0x0, 0xffda) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x9, 0x4) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x3, @loopback, 0x6, 0x4}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x1440}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 12m21.912223524s ago: executing program 1 (id=790): mkdir(0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$isdn(0x22, 0x2, 0x25) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080000000850000007500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$isdn(0x22, 0x2, 0x26) dup3(r3, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x4, 0x400}, [@RTA_MULTIPATH={0xc, 0x9, {0x7, 0x976fcf97e101ad0b, 0x6}}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x44000) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x7}) 12m19.6127568s ago: executing program 1 (id=796): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0xb, 0x4, 0x3) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3bf5, 0x7fffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x3c}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 12m17.170131606s ago: executing program 1 (id=802): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 12m15.103664185s ago: executing program 1 (id=804): memfd_create(&(0x7f00000009c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x80\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x04\xc6\x9a\xa0R\xa0F\xcc\xd0\x8b2Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4g1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0*=,\xf8<\xea\xb5b\xa3\xcfm\x8a\xef\x13\xb0\x85\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8fY\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7', 0x1) fchmod(0xffffffffffffffff, 0xa8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, 0x0, 0x0) 12m11.987232867s ago: executing program 1 (id=810): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000140)=0x401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'hmac(sha256-avx2)\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[]) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000400)=@known='security.selinux\x00', &(0x7f0000000440)='-\x00', 0x2, 0x2) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000001100"], 0xe8}}, 0x0) 12m10.820629158s ago: executing program 32 (id=810): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x3, &(0x7f0000000140)=0x401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'hmac(sha256-avx2)\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @empty}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[]) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000400)=@known='security.selinux\x00', &(0x7f0000000440)='-\x00', 0x2, 0x2) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000001100"], 0xe8}}, 0x0) 16.035497084s ago: executing program 3 (id=2695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESDEC=r2], 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0xf, 0x6, 0x2, &(0x7f00000001c0)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000240)={{0x8001, 0x3, 0x12, 0x40}, 'syz1\x00', 0x52}) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002380)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f00000023c0)=ANY=[@ANYBLOB='usrquota,grpquota']) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 13.594399674s ago: executing program 3 (id=2702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82401, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x103) ioctl$KVM_GET_PIT(r2, 0x4048aec9, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IOEVENTFD(r3, 0x4020ae46, &(0x7f0000000080)={0x1}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13.373661528s ago: executing program 2 (id=2706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000a40)="82"}) 11.50628482s ago: executing program 2 (id=2708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88100) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x401, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$video4linux(0x0, 0x6f8, 0x240940) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11.505981446s ago: executing program 4 (id=2709): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(r4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x18, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 10.509691723s ago: executing program 2 (id=2712): syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) syz_open_dev$dri(0x0, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000400)={0x0, 0x0}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0xc, 0x3, 0x0, 0x8, 0xfc, 0x7, 0xd0, 0x9, 0x9, [0x4d6, 0x9, 0x5, 0x5, 0x6, 0x7, 0x20cb, 0x9], [0xffffffff, 0x0, 0xe, 0x42f0]}}) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00'}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9.734881352s ago: executing program 4 (id=2714): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e", 0xd, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.650713256s ago: executing program 3 (id=2716): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000200)={0x20000001}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7.138719179s ago: executing program 5 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x8042, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)=""/56) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x2, 0x0, 0x0, 0x300}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) 7.106493677s ago: executing program 3 (id=2721): socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x1, 0x0, 0x6000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000bc0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.628781656s ago: executing program 3 (id=2722): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = creat(0x0, 0x0) ioperm(0x0, 0x9, 0x3) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000100)='0', 0x1) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 5.570074771s ago: executing program 4 (id=2723): mkdir(0x0, 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(r3, 0xe, &(0x7f0000000100)={0x4, 0x8b}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000680)={r5, 0x2000b1bb, {0x2a00, 0x80010000, 0x0, 0x35e8, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0xa00) 5.565844601s ago: executing program 0 (id=2724): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_io_uring_setup(0x499, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000), &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x4c, 0x0, &(0x7f00007d0000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 5.54412246s ago: executing program 5 (id=2725): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) dup(r4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x18, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) 4.791283898s ago: executing program 0 (id=2726): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x5410, 0x0) 4.79058324s ago: executing program 5 (id=2727): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_io_uring_setup(0x499, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000), &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x4c, 0x0, &(0x7f00007d0000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.546345321s ago: executing program 5 (id=2728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/118, 0x76}], 0x5, &(0x7f0000000300)=""/21, 0x15}, 0x2000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000052693f978598bb760854565c00000000000000000010b9b039aea2be5c06690000", @ANYRESDEC=r1], 0x50) r2 = msgget$private(0x0, 0x100) msgsnd(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="87"], 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40081) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000280)=0xfffffffffffffcf7) setuid(r6) 4.009369936s ago: executing program 4 (id=2729): r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x7}}}}}}}}, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f0770", 0xe}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0x0) r7 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r5, 0x0, r7, 0x0, 0x7fff, 0x6) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x505041, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000040)=0x80) 3.948600348s ago: executing program 2 (id=2730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000a40)="82"}) 3.768460732s ago: executing program 0 (id=2731): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0xff, 0x8000000000000001, 0x5) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) socket$inet6(0xa, 0x3, 0xff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x810) mknod$loop(&(0x7f0000000080)='./file2\x00', 0x40, 0x1) 3.403021143s ago: executing program 3 (id=2732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000001c0), 0x0, 0x7, &(0x7f0000000200)={[0x2000007]}, 0x8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.87759095s ago: executing program 0 (id=2733): socket$kcm(0x10, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) 2.6925385s ago: executing program 2 (id=2734): add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f0000001dc0), 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0x2, 0x4e33, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) 2.023490152s ago: executing program 5 (id=2735): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000028c0)=@newtaction={0x10f4, 0x30, 0x1, 0x0, 0x0, {}, [{0x10e0, 0x1, [@m_nat={0x144, 0x7, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x3, 0x0, 0x2, 0xb9}, @broadcast, @private=0xa010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0xd447, 0x5, 0xffe, 0x61a}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xfffffffb, 0x5, 0x75f4, 0x9}, @remote, @private=0xa010101, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x483d, 0x10000, 0x2, 0x10000, 0x3}, @multicast2, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x401, 0xfffffff9, 0x20000000, 0x4, 0x9}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x89, 0x9, 0x8, 0x33f0, 0x7}, @remote, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xdb, 0xffffffffffffffff, 0x8, 0x10001}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x128, 0xa, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xb95, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xcb, 0x1, 0x101, 0x80}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x265c, 0x20000000, 0xfffffffe, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x9, 0x4000000f, 0x4, 0x4e4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x256c, 0x7}}]}, {0x9a, 0x6, "7c32defd814e10f8cc899dbe141ec2de8a3a2527a2c427b894f0f093606039a8fbce957ab95fa6758bb78ec0991a1a22c4c179eda86f4ad70dfb606cda75674d7d79c85a92c8a15b50225c7646ddbc4c7d95125c27b878447b2f6b8aab3d0bbcee9ff34f627afe4d339430cb6b4c30d63c11c78e56703f65e6ab69960abb8d7bce7309e230fd40eb30b12e761594c6a0fc5d34688c65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xf8, 0x16, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x8, 0x5, 0x7fffffff}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf6f}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x7fffffff, 0x7, 0x5, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x72, 0x6, "760a492fe8a19f342e1b091cd4de35cfe5d8dbdb8687ab499cff43010005848811f7eb56aeac454eb4f86f4e75a705a477f10415cc40e6236ee4e3bc4b385cb1a8ea4efa48153d94cf80df398a5eb34d9f232d303afd11e2e61f2eaf3243dbfaf6c40e78ea17849579e8646649f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xd78, 0x1c, 0x0, 0x0, {{0xb}, {0xc5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x34766ba7, 0x9, 0x10001, 0x306, 0xfffffffd, 0x0, 0x4, 0x100, 0xfffff800, 0x7fffffff, 0x7, 0x1, 0x98f7, 0x9, 0xa18f, 0xd11f, 0x4, 0xe, 0x6, 0x0, 0xc, 0x5, 0x4000004, 0x1, 0x7fff, 0x2, 0x1, 0x8, 0x7, 0x2, 0x2d4, 0x800, 0x3, 0xcd, 0x2, 0x3, 0x0, 0x3, 0x3, 0x101, 0x7, 0x100, 0x6, 0x9, 0x6, 0x8, 0x5, 0x200, 0x0, 0x1, 0x9, 0x9, 0x9, 0xf1, 0x6, 0x9, 0x9, 0x3, 0x6a23, 0x6, 0xfea8, 0x8, 0x10000000, 0x6, 0x633f, 0x445b9c6, 0x1, 0x8, 0x8, 0xadf, 0x629, 0x8001, 0x1, 0x5, 0x7bda, 0x4, 0x9, 0x6, 0x5, 0x7ff, 0x5, 0x9, 0x10000, 0x9, 0x520, 0x68b0, 0x6, 0x2, 0x5, 0x5, 0x3, 0x8, 0xffffae37, 0x3, 0x9, 0x9, 0x2, 0x2, 0x5, 0x2, 0x7, 0x0, 0x6, 0x27bcbc13, 0x7, 0xc, 0x6, 0x0, 0x3, 0xb, 0x2, 0xfff, 0x2, 0x1504, 0x5, 0x4b6, 0xbe1b, 0x4, 0x80000001, 0x6886, 0xfffffff9, 0x3, 0x2, 0x4, 0x4, 0x1, 0x8, 0x80000001, 0x6, 0x7, 0x3, 0x7, 0x1, 0x4, 0x8, 0x6, 0x6b2, 0x1, 0x2, 0x81, 0x0, 0x6, 0x8, 0x3, 0x0, 0x5, 0x3, 0x5, 0x7, 0x1, 0x6, 0x1, 0x0, 0x4, 0x5, 0x33b, 0xff, 0xf, 0x3ff, 0x9, 0x1, 0xc990, 0x2, 0x3, 0x5, 0x9, 0x9, 0x401, 0x5c, 0x7, 0x2, 0x4, 0x1, 0xf042, 0x3, 0x99d, 0x0, 0x1, 0xff, 0x2, 0x0, 0x6, 0x566e, 0x10000, 0x6, 0x7f, 0xffffffff, 0x4, 0x4, 0xfff, 0x5, 0x6, 0x9, 0x0, 0x7, 0x5, 0xffffffff, 0xbb, 0xfffffff9, 0x7, 0x100, 0x3, 0x8, 0x6, 0x24b, 0x7ff, 0x1, 0x1, 0x85, 0xe90, 0x7, 0x4, 0xd9, 0x0, 0x3, 0x3, 0x7, 0x10001, 0x5, 0xa0, 0x1009, 0xff, 0x7, 0x79de, 0x3132, 0x7, 0x6, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x6, 0x0, 0x4, 0x401, 0x5, 0x6, 0x4, 0xe, 0x2, 0x9, 0x5, 0xfffffff9, 0x1, 0x1b64, 0x7, 0x2, 0x2, 0xfffffff9, 0x3, 0xe000000, 0x1, 0x10000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x3, 0xfffffff7, 0x4, {0x2, 0x1, 0x600, 0x3, 0x8, 0xfffff7ac}, {0x6, 0x0, 0x4000, 0x6, 0xf68, 0xfffffff4}, 0x7, 0x8, 0x40000005}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3c97, 0xb391, 0x101, 0x3, 0x401, 0x1ff, 0x400, 0x1ff, 0x7, 0x80000001, 0x1, 0x0, 0xfff, 0x101, 0x3ff, 0xcee, 0x6, 0x1, 0x101, 0x4, 0xa1c, 0x501, 0x9, 0x8, 0x7f, 0x78b8, 0x2, 0x1c0000, 0x7, 0x1, 0x7ff, 0x3, 0x1, 0x2, 0xff, 0x7, 0xd, 0xf, 0x7, 0x1c, 0x7, 0x4, 0x658, 0x80000001, 0x3, 0x0, 0x1, 0xfe4, 0x0, 0xfffff000, 0x5a, 0x3, 0x401, 0xfffffffd, 0x4, 0x1ff, 0x101, 0x7, 0x0, 0xd, 0x7, 0x3f7b, 0x8, 0x7, 0x8, 0x923b, 0xeb, 0x3, 0x18, 0x1, 0x8, 0x7, 0x61e2a92, 0x543, 0x3, 0x6, 0x750, 0x0, 0xffff, 0x2, 0x1, 0x40, 0x6, 0x1ff, 0x8, 0xffffff7f, 0x6, 0x3, 0x2, 0x2, 0x6, 0x4, 0x6, 0x6e3a, 0x3, 0x2, 0x80, 0x7ff, 0x3ff, 0x8, 0x9, 0x8000, 0xa, 0x7, 0x8000, 0x0, 0x8, 0xf, 0x52bc, 0x1, 0x6, 0x4f, 0x0, 0x254, 0x2, 0xabbf, 0x5, 0x6, 0xc, 0x1, 0x3, 0x3, 0x10, 0x7, 0x4, 0xfffffff9, 0x2, 0x4, 0x0, 0x6, 0x9, 0x5, 0x8000, 0xc3, 0x0, 0x2, 0x0, 0x945, 0x7, 0x8000, 0xd55b, 0xfff, 0x8001, 0x0, 0x8000, 0x1, 0xedec, 0x4, 0x1, 0x6, 0x5, 0xc4c, 0x0, 0x2400000, 0x7, 0xe1, 0x6, 0x6, 0xa, 0x4, 0x5, 0x6, 0x9, 0x80000000, 0x0, 0x2, 0x316, 0xffff, 0x5, 0x3, 0x1, 0xfffffff8, 0x7, 0x81, 0x0, 0xac06, 0x5, 0x9, 0x88, 0xd, 0x800, 0x4, 0x9, 0xffff, 0x5, 0xf, 0x1000, 0x1, 0x5a, 0xe54, 0x1, 0x9, 0x8, 0x3, 0x0, 0x7, 0x9, 0x9, 0x12, 0x1, 0x4, 0x3, 0x100, 0x714aa9b, 0x0, 0xc, 0x7, 0x14, 0x5, 0x9, 0x10, 0xfffffffa, 0x1, 0xfffffffb, 0x4, 0x2, 0x8, 0x6, 0x5, 0xe, 0x0, 0xffff8000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x7af3, 0x6, 0x16, 0x8000, 0x32, 0x6, 0xa522, 0x4, 0x4, 0x6, 0x5, 0x7, 0x1, 0x81, 0x8, 0x5, 0x9, 0x7, 0xf, 0xfffffff9, 0x6, 0x5, 0xff, 0x9, 0x6, 0xfffffff7, 0x8, 0x1, 0xfffffffa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9af, 0x0, 0x0, 0x9, 0x5, 0xa, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x8, 0xc, 0xdb33, 0xffff, 0xfffffe01, 0x4, 0x200000, 0x36c, 0x5, 0x8, 0xa95, 0x0, 0x0, 0xffffffff, 0x3, 0x7fffffff, 0xfffffff3, 0x6, 0xc4f, 0x4, 0x2, 0xffff84da, 0x0, 0x2, 0x3ff, 0xdb, 0x81, 0x1, 0x4, 0x5, 0xb, 0x8, 0x2, 0x2, 0xe, 0x5, 0x5, 0x1, 0x9, 0xa7d, 0x8, 0x7ff, 0x8, 0x3, 0x1, 0x3, 0x7f, 0x6, 0x6, 0x0, 0x1, 0x1, 0x7, 0x2, 0x3, 0x7, 0x9, 0xc5c4, 0xf46a, 0x3b, 0x6, 0x7b, 0x1, 0x5, 0x9, 0x800, 0x2, 0x6, 0x4, 0x802, 0xfffffff0, 0x58, 0x73, 0x7e9d, 0xe, 0x7fffffff, 0x7ff, 0x0, 0x0, 0xde5f, 0x8, 0x7, 0x1, 0x3, 0x9, 0x9c, 0x8001, 0xfffffff7, 0x8, 0x9, 0xffff, 0x8, 0x5, 0x1, 0x9, 0x4, 0xb86, 0x8, 0x0, 0x3, 0x7e5af764, 0x40, 0x5fb1, 0x0, 0x200, 0x0, 0xc, 0x4, 0x0, 0x3c, 0x9, 0x6, 0x17, 0x9, 0x4, 0x8, 0x2, 0xbe6c, 0x984, 0x5, 0x7, 0x53b1, 0x81, 0xfff, 0x80000000, 0xfffffffa, 0x4, 0x7e4ab338, 0x6, 0x8, 0x3, 0x5, 0x1, 0x10001, 0x2, 0x2, 0xfffffff7, 0x48df, 0x7635, 0x0, 0x7, 0x1a, 0x7fffffff, 0x8001, 0x8, 0xff, 0x9, 0xffff8000, 0x7f, 0xd675, 0x3ff, 0x13526b13, 0x0, 0x879b, 0x2, 0x5, 0xd, 0xf, 0x37c000, 0x1, 0x7, 0xffffff80, 0x2, 0x10, 0x7, 0x4, 0x8001, 0x800, 0xb, 0x5, 0x1, 0x4, 0x1, 0xe0, 0xf, 0x5, 0x200, 0x9, 0x9, 0x6b16, 0x5, 0x7, 0xffffffe7, 0x0, 0x3, 0x9, 0x8, 0x3, 0x7ee, 0x6, 0x5, 0x7, 0x7, 0x101, 0xfffffeff, 0x54, 0x2, 0x4, 0x5, 0xc, 0x4, 0x100, 0x3, 0x2, 0x2, 0x9, 0x1, 0x1, 0x9, 0x4, 0x0, 0x8000, 0x6, 0xfff, 0x40, 0x0, 0x9, 0x1, 0x9, 0x1, 0x1000, 0x9, 0xe, 0x1, 0x8, 0x8, 0x40, 0x7bd899f7, 0x1, 0x3, 0x6, 0xc46, 0x10000, 0x0, 0x101, 0x1000000, 0xe5, 0xfffffffe, 0x1, 0x8, 0x9b18, 0x3, 0xa6, 0x8, 0x2]}]]}, {0xf4, 0x6, "ead638018a7e77c564bce5d500e42772a35a46ae635054672b0f8e72dd79b1e230c43e26943db5d259b86f742679b681f5094a9e7808473f716fdac75592f32cf9b39dab1d7313479ac4db8b9693c0cd78c6aeb9e157a8a09d88ce02dd91da82ac929f918a382a1db444830170a7931d0dbaef3332e7cc49f5b0ebbc0eb28625879494cfb14e50f1a3d1d431e1a5e79f434c2706cc180b81c24289a7c961080bac73075d4616b320d43526a374f326ac9bdb81077c14b36fde75bccc04bae2c54a67c932e8af88b3baf7ffc5b69e244b5991491ea965a05bc3989f4725f2cb3d187fdae50f01684e1e26dc2e92354698"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0x480bd72125a0c189, 0xfff2}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FIBMAP(r5, 0x1, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, 'syzkaller\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.022807209s ago: executing program 4 (id=2736): syz_clone3(&(0x7f0000002c00)={0x9828000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x65) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) 1.900900711s ago: executing program 0 (id=2737): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) syz_io_uring_setup(0x499, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000), &(0x7f0000000280)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x4c, 0x0, &(0x7f00007d0000)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 513.11149ms ago: executing program 5 (id=2738): socket$packet(0x11, 0x3, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0xe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @bcast}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfc, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)="1c717ef7c29d88f7da91be0196f95b7fc92381774c8cebc74347343eabf563c40a53f7d7", 0x24}, {0x0}], 0x2) clock_getres(0xf1f81c070db0eba1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r6, 0x8910, 0x20001114) 510.100791ms ago: executing program 4 (id=2739): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r6, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 490.8533ms ago: executing program 0 (id=2740): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000c00)={@local, @random="ad2380eb3968", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x3, 0x1a, 0x5c, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x8d, 0x3, 0x1, 0x1, 0x3, 0x4}, 0x1, {0x510}}}, {0x8, 0x22eb, 0x4, {{0xb, 0x2, 0x10, 0x1, 0x0, 0x3, 0x4, 0x7}, 0x2, {0x3, 0x6, 0x3, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1}}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000003, 0x12, r1, 0x59be7000) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000)=0x4, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 0s ago: executing program 2 (id=2741): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1, 0x4, 0x46}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): lesystem permissive=1 [ 898.801323][ T30] audit: type=1400 audit(1748070142.313:1568): avc: denied { read } for pid=13450 comm="syz.5.1609" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 898.952713][ T30] audit: type=1400 audit(1748070142.313:1569): avc: denied { open } for pid=13450 comm="syz.5.1609" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 899.246945][ T30] audit: type=1400 audit(1748070142.332:1570): avc: denied { ioctl } for pid=13450 comm="syz.5.1609" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 899.845381][ T30] audit: type=1400 audit(1748070143.492:1571): avc: denied { create } for pid=13458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.336790][ T30] audit: type=1400 audit(1748070143.595:1572): avc: denied { bind } for pid=13458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.372366][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1613'. [ 900.409593][ T30] audit: type=1400 audit(1748070143.614:1573): avc: denied { listen } for pid=13458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.438636][T13470] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1612'. [ 900.495677][ T30] audit: type=1400 audit(1748070143.623:1574): avc: denied { setopt } for pid=13458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.611746][ T30] audit: type=1400 audit(1748070143.642:1575): avc: denied { write } for pid=13458 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 900.726155][ T30] audit: type=1400 audit(1748070143.819:1576): avc: denied { read } for pid=13460 comm="syz.2.1612" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 900.956364][ T5866] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 901.886282][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 901.963731][ T5866] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 901.982510][ T5866] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 901.995277][ T5866] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 902.026816][ T5866] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 902.049800][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.070704][ T5866] usb 4-1: Product: syz [ 902.084048][ T5866] usb 4-1: Manufacturer: syz [ 902.098226][ T5866] usb 4-1: SerialNumber: syz [ 902.155057][ T5866] hso 4-1:6.0: Can't find BULK IN endpoint [ 902.532465][T13488] dummy0: entered promiscuous mode [ 902.697052][ T8338] usb 4-1: USB disconnect, device number 13 [ 904.287632][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 904.287646][ T30] audit: type=1400 audit(1748070147.654:1592): avc: denied { read write } for pid=13491 comm="syz.2.1618" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 904.510956][ T30] audit: type=1400 audit(1748070147.682:1593): avc: denied { open } for pid=13491 comm="syz.2.1618" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 904.534260][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.541924][ T30] audit: type=1400 audit(1748070147.748:1594): avc: denied { create } for pid=13499 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 904.562802][ T30] audit: type=1400 audit(1748070147.757:1595): avc: denied { setopt } for pid=13499 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 904.583228][ T30] audit: type=1400 audit(1748070147.757:1596): avc: denied { write } for pid=13499 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 904.603211][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.223584][ T30] audit: type=1400 audit(1748070148.094:1597): avc: denied { create } for pid=13499 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 905.244802][ T30] audit: type=1400 audit(1748070148.113:1598): avc: denied { ioctl } for pid=13499 comm="syz.5.1620" path="socket:[35817]" dev="sockfs" ino=35817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 905.273923][ T30] audit: type=1400 audit(1748070148.122:1599): avc: denied { bind } for pid=13499 comm="syz.5.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 906.193392][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1621'. [ 906.213270][ T30] audit: type=1400 audit(1748070149.450:1600): avc: denied { append } for pid=13502 comm="syz.3.1621" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 906.385345][T13516] input: syz1 as /devices/virtual/input/input25 [ 906.892683][ T30] audit: type=1400 audit(1748070149.450:1601): avc: denied { open } for pid=13502 comm="syz.3.1621" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 907.125185][ T951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 907.315872][ T951] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 907.401912][ T951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 907.425303][ T951] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 907.525778][ T951] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 907.627351][ T951] usb 5-1: Product: syz [ 907.645008][ T951] usb 5-1: Manufacturer: syz [ 907.819729][ T951] usb 5-1: SerialNumber: syz [ 907.833226][ T951] usb 5-1: config 0 descriptor?? [ 907.896881][ T951] usb 5-1: selecting invalid altsetting 0 [ 908.005941][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 908.599394][ T951] usb 5-1: USB disconnect, device number 11 [ 909.769962][ T6297] udevd[6297]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 910.978902][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 910.978916][ T30] audit: type=1400 audit(1748070153.912:1616): avc: denied { create } for pid=13549 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 911.013193][ T30] audit: type=1400 audit(1748070153.940:1617): avc: denied { ioctl } for pid=13549 comm="syz.0.1634" path="socket:[36269]" dev="sockfs" ino=36269 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 911.038565][ T30] audit: type=1400 audit(1748070153.940:1618): avc: denied { write } for pid=13549 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 911.058347][ T30] audit: type=1400 audit(1748070153.940:1619): avc: denied { read } for pid=13549 comm="syz.0.1634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 912.015548][ T30] audit: type=1400 audit(1748070154.520:1620): avc: denied { watch watch_reads } for pid=13554 comm="syz.3.1636" path="/354" dev="tmpfs" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 912.455068][ T30] audit: type=1400 audit(1748070154.530:1621): avc: denied { mounton } for pid=13554 comm="syz.3.1636" path="/354/file0" dev="tmpfs" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 912.512473][ T30] audit: type=1400 audit(1748070154.548:1622): avc: denied { mount } for pid=13554 comm="syz.3.1636" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 912.546682][ T30] audit: type=1400 audit(1748070154.960:1623): avc: denied { read write } for pid=13558 comm="syz.4.1638" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 912.575816][ T30] audit: type=1400 audit(1748070154.960:1624): avc: denied { open } for pid=13558 comm="syz.4.1638" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 912.604510][ T30] audit: type=1400 audit(1748070155.306:1625): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 913.448614][T13575] kernel read not supported for file /eth0 (pid: 13575 comm: syz.2.1643) [ 914.395518][ T7024] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.621967][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1644'. [ 917.750528][T13594] netlink: 'syz.0.1647': attribute type 2 has an invalid length. [ 917.759104][T13594] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 917.922502][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 917.922517][ T30] audit: type=1400 audit(1748070160.413:1640): avc: denied { bind } for pid=13579 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.082238][T13599] syz0: rxe_newlink: already configured on lo [ 918.192021][ T30] audit: type=1400 audit(1748070160.432:1641): avc: denied { write } for pid=13579 comm="syz.5.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 918.318915][ T30] audit: type=1400 audit(1748070160.554:1642): avc: denied { create } for pid=13598 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 918.340797][ T30] audit: type=1400 audit(1748070160.554:1643): avc: denied { write } for pid=13598 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 918.455507][T13606] rdma_rxe: rxe_newlink: failed to add lo [ 918.983032][T13609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 919.881407][T13615] wg1: entered promiscuous mode [ 919.886431][T13615] wg1: entered allmulticast mode [ 920.060671][T13616] binder: 13614:13616 ioctl 4018620d 0 returned -22 [ 920.067395][ T30] audit: type=1400 audit(1748070162.396:1644): avc: denied { unlink } for pid=13612 comm="syz.2.1652" name="#47" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 920.434498][ T5866] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 920.465809][ T30] audit: type=1400 audit(1748070162.406:1645): avc: denied { mount } for pid=13612 comm="syz.2.1652" name="/" dev="overlay" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 920.590989][ T30] audit: type=1400 audit(1748070162.415:1646): avc: denied { ioctl } for pid=13614 comm="syz.3.1654" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 920.811378][T13625] 9pnet_fd: Insufficient options for proto=fd [ 920.987428][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 921.013316][ T30] audit: type=1400 audit(1748070162.415:1647): avc: denied { read } for pid=13612 comm="syz.2.1652" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 921.065789][ T5866] usb 5-1: config 12 has an invalid interface number: 3 but max is 1 [ 921.073944][ T5866] usb 5-1: config 12 has an invalid interface number: 110 but max is 1 [ 921.102602][ T30] audit: type=1400 audit(1748070162.415:1648): avc: denied { open } for pid=13612 comm="syz.2.1652" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 921.135571][ T30] audit: type=1400 audit(1748070162.696:1649): avc: denied { setopt } for pid=13612 comm="syz.2.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 921.160270][ T5866] usb 5-1: config 12 has no interface number 0 [ 921.217989][ T5866] usb 5-1: config 12 has no interface number 1 [ 921.254909][ T5866] usb 5-1: config 12 interface 110 has no altsetting 0 [ 921.273119][ T5866] usb 5-1: New USB device found, idVendor=05c6, idProduct=9203, bcdDevice=7c.38 [ 921.286653][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.299625][T13630] batadv_slave_0: entered promiscuous mode [ 921.310953][ T5866] usb 5-1: Product: syz [ 921.338470][ T5866] usb 5-1: Manufacturer: syz [ 921.439930][ T5866] usb 5-1: SerialNumber: syz [ 921.856303][T13637] SELinux: syz.5.1658 (13637) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 922.323382][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.332062][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.544590][ T5866] usb 5-1: unknown number of interfaces: 2 [ 922.580516][ T5866] usb 5-1: USB disconnect, device number 12 [ 922.823837][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 922.838855][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 922.856632][T13647] netlink: 'syz.2.1661': attribute type 3 has an invalid length. [ 922.864459][T13647] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 923.331456][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 923.331489][ T30] audit: type=1400 audit(1748070165.464:1656): avc: denied { create } for pid=13639 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 923.368099][T13651] netlink: 'syz.5.1663': attribute type 1 has an invalid length. [ 923.436265][T13651] bond2: entered promiscuous mode [ 923.530925][T13651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 923.883873][ T30] audit: type=1400 audit(1748070165.942:1657): avc: denied { mount } for pid=13656 comm="syz.3.1666" name="/" dev="autofs" ino=36455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 923.968294][T13655] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 924.260986][T13665] rdma_rxe: rxe_newlink: failed to add lo [ 924.776318][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1665'. [ 925.059908][T13649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 925.097718][T13649] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 925.175314][T13649] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 925.888053][T13649] wireguard: wireguard0: Could not create IPv4 socket [ 925.913067][T13649] bond2: (slave wireguard0): Opening slave failed [ 925.936334][ T30] audit: type=1400 audit(1748070167.906:1658): avc: denied { create } for pid=13672 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 925.964420][ T30] audit: type=1400 audit(1748070167.934:1659): avc: denied { sys_module } for pid=13667 comm="syz.2.1667" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 926.609504][ T30] audit: type=1400 audit(1748070168.140:1660): avc: denied { connect } for pid=13672 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 926.650318][ T30] audit: type=1400 audit(1748070168.205:1661): avc: denied { bind } for pid=13672 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 926.843192][ T30] audit: type=1400 audit(1748070168.205:1662): avc: denied { setopt } for pid=13672 comm="syz.4.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 926.870358][ T30] audit: type=1400 audit(1748070168.635:1663): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 927.368359][ T30] audit: type=1400 audit(1748070168.869:1664): avc: denied { create } for pid=13679 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 927.424259][ T30] audit: type=1400 audit(1748070168.888:1665): avc: denied { write } for pid=13679 comm="syz.2.1669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 928.163684][T13690] netlink: 'syz.3.1670': attribute type 11 has an invalid length. [ 929.538507][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 929.538531][ T30] audit: type=1400 audit(1748070171.208:1668): avc: denied { accept } for pid=13697 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 930.025048][ T30] audit: type=1400 audit(1748070171.227:1669): avc: denied { read } for pid=13697 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 930.074765][ T30] audit: type=1400 audit(1748070171.778:1670): avc: denied { set_context_mgr } for pid=13706 comm="syz.4.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 930.080839][T13708] binder: 13706:13708 ioctl c0306201 0 returned -14 [ 930.337769][T13704] could not allocate digest TFM handle crc32-pclmul [ 931.257586][ T30] audit: type=1400 audit(1748070172.751:1671): avc: denied { map } for pid=13706 comm="syz.4.1677" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 932.823970][T13729] Failed to initialize the IGMP autojoin socket (err -2) [ 933.302088][ T30] audit: type=1400 audit(1748070174.323:1672): avc: denied { create } for pid=13722 comm="syz.3.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 933.915795][T13736] rdma_rxe: rxe_newlink: failed to add lo [ 935.614594][ T30] audit: type=1400 audit(1748070176.942:1673): avc: denied { open } for pid=13744 comm="syz.5.1683" path="/dev/ttyqe" dev="devtmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 936.717898][T13766] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 936.734133][T13766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.747749][T13766] batadv0: entered promiscuous mode [ 936.753829][T13766] batadv0: entered allmulticast mode [ 936.761693][T13766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 937.458846][T13771] input: syz0 as /devices/virtual/input/input26 [ 938.898190][ T8342] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 939.092225][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 939.186299][ T30] audit: type=1400 audit(1748070180.244:1674): avc: denied { mount } for pid=13778 comm="syz.5.1694" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 939.282491][ T30] audit: type=1400 audit(1748070180.253:1675): avc: denied { remount } for pid=13778 comm="syz.5.1694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 939.467023][ T8342] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 939.491102][ T8342] usb 4-1: config 0 has no interface number 0 [ 939.515013][ T8342] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 939.526384][ T8342] usb 4-1: config 0 interface 11 has no altsetting 0 [ 939.541209][ T8342] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 939.571084][ T8342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.587594][ T8342] usb 4-1: config 0 descriptor?? [ 939.605136][T13777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 939.615014][ T8342] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 939.834939][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 939.843531][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 939.851996][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 939.860013][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 939.867739][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 939.883508][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 940.007101][ T30] audit: type=1400 audit(1748070181.067:1676): avc: denied { unmount } for pid=10089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 940.075631][ T8342] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 940.222909][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 940.230800][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 940.239387][ T30] audit: type=1400 audit(1748070181.095:1677): avc: denied { setopt } for pid=13790 comm="syz.0.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 940.264319][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 940.272680][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 940.280454][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 940.303026][ T8342] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 940.493648][T13801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 940.500289][T13801] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 940.973422][ T8342] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 942.073114][ T8342] usb 4-1: USB disconnect, device number 14 [ 942.203137][ T8342] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 942.398801][ T30] audit: type=1400 audit(1748070183.284:1678): avc: denied { write } for pid=13812 comm="syz.4.1704" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 942.679879][ T8342] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 942.736189][ T8342] keyspan 4-1:0.11: device disconnected [ 943.235882][ T30] audit: type=1400 audit(1748070183.658:1679): avc: denied { setopt } for pid=13820 comm="syz.5.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.488371][ T30] audit: type=1400 audit(1748070184.285:1680): avc: denied { mount } for pid=13819 comm="syz.0.1706" name="/" dev="ramfs" ino=37677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 944.363007][T13827] overlayfs: failed to clone upperpath [ 944.622149][ T30] audit: type=1400 audit(1748070185.370:1681): avc: denied { setopt } for pid=13834 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 946.012746][T13848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1710'. [ 946.098880][T13842] syz.4.1710 (13842): drop_caches: 2 [ 946.169951][ T30] audit: type=1400 audit(1748070185.435:1682): avc: denied { sqpoll } for pid=13834 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 946.265533][ T30] audit: type=1400 audit(1748070186.923:1683): avc: denied { create } for pid=13847 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 946.293108][ T30] audit: type=1400 audit(1748070186.941:1684): avc: denied { write } for pid=13847 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 946.312514][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.582015][ T30] audit: type=1400 audit(1748070186.951:1685): avc: denied { mount } for pid=13849 comm="syz.5.1715" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 949.049034][ T30] audit: type=1400 audit(1748070187.053:1686): avc: denied { bind } for pid=13847 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 949.071886][ T30] audit: type=1400 audit(1748070187.072:1687): avc: denied { setopt } for pid=13847 comm="syz.2.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 949.092406][ T30] audit: type=1400 audit(1748070187.315:1688): avc: denied { mounton } for pid=13849 comm="syz.5.1715" path="/130/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 949.222613][T13859] veth0_vlan: entered allmulticast mode [ 949.234600][T13860] veth0_vlan: left promiscuous mode [ 949.241458][T13860] veth0_vlan: entered promiscuous mode [ 949.401798][ T30] audit: type=1400 audit(1748070189.804:1689): avc: denied { write } for pid=13863 comm="syz.3.1716" path="socket:[37738]" dev="sockfs" ino=37738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 950.221979][ T30] audit: type=1400 audit(1748070190.627:1690): avc: denied { unmount } for pid=10089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 951.749690][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 952.211670][ T30] audit: type=1400 audit(1748070192.488:1691): avc: denied { connect } for pid=13892 comm="syz.4.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 952.492051][T13896] overlay: Unknown parameter '/dev/cpu/#/msr' [ 952.511064][ T1084] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 952.523927][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.550338][ T30] audit: type=1400 audit(1748070192.713:1692): avc: denied { mount } for pid=13892 comm="syz.4.1724" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 952.733182][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.742283][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.751253][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.760312][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.769918][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.778955][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.788073][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.797787][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1723'. [ 952.917895][ T30] audit: type=1400 audit(1748070192.965:1693): avc: denied { mounton } for pid=13882 comm="syz.2.1723" path="/proc/1410/cgroup" dev="proc" ino=37909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 953.083648][ T8342] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 953.896238][ T30] audit: type=1400 audit(1748070193.424:1694): avc: denied { mounton } for pid=13897 comm="syz.3.1725" path="/syzcgroup/unified/syz3" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 953.919555][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.928687][ T8342] usb 3-1: Using ep0 maxpacket: 16 [ 953.940237][ T8342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.960503][ T30] audit: type=1400 audit(1748070194.106:1695): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 953.960786][ T8342] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 954.054274][ T8342] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 954.079327][ T8342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.129731][T13906] virtio-fs: tag not found [ 954.180643][ T8342] usb 3-1: Product: syz [ 954.196917][ T8342] usb 3-1: Manufacturer: syz [ 954.223236][ T8342] usb 3-1: SerialNumber: syz [ 954.260189][ T8342] usb 3-1: config 0 descriptor?? [ 954.779247][T13895] Failed to initialize the IGMP autojoin socket (err -2) [ 957.521223][ T5866] usb 3-1: USB disconnect, device number 8 [ 957.670225][ T30] audit: type=1400 audit(1748070197.595:1696): avc: denied { wake_alarm } for pid=13927 comm="syz.2.1735" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 958.367191][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.438624][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 960.307068][ T30] audit: type=1400 audit(1748070200.056:1697): avc: denied { read write } for pid=5811 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.447854][ T30] audit: type=1400 audit(1748070200.093:1698): avc: denied { open } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 960.553726][T13951] __nla_validate_parse: 30 callbacks suppressed [ 960.553756][T13951] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1738'. [ 960.648516][T13951] cgroup: Unknown subsys name '-' [ 961.355064][ T30] audit: type=1400 audit(1748070200.093:1699): avc: denied { ioctl } for pid=5811 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 961.381044][ T30] audit: type=1400 audit(1748070200.280:1700): avc: denied { create } for pid=13947 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 961.401920][ T30] audit: type=1400 audit(1748070200.280:1701): avc: denied { write } for pid=13947 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 961.422757][ T30] audit: type=1400 audit(1748070200.308:1702): avc: denied { map_create } for pid=13947 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.442092][ T30] audit: type=1400 audit(1748070200.317:1703): avc: denied { map_read map_write } for pid=13947 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 961.465027][ T30] audit: type=1400 audit(1748070200.317:1704): avc: denied { perfmon } for pid=13947 comm="syz.5.1738" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 961.489524][ T30] audit: type=1400 audit(1748070200.317:1705): avc: denied { prog_load } for pid=13947 comm="syz.5.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 963.826767][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 963.826790][ T30] audit: type=1400 audit(1748070201.842:1731): avc: denied { write } for pid=13959 comm="syz.4.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 964.044038][ T30] audit: type=1400 audit(1748070201.842:1732): avc: denied { execmem } for pid=13960 comm="syz.5.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 964.393251][ T30] audit: type=1400 audit(1748070203.386:1733): avc: denied { read } for pid=13963 comm="syz.3.1745" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 964.414528][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.440205][ T30] audit: type=1400 audit(1748070203.386:1734): avc: denied { open } for pid=13963 comm="syz.3.1745" path="net:[4026533079]" dev="nsfs" ino=4026533079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 964.463963][ T30] audit: type=1400 audit(1748070203.386:1735): avc: denied { create } for pid=13963 comm="syz.3.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 964.496966][ T30] audit: type=1400 audit(1748070203.554:1736): avc: denied { sys_module } for pid=13959 comm="syz.4.1744" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 964.529411][ T30] audit: type=1400 audit(1748070203.554:1737): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 964.613663][ T30] audit: type=1400 audit(1748070204.078:1738): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 965.267247][ T30] audit: type=1400 audit(1748070204.134:1739): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 966.488831][T14000] ubi: mtd0 is already attached to ubi31 [ 966.645839][ T30] audit: type=1400 audit(1748070204.386:1740): avc: denied { mount } for pid=13972 comm="syz.0.1746" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 968.744508][T14031] kAFS: No cell specified [ 969.032963][T14026] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1757'. [ 969.376109][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 969.376158][ T30] audit: type=1400 audit(1748070208.530:1771): avc: denied { write } for pid=14027 comm="syz.3.1759" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 969.456651][ T30] audit: type=1400 audit(1748070208.530:1772): avc: denied { open } for pid=14027 comm="syz.3.1759" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 969.482075][ T30] audit: type=1400 audit(1748070208.577:1773): avc: denied { write } for pid=14032 comm="syz.2.1760" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 969.676785][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 969.724499][ T30] audit: type=1400 audit(1748070208.858:1774): avc: denied { block_suspend } for pid=14035 comm="syz.4.1761" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 969.898032][T14002] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 969.910752][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 970.001225][ T30] audit: type=1400 audit(1748070208.932:1775): avc: denied { create } for pid=14035 comm="syz.4.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 970.102762][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 970.144465][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.154237][ T10] usb 3-1: Product: syz [ 970.178491][ T30] audit: type=1400 audit(1748070209.092:1776): avc: denied { search } for pid=14035 comm="syz.4.1761" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 970.216105][ T10] usb 3-1: Manufacturer: syz [ 970.235746][ T10] usb 3-1: SerialNumber: syz [ 970.243492][ T10] usb 3-1: config 0 descriptor?? [ 970.472150][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 971.396150][ T30] audit: type=1400 audit(1748070210.064:1777): avc: denied { ioctl } for pid=14045 comm="syz.4.1763" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=38198 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 972.109991][ T30] audit: type=1400 audit(1748070210.672:1778): avc: denied { create } for pid=14047 comm="syz.5.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 972.286132][ T30] audit: type=1400 audit(1748070210.682:1779): avc: denied { bind } for pid=14047 comm="syz.5.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 972.306290][ T30] audit: type=1400 audit(1748070210.682:1780): avc: denied { listen } for pid=14047 comm="syz.5.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 972.330366][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 972.947937][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.962706][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.395799][ T10] usb 3-1: USB disconnect, device number 9 [ 975.308871][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'. [ 976.370246][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 976.370263][ T30] audit: type=1400 audit(1748070214.835:1790): avc: denied { create } for pid=14089 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 976.419058][ T30] audit: type=1400 audit(1748070214.854:1791): avc: denied { bind } for pid=14089 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 976.440019][ T30] audit: type=1400 audit(1748070214.863:1792): avc: denied { connect } for pid=14089 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 976.973632][T14100] rdma_rxe: rxe_newlink: failed to add lo [ 977.016650][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 977.464291][ T30] audit: type=1400 audit(1748070214.900:1793): avc: denied { read write } for pid=14089 comm="syz.2.1774" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 977.464332][ T30] audit: type=1400 audit(1748070214.928:1794): avc: denied { open } for pid=14089 comm="syz.2.1774" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 977.464360][ T30] audit: type=1400 audit(1748070214.947:1795): avc: denied { ioctl } for pid=14089 comm="syz.2.1774" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 977.464382][ T30] audit: type=1400 audit(1748070214.975:1796): avc: denied { create } for pid=14089 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 977.464403][ T30] audit: type=1400 audit(1748070215.022:1797): avc: denied { bind } for pid=14089 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 977.464424][ T30] audit: type=1400 audit(1748070215.050:1798): avc: denied { write } for pid=14089 comm="syz.2.1774" path="socket:[39095]" dev="sockfs" ino=39095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 977.464448][ T30] audit: type=1400 audit(1748070215.134:1799): avc: denied { ioctl } for pid=14092 comm="syz.4.1775" path="socket:[38273]" dev="sockfs" ino=38273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 977.624949][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.739247][ C1] vkms_vblank_simulate: vblank timer overrun [ 978.122664][T14107] tipc: Started in network mode [ 978.127698][T14107] tipc: Node identity ac14140f, cluster identity 4711 [ 978.137373][T14107] tipc: Enabling of bearer rejected, failed to enable media [ 978.542180][T14109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=14109 comm=syz.4.1778 [ 979.125595][T14116] ubi: mtd0 is already attached to ubi31 [ 979.690150][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'. [ 980.773740][T14120] 9pnet_fd: Insufficient options for proto=fd [ 980.955288][T14133] veth0: entered promiscuous mode [ 981.135784][T13172] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 981.403559][T14121] veth0: left promiscuous mode [ 981.536613][T13172] usb 3-1: Using ep0 maxpacket: 16 [ 981.588600][T13172] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 981.726604][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 981.726726][ T30] audit: type=1400 audit(1748070220.082:1815): avc: denied { ioctl } for pid=14135 comm="syz.5.1785" path="socket:[38353]" dev="sockfs" ino=38353 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 981.751062][T13172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.980997][T13172] usb 3-1: config 0 has no interfaces? [ 982.278448][T13172] usb 3-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 982.309756][ T30] audit: type=1400 audit(1748070220.335:1816): avc: denied { read } for pid=14140 comm="syz.3.1787" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.349737][T13172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 982.381399][T13172] usb 3-1: Product: syz [ 982.385636][T13172] usb 3-1: Manufacturer: syz [ 982.400255][ T30] audit: type=1400 audit(1748070220.335:1817): avc: denied { open } for pid=14140 comm="syz.3.1787" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.729769][ T30] audit: type=1400 audit(1748070220.344:1818): avc: denied { ioctl } for pid=14140 comm="syz.3.1787" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 983.602049][T13172] usb 3-1: SerialNumber: syz [ 983.639717][T13172] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 983.659095][T13172] apple-mfi-fastcharge 3-1: can't set config #0, error -71 [ 983.676096][T13172] apple-mfi-fastcharge 3-1: USB disconnect, device number 10 [ 983.808441][ T30] audit: type=1400 audit(1748070220.391:1819): avc: denied { open } for pid=14137 comm="syz.4.1786" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 984.805057][ T30] audit: type=1400 audit(1748070222.954:1820): avc: denied { read write } for pid=14166 comm="syz.3.1796" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 985.797535][ T30] audit: type=1400 audit(1748070222.954:1821): avc: denied { open } for pid=14166 comm="syz.3.1796" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 985.828109][ T30] audit: type=1400 audit(1748070223.693:1822): avc: denied { write } for pid=14164 comm="syz.2.1797" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 985.851415][T14172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.878499][ T8370] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 985.896174][ T30] audit: type=1400 audit(1748070223.955:1823): avc: denied { mount } for pid=14168 comm="syz.0.1798" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 985.923823][ T30] audit: type=1400 audit(1748070223.974:1824): avc: denied { remount } for pid=14168 comm="syz.0.1798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 986.271497][T14180] overlayfs: missing 'lowerdir' [ 986.459734][ T8370] usb 6-1: Using ep0 maxpacket: 32 [ 986.827137][ T8370] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 986.836657][ T8370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.849192][ T8370] usb 6-1: Product: syz [ 986.893805][ T8370] usb 6-1: Manufacturer: syz [ 986.904793][ T8370] usb 6-1: SerialNumber: syz [ 987.154880][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 987.154904][ T30] audit: type=1400 audit(1748070225.162:1827): avc: denied { map } for pid=14182 comm="syz.2.1801" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 987.239486][ T8370] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 987.319832][ T8370] usb 6-1: USB disconnect, device number 7 [ 987.504094][ T30] audit: type=1400 audit(1748070225.190:1828): avc: denied { execute } for pid=14182 comm="syz.2.1801" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 987.528409][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.062224][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 989.411166][ T30] audit: type=1400 audit(1748070227.126:1829): avc: denied { create } for pid=14205 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 989.859460][ T30] audit: type=1400 audit(1748070227.126:1830): avc: denied { setopt } for pid=14205 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 991.137803][T14224] syz.5.1813: attempt to access beyond end of device [ 991.137803][T14224] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 991.249634][T14224] syz.5.1813: attempt to access beyond end of device [ 991.249634][T14224] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 991.304063][T14224] Mount JFS Failure: -5 [ 991.308498][T14224] jfs_mount failed w/return code = -5 [ 991.402178][ T30] audit: type=1400 audit(1748070229.146:1831): avc: denied { execute } for pid=14211 comm="syz.2.1810" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 991.435707][T14220] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 991.446203][T14220] SELinux: failed to load policy [ 991.472346][ T30] audit: type=1400 audit(1748070229.175:1832): avc: denied { load_policy } for pid=14211 comm="syz.2.1810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 993.135850][ T30] audit: type=1400 audit(1748070230.746:1833): avc: denied { create } for pid=14234 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 993.480917][ T30] audit: type=1400 audit(1748070230.765:1834): avc: denied { bind } for pid=14234 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 993.508531][ T30] audit: type=1400 audit(1748070230.765:1835): avc: denied { listen } for pid=14234 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 993.828931][ T30] audit: type=1400 audit(1748070230.765:1836): avc: denied { setopt } for pid=14234 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 994.141738][ T30] audit: type=1400 audit(1748070230.765:1837): avc: denied { write } for pid=14234 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 995.418799][T14261] bond0: (slave batadv0): Releasing backup interface [ 996.004308][T14261] batadv0: left promiscuous mode [ 996.033794][T14261] batadv0: left allmulticast mode [ 996.080124][T14261] bridge_slave_0: left allmulticast mode [ 996.101682][T14261] bridge_slave_0: left promiscuous mode [ 996.120184][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.147327][T14261] bridge_slave_1: left allmulticast mode [ 996.170847][T14261] bridge_slave_1: left promiscuous mode [ 996.192295][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.221498][T14261] vlan2: left promiscuous mode [ 996.232991][T14261] bond0: left promiscuous mode [ 996.243378][T14261] bond_slave_0: left promiscuous mode [ 996.258312][T14261] bond_slave_1: left promiscuous mode [ 996.277260][T14261] bond0: (slave bond_slave_0): Releasing backup interface [ 996.286118][T14261] bond_slave_0: left allmulticast mode [ 996.296485][T14261] bond0: (slave bond_slave_1): Releasing backup interface [ 996.307853][T14261] bond_slave_1: left allmulticast mode [ 996.319382][T14261] team0: Port device team_slave_0 removed [ 996.334444][T14261] team0: Port device team_slave_1 removed [ 996.342023][T14261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.353486][T14261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.364792][T14261] vlan2: left allmulticast mode [ 996.371544][T14273] rdma_rxe: rxe_newlink: failed to add lo [ 996.493317][T14261] bridge0: port 3(vlan2) entered disabled state [ 996.735378][T14277] @: renamed from bond_slave_0 (while UP) [ 996.797589][ T8342] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 996.974977][ T8370] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 997.000731][ T8342] usb 4-1: Using ep0 maxpacket: 8 [ 997.018287][ T8342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.035284][ T8342] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 997.051035][ T8342] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 997.063171][ T8342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.073772][ T8342] usb 4-1: Product: syz [ 997.081915][ T8342] usb 4-1: Manufacturer: syz [ 997.089173][ T8342] usb 4-1: SerialNumber: syz [ 997.105483][ T8342] usb 4-1: config 0 descriptor?? [ 997.127404][ T8342] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 997.246899][ T8370] usb 5-1: Using ep0 maxpacket: 8 [ 997.275589][ T8370] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.322437][ T8370] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 997.387059][ T8370] usb 5-1: config 1 has no interface number 1 [ 997.442605][ T8370] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 997.551309][ T8370] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.592218][T13172] usb 4-1: USB disconnect, device number 15 [ 997.670007][ T8370] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 997.696448][ T8370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.718238][ T8370] usb 5-1: Product: syz [ 997.722538][ T8370] usb 5-1: Manufacturer: syz [ 997.727299][ T8370] usb 5-1: SerialNumber: syz [ 998.010766][ T8370] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 998.030813][ T8370] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 998.530257][ T8370] usb 5-1: 2:1 : unsupported sample bitwidth 0 in 0 bytes [ 999.005570][ T8370] usb 5-1: USB disconnect, device number 13 [ 999.041807][ T30] audit: type=1400 audit(1748070236.284:1838): avc: denied { write } for pid=14305 comm="syz.5.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 999.526708][T14316] bridge0: entered allmulticast mode [ 999.586060][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.968922][T14323] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1844'. [ 1000.124157][ T8338] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1000.250728][T14327] rdma_rxe: rxe_newlink: failed to add lo [ 1000.591454][ T8338] usb 3-1: Using ep0 maxpacket: 32 [ 1000.642067][ T8338] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1000.799206][ T8338] usb 3-1: config 0 has no interface number 0 [ 1000.818186][ T8338] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1000.981406][ T8338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.090303][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1849'. [ 1001.099322][T14334] batman_adv: batadv0: Interface deactivated: dummy0 [ 1001.106410][T14334] batman_adv: batadv0: Removing interface: dummy0 [ 1001.162585][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.170361][T14334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.181149][T14334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.188873][T14334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.203553][T14334] batman_adv: batadv0: Removing interface: gretap1 [ 1001.401660][ T30] audit: type=1400 audit(1748070238.182:1839): avc: denied { sqpoll } for pid=14331 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1001.448232][ T8338] usb 3-1: Product: syz [ 1001.484601][ T8338] usb 3-1: Manufacturer: syz [ 1001.512871][ T8338] usb 3-1: SerialNumber: syz [ 1001.547082][ T8338] usb 3-1: config 0 descriptor?? [ 1001.575012][ T8338] smsc95xx v2.0.0 [ 1001.583311][ T8338] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1001.598785][ T8338] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1001.855220][ T8342] usb 3-1: USB disconnect, device number 11 [ 1001.961930][ T8399] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1002.744468][ T8399] usb 5-1: config 0 has an invalid interface number: 93 but max is 0 [ 1002.772637][ T8399] usb 5-1: config 0 has no interface number 0 [ 1002.801509][ T8399] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=3f.ac [ 1002.834508][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 1002.847073][ T8399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.885085][ T8399] usb 5-1: Product: syz [ 1002.889289][ T8399] usb 5-1: Manufacturer: syz [ 1002.923869][ T8399] usb 5-1: SerialNumber: syz [ 1002.972486][ T8399] usb 5-1: config 0 descriptor?? [ 1003.321299][ T30] audit: type=1400 audit(1748070240.109:1840): avc: denied { relabelfrom } for pid=14353 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1003.378264][ T8399] usb_ehset_test 5-1:0.93: probe with driver usb_ehset_test failed with error -32 [ 1003.435353][ T8399] usb 5-1: USB disconnect, device number 14 [ 1003.497603][ T30] audit: type=1400 audit(1748070240.296:1841): avc: denied { relabelto } for pid=14353 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1003.818820][T14365] binder: 14361:14365 ioctl c0306201 200000000780 returned -11 [ 1003.829234][ T30] audit: type=1400 audit(1748070240.755:1842): avc: denied { call } for pid=14361 comm="syz.3.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1004.332947][ T30] audit: type=1400 audit(1748070241.232:1843): avc: denied { create } for pid=14366 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1004.378525][ T30] audit: type=1400 audit(1748070241.279:1844): avc: denied { bind } for pid=14366 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1005.553263][ T30] audit: type=1400 audit(1748070242.317:1845): avc: denied { create } for pid=14377 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1005.812067][ T30] audit: type=1400 audit(1748070242.439:1846): avc: denied { create } for pid=14377 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1005.904172][ T30] audit: type=1400 audit(1748070242.467:1847): avc: denied { bind } for pid=14377 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1005.985537][ T30] audit: type=1400 audit(1748070242.467:1848): avc: denied { write } for pid=14377 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1006.992484][ T30] audit: type=1400 audit(1748070242.476:1849): avc: denied { setopt } for pid=14377 comm="syz.3.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1007.059827][ T30] audit: type=1400 audit(1748070242.747:1850): avc: denied { create } for pid=14383 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1007.082489][ T30] audit: type=1400 audit(1748070242.803:1851): avc: denied { bind } for pid=14383 comm="syz.0.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1007.350346][T14404] lo: entered promiscuous mode [ 1007.374928][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'. [ 1007.400349][T14404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.585314][ T8399] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1009.178564][ T8399] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1009.188845][ T30] audit: type=1400 audit(1748070245.769:1852): avc: denied { create } for pid=14412 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1009.449264][ T8399] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1009.505771][ T8399] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1009.687053][ T8399] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1009.722744][ T8399] usb 4-1: Product: syz [ 1009.732003][ T8399] usb 4-1: Manufacturer: syz [ 1009.744154][ T8399] usb 4-1: SerialNumber: syz [ 1009.853735][ T8399] usb 4-1: config 0 descriptor?? [ 1009.881197][ T8399] usb 4-1: selecting invalid altsetting 0 [ 1010.994456][T14345] usb 4-1: USB disconnect, device number 16 [ 1012.265130][T14441] rdma_rxe: rxe_newlink: failed to add lo [ 1012.320135][T14451] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 1013.047270][T14345] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1013.840864][T14345] usb 6-1: config 12 has an invalid interface number: 154 but max is 0 [ 1013.857914][T14345] usb 6-1: config 12 has no interface number 0 [ 1014.063089][T14345] usb 6-1: config 12 interface 154 has no altsetting 0 [ 1014.077513][T14345] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=24.e8 [ 1014.104954][T14345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.175660][T14345] usb 6-1: Product: syz [ 1014.200233][T14345] usb 6-1: Manufacturer: syz [ 1014.246614][T14345] usb 6-1: SerialNumber: syz [ 1014.420593][T14479] usb usb8: usbfs: process 14479 (syz.4.1898) did not claim interface 0 before use [ 1015.062704][T14345] usb 6-1: USB disconnect, device number 8 [ 1015.224101][ T30] audit: type=1400 audit(1748070251.390:1853): avc: denied { create } for pid=14486 comm="syz.2.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1015.980848][ T30] audit: type=1400 audit(1748070251.390:1854): avc: denied { ioctl } for pid=14486 comm="syz.2.1904" path="socket:[40052]" dev="sockfs" ino=40052 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1016.218350][T14501] rdma_rxe: rxe_newlink: failed to add lo [ 1017.602438][T14522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=14522 comm=syz.3.1912 [ 1018.742130][ T30] audit: type=1400 audit(1748070254.702:1855): avc: denied { map } for pid=14529 comm="syz.2.1919" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1019.281631][ T30] audit: type=1400 audit(1748070255.076:1856): avc: denied { create } for pid=14529 comm="syz.2.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1020.061213][ T30] audit: type=1400 audit(1748070255.955:1857): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1020.144057][ T30] audit: type=1400 audit(1748070255.955:1858): avc: denied { ioctl } for pid=14540 comm="syz.0.1922" path="socket:[40295]" dev="sockfs" ino=40295 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1020.962803][T14553] binder: 14552:14553 ioctl 4018620d 0 returned -22 [ 1022.658404][ T6322] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1022.882560][ T30] audit: type=1400 audit(1748070258.518:1859): avc: denied { ioctl } for pid=14586 comm="syz.5.1939" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1022.908080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.308379][T14604] binder: 14602:14604 ioctl 4018620d 0 returned -22 [ 1023.385111][T14345] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1024.053949][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1024.069672][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1024.082031][T14345] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1024.090396][T14345] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1024.309586][T14345] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.448906][T14345] usb 5-1: config 220 has no interface number 2 [ 1024.546846][T14345] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1024.682953][T14345] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1024.776498][T14345] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1024.850790][T14345] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1024.950549][T14345] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1025.083782][T14345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.171414][T14345] usb 5-1: Product: syz [ 1025.175624][T14345] usb 5-1: Manufacturer: syz [ 1025.234200][T14345] usb 5-1: SerialNumber: syz [ 1025.530799][T14345] usb 5-1: selecting invalid altsetting 0 [ 1025.569672][T14345] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1025.604353][T14345] usb 5-1: No valid video chain found. [ 1025.628055][T14345] usb 5-1: selecting invalid altsetting 0 [ 1025.637598][T14345] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1025.657369][T14345] usb 5-1: USB disconnect, device number 15 [ 1025.758433][ T8338] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1025.925866][ T8338] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.945548][ T8338] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.456284][ T8338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1026.462954][ T8338] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1026.472057][ T8338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.483126][ T8338] usb 4-1: config 0 descriptor?? [ 1026.876072][T14664] team0: Port device virt_wifi0 added [ 1027.220055][ T8338] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 1027.244444][ T8338] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 1027.252392][ T8338] cypress 0003:04B4:DE61.0006: unknown main item tag 0x0 [ 1027.305341][ T8338] cypress 0003:04B4:DE61.0006: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 1028.314961][ T8338] usb 4-1: USB disconnect, device number 17 [ 1028.492036][T14681] fido_id[14681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1028.780858][T14696] tipc: Started in network mode [ 1028.785912][T14696] tipc: Node identity ac14140f, cluster identity 4711 [ 1028.795212][T14696] tipc: Enabling of bearer rejected, failed to enable media [ 1031.502539][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 1033.745395][ T30] audit: type=1400 audit(1748070268.753:1860): avc: denied { accept } for pid=14753 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1033.830289][ T30] audit: type=1400 audit(1748070268.771:1861): avc: denied { setopt } for pid=14753 comm="syz.0.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1033.944541][ T30] audit: type=1400 audit(1748070268.930:1862): avc: denied { bind } for pid=14762 comm="syz.4.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1034.001409][T13172] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1034.193859][T13172] usb 4-1: Using ep0 maxpacket: 32 [ 1034.217282][T13172] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.388540][T13172] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1034.513239][T13172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1034.658805][T13172] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1035.199924][T13172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.210441][T13172] usb 4-1: config 0 descriptor?? [ 1036.024219][T13172] corsair-cpro 0003:1B1C:0C10.0007: unknown main item tag 0x3 [ 1036.115184][T13172] corsair-cpro 0003:1B1C:0C10.0007: item fetching failed at offset 3/5 [ 1036.133098][T13172] corsair-cpro 0003:1B1C:0C10.0007: probe with driver corsair-cpro failed with error -22 [ 1036.568206][ T8399] usb 4-1: USB disconnect, device number 18 [ 1036.758094][ T30] audit: type=1400 audit(1748070271.568:1863): avc: denied { read write } for pid=14803 comm="syz.4.2015" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1036.819360][ T30] audit: type=1400 audit(1748070271.568:1864): avc: denied { open } for pid=14803 comm="syz.4.2015" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1037.325735][T13172] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1037.513372][T13172] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 1037.654542][T13172] usb 5-1: config 0 has no interface number 0 [ 1037.685737][T13172] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1038.206455][T13172] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1038.264500][T13172] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1038.558046][T13172] usb 5-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1038.614141][ T30] audit: type=1400 audit(1748070273.289:1865): avc: denied { create } for pid=14824 comm="syz.5.2023" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1038.659359][T13172] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1038.747274][T13172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.898160][T13172] usb 5-1: config 0 descriptor?? [ 1039.005098][T13172] hub 5-1:0.3: bad descriptor, ignoring hub [ 1039.071212][T13172] hub 5-1:0.3: probe with driver hub failed with error -5 [ 1039.146032][T13172] sierra 5-1:0.3: Sierra USB modem converter detected [ 1039.253841][ T30] audit: type=1400 audit(1748070273.907:1866): avc: denied { unlink } for pid=10089 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1039.330550][T13172] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1039.518908][T13172] usb 5-1: Sierra USB modem converter now attached to ttyUSB1 [ 1039.865433][T14840] netlink: 'syz.5.2026': attribute type 4 has an invalid length. [ 1040.066399][T13172] usb 5-1: USB disconnect, device number 16 [ 1040.090265][T13172] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1040.133431][T13172] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1040.163389][T13172] sierra 5-1:0.3: device disconnected [ 1040.186773][ T30] audit: type=1400 audit(1748070274.777:1867): avc: denied { create } for pid=14847 comm="syz.5.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1040.693706][ T951] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1041.377566][ T951] usb 6-1: Using ep0 maxpacket: 16 [ 1041.406107][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.436651][ T951] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1041.475202][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.513289][ T951] usb 6-1: config 0 descriptor?? [ 1041.559955][ T8399] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1041.745899][ T8399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.759390][ T8399] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1041.771185][ T8399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.791627][ T8399] usb 5-1: config 0 descriptor?? [ 1041.987007][ T951] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1042.047724][ T8399] usbhid 5-1:0.0: can't add hid device: -71 [ 1042.078207][ T8399] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1042.092498][ T8399] usb 5-1: USB disconnect, device number 17 [ 1042.243615][T14894] rdma_rxe: rxe_newlink: failed to add lo [ 1042.482427][ T951] usb 6-1: USB disconnect, device number 9 [ 1042.546932][ T8399] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1043.429939][ T8399] usb 5-1: Using ep0 maxpacket: 32 [ 1043.473013][ T8399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.502620][ T8399] usb 5-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice= 0.40 [ 1044.312373][ T8399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.467525][ T8399] usb 5-1: config 0 descriptor?? [ 1044.897234][ T8399] usb 5-1: can't set config #0, error -71 [ 1044.969456][ T8399] usb 5-1: USB disconnect, device number 18 [ 1045.483194][ T30] audit: type=1400 audit(1748070279.725:1868): avc: denied { setopt } for pid=14928 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1045.573097][ T30] audit: type=1400 audit(1748070279.762:1869): avc: denied { read } for pid=14928 comm="syz.4.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1045.609091][ T30] audit: type=1400 audit(1748070279.847:1870): avc: denied { setopt } for pid=14934 comm="syz.2.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.620311][T14933] bond0: entered promiscuous mode [ 1045.677286][T14933] @: entered promiscuous mode [ 1045.695178][T14933] bond_slave_1: entered promiscuous mode [ 1045.712674][T14933] batadv0: entered promiscuous mode [ 1045.725962][T14933] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1045.750336][T14933] bond0: left promiscuous mode [ 1045.771241][ T8342] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1045.787766][T14933] @: left promiscuous mode [ 1045.796614][T14933] bond_slave_1: left promiscuous mode [ 1045.821376][T14933] batadv0: left promiscuous mode [ 1046.237278][ T8342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.256415][ T8342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.301503][ T8342] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1046.319335][ T8342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.442537][T14956] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.12) [ 1046.465386][ T8342] usb 4-1: config 0 descriptor?? [ 1046.580466][T14961] rdma_rxe: rxe_newlink: failed to add lo [ 1047.888255][ T8342] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 1048.036209][ T8342] cm6533_jd 0003:0D8C:0022.0009: item fetching failed at offset 4/5 [ 1048.059092][ T8342] cm6533_jd 0003:0D8C:0022.0009: parse failed [ 1048.108392][ T8342] cm6533_jd 0003:0D8C:0022.0009: probe with driver cm6533_jd failed with error -22 [ 1048.172892][ T8342] usb 4-1: USB disconnect, device number 19 [ 1048.259078][ T30] audit: type=1400 audit(1748070282.325:1871): avc: denied { mount } for pid=14972 comm="syz.0.2080" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1049.684928][T14997] netlink: 'syz.5.2088': attribute type 1 has an invalid length. [ 1050.972400][ T30] audit: type=1400 audit(1748070284.823:1872): avc: denied { override_creds } for pid=15010 comm="syz.2.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1052.102802][ T8338] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1052.474550][ T8338] usb 3-1: Using ep0 maxpacket: 32 [ 1052.498989][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1052.537613][ T8338] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1052.574953][T15044] binder: 15039:15044 ioctl c0306201 200000000780 returned -11 [ 1052.631760][ T8338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.002947][ T8338] usb 3-1: Product: syz [ 1053.588395][ T8338] usb 3-1: Manufacturer: syz [ 1053.647739][ T8338] usb 3-1: SerialNumber: syz [ 1053.667356][ T30] audit: type=1400 audit(1748070287.292:1873): avc: denied { write } for pid=15046 comm="syz.0.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1053.964955][ T8338] usb 3-1: config 0 descriptor?? [ 1054.274710][T14345] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1054.636931][ T30] audit: type=1400 audit(1748070287.938:1874): avc: denied { write } for pid=15054 comm="syz.3.2110" name="igmp" dev="proc" ino=4026533099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1054.708801][T14345] usb 6-1: Using ep0 maxpacket: 32 [ 1054.720104][T14345] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1054.729296][T14345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.764431][T14345] usb 6-1: config 0 descriptor?? [ 1055.007964][T14345] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1055.049440][T14345] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1055.084592][T14345] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1055.113381][T14345] usb 6-1: media controller created [ 1055.179943][T14345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.252981][ T8338] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1056.066323][T14345] az6027: usb out operation failed. (-71) [ 1056.078842][T14345] az6027: usb out operation failed. (-71) [ 1056.085129][T14345] stb0899_attach: Driver disabled by Kconfig [ 1056.096149][T14345] az6027: no front-end attached [ 1056.096149][T14345] [ 1056.111186][T14345] az6027: usb out operation failed. (-71) [ 1056.118114][T14345] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1056.139213][T14345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 1056.149437][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1056.179896][ T30] audit: type=1400 audit(1748070289.724:1875): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3117 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1056.205897][T14345] dvb-usb: schedule remote query interval to 400 msecs. [ 1056.213025][T14345] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1056.236891][ T8338] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1056.256265][T14345] usb 6-1: USB disconnect, device number 10 [ 1056.276308][ T8338] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1056.286911][ T30] audit: type=1400 audit(1748070289.724:1876): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3117 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1056.330583][ T8338] usb 3-1: USB disconnect, device number 12 [ 1056.343384][ T30] audit: type=1400 audit(1748070289.724:1877): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3117 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1056.402929][T14345] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1057.615518][ T30] audit: type=1400 audit(1748070291.062:1878): avc: denied { connect } for pid=15090 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1057.933498][ T30] audit: type=1400 audit(1748070291.062:1879): avc: denied { write } for pid=15090 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1058.104927][ T30] audit: type=1400 audit(1748070291.530:1880): avc: denied { create } for pid=15103 comm="syz.4.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1058.169577][ T30] audit: type=1400 audit(1748070291.595:1881): avc: denied { write } for pid=15103 comm="syz.4.2127" path="socket:[42963]" dev="sockfs" ino=42963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1058.294401][ T30] audit: type=1400 audit(1748070291.633:1882): avc: denied { mount } for pid=15106 comm="syz.0.2130" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1059.430186][ T30] audit: type=1400 audit(1748070292.774:1883): avc: denied { mounton } for pid=15119 comm="syz.3.2135" path="/434/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1059.505495][ T30] audit: type=1400 audit(1748070292.839:1884): avc: denied { bind } for pid=15127 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1059.757080][T15137] rdma_rxe: rxe_newlink: failed to add lo [ 1060.247579][ T30] audit: type=1400 audit(1748070292.877:1885): avc: denied { write } for pid=15127 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1062.577728][ T30] audit: type=1400 audit(1748070295.711:1886): avc: denied { write } for pid=15179 comm="syz.2.2157" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1062.674046][T14345] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1063.359224][T14345] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1063.373404][T14345] usb 6-1: config 0 has no interface number 0 [ 1063.386397][T14345] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1063.408466][T14345] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1063.419895][T14345] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1063.432984][T14345] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1063.445157][T14345] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1063.456507][T14345] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1063.591259][T14345] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1063.621330][T14345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.692144][T15195] rdma_rxe: rxe_newlink: failed to add lo [ 1063.850293][T14345] usb 6-1: config 0 descriptor?? [ 1063.856885][T15178] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1064.232495][T15203] binder: 15202:15203 ioctl 4018620d 0 returned -22 [ 1064.315860][T15178] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1064.338817][T14345] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1064.671312][T14345] usb 6-1: USB disconnect, device number 11 [ 1064.671363][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 1064.696032][T14345] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1064.932714][T15178] ldusb: No device or device unplugged -19 [ 1065.021612][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2173'. [ 1066.199134][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2178'. [ 1067.691575][ T30] audit: type=1400 audit(1748070300.500:1887): avc: denied { mount } for pid=15270 comm="syz.4.2191" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1067.770398][T15277] binder: 15274:15277 ioctl c0306201 200000000540 returned -22 [ 1067.951918][T15283] input: syz1 as /devices/virtual/input/input29 [ 1070.154843][ T30] audit: type=1400 audit(1748070302.801:1888): avc: denied { bind } for pid=15306 comm="syz.4.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1072.908758][T15319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.708841][T15351] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 1074.740852][T15352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2223'. [ 1075.108038][T15361] input: syz1 as /devices/virtual/input/input30 [ 1080.986180][ T8342] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1081.520946][ T8342] usb 4-1: Using ep0 maxpacket: 32 [ 1081.557190][ T8342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.606900][ T8342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.649539][ T8342] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1081.650804][T15419] 9pnet_fd: Insufficient options for proto=fd [ 1081.669588][ T8342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.697899][ T8342] usb 4-1: config 0 descriptor?? [ 1081.716419][ T8342] hub 4-1:0.0: USB hub found [ 1081.941954][T15425] syzkaller1: entered promiscuous mode [ 1081.942675][ T8342] hub 4-1:0.0: 1 port detected [ 1081.958307][T15425] syzkaller1: entered allmulticast mode [ 1081.973610][T15425] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 1082.098112][ T8338] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1082.447426][ T8338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.490740][ T8338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.513717][ T8338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1082.584891][ T8338] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.621547][ T8338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.672030][ T8342] hub 4-1:0.0: activate --> -90 [ 1082.690910][ T8338] usb 5-1: config 0 descriptor?? [ 1083.017478][T14345] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1083.172940][ T8342] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 1083.199263][T14345] usb 6-1: Using ep0 maxpacket: 8 [ 1083.258536][T14345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1083.271782][ T8342] usb 4-1-port1: connect-debounce failed [ 1083.302913][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1083.315799][ T10] usb 4-1: USB disconnect, device number 20 [ 1083.423391][T14345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.453969][ T8338] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1083.463586][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.492363][ T8338] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1083.493938][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1083.533799][T14345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1083.547146][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1083.569368][T14345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.582121][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.599589][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1083.613153][T14345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1083.624527][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1083.636774][T14345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1083.651701][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.663989][T14345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1083.683240][T14345] usb 6-1: string descriptor 0 read error: -22 [ 1083.689506][T14345] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1083.702077][T14345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.781206][T14345] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1084.769788][ T8338] usb 6-1: USB disconnect, device number 12 [ 1084.849200][ T30] audit: type=1400 audit(1748070316.552:1889): avc: denied { bind } for pid=15447 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1084.880647][ T30] audit: type=1400 audit(1748070316.580:1890): avc: denied { setopt } for pid=15447 comm="syz.3.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1084.948795][ T30] audit: type=1400 audit(1748070316.645:1891): avc: denied { create } for pid=15449 comm="syz.2.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1085.002997][ T30] audit: type=1400 audit(1748070316.673:1892): avc: denied { sys_admin } for pid=15449 comm="syz.2.2259" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1085.117116][T14345] usb 5-1: USB disconnect, device number 19 [ 1085.189142][ T30] audit: type=1400 audit(1748070316.860:1893): avc: denied { write } for pid=15456 comm="syz.4.2263" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1088.707292][T14345] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1088.899946][T14345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.962398][T14345] usb 4-1: too many endpoints for config 1 interface 1 altsetting 167: 92, using maximum allowed: 30 [ 1089.018621][T14345] usb 4-1: config 1 interface 1 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 1089.050490][ T8342] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1089.069161][T14345] usb 4-1: config 1 interface 1 has no altsetting 1 [ 1089.091835][T14345] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.109258][T14345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.150981][T14345] usb 4-1: Product: syz [ 1089.188697][T14345] usb 4-1: Manufacturer: syz [ 1089.209943][T14345] usb 4-1: SerialNumber: syz [ 1089.219009][ T8342] usb 3-1: Using ep0 maxpacket: 8 [ 1089.254704][T14345] usb 4-1: selecting invalid altsetting 1 [ 1089.261123][ T8342] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1089.282941][ T8342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1089.315052][ T8342] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1089.360395][ T8342] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.406001][ T8342] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.439011][ T8342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.720509][T14345] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1089.726695][ T8342] usb 3-1: GET_CAPABILITIES returned 0 [ 1089.737262][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.741734][T14345] cdc_ncm 4-1:1.0: bind() failure [ 1089.743902][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1089.749085][ T8342] usbtmc 3-1:16.0: can't read capabilities [ 1089.917085][T14345] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1090.039261][T14345] cdc_ncm 4-1:1.1: bind() failure [ 1090.052272][ T8342] usb 3-1: USB disconnect, device number 13 [ 1090.204241][T14345] usb 4-1: USB disconnect, device number 21 [ 1091.386671][T15513] loop4: detected capacity change from 0 to 524255232 [ 1091.403445][T15516] blk_print_req_error: 24 callbacks suppressed [ 1091.403467][T15516] I/O error, dev loop4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1092.617225][T15538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.338448][T15558] binder: 15540:15558 ioctl c0306201 200000000780 returned -11 [ 1094.025202][T15569] rdma_rxe: rxe_newlink: failed to add lo [ 1094.744539][ T6322] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1094.849979][T15580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 1095.778359][T15608] rdma_rxe: rxe_newlink: failed to add lo [ 1096.135716][T13172] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1096.381020][T13172] usb 5-1: Using ep0 maxpacket: 32 [ 1096.401297][T13172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.425839][T13172] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.515859][T13172] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1096.530170][T13172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.557740][T13172] usb 5-1: config 0 descriptor?? [ 1098.172469][T13172] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1098.287243][ T30] audit: type=1400 audit(1748070329.123:1894): avc: denied { associate } for pid=15640 comm="syz.2.2330" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1098.569676][T13172] usb 5-1: USB disconnect, device number 20 [ 1098.675419][T15648] rdma_rxe: rxe_newlink: failed to add lo [ 1099.452447][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2333'. [ 1099.514474][T15654] block nbd0: shutting down sockets [ 1102.779208][T15685] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2344'. [ 1103.128554][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 1103.175379][T15697] vxlan1: entered promiscuous mode [ 1105.095724][ T30] audit: type=1400 audit(1748070335.494:1895): avc: denied { append } for pid=15717 comm="syz.3.2354" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.600769][T15731] rdma_rxe: rxe_newlink: failed to add lo [ 1105.757258][T14345] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1106.162620][T14345] usb 5-1: Using ep0 maxpacket: 32 [ 1106.179316][T14345] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1106.190319][T14345] usb 5-1: config 0 has no interface number 0 [ 1106.202647][T14345] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1106.221179][T14345] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1106.235576][T14345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.245554][T14345] usb 5-1: Product: syz [ 1106.253870][T14345] usb 5-1: Manufacturer: syz [ 1106.259884][T14345] usb 5-1: SerialNumber: syz [ 1106.327185][T14345] usb 5-1: config 0 descriptor?? [ 1106.373773][T14345] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1106.424045][T14345] em28xx 5-1:0.132: Video interface 132 found: [ 1106.754901][T15740] input: syz0 as /devices/virtual/input/input31 [ 1106.826416][T14345] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1107.552958][T15751] rdma_rxe: rxe_newlink: failed to add lo [ 1108.134264][T14345] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1108.145468][T14345] em28xx 5-1:0.132: board has no eeprom [ 1108.215267][T14345] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1108.252511][T14345] em28xx 5-1:0.132: analog set to bulk mode. [ 1108.274460][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 1108.327201][T14345] usb 5-1: USB disconnect, device number 21 [ 1108.378701][T14345] em28xx 5-1:0.132: Disconnecting em28xx [ 1109.355418][T15769] Failed to initialize the IGMP autojoin socket (err -2) [ 1109.376380][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1109.410498][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1109.433788][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 1109.538192][ T10] usb 5-1: Decoder not found [ 1109.551835][ T10] em28xx 5-1:0.132: failed to create media graph [ 1109.572323][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1109.588447][T15776] binder: 15775:15776 ioctl c0306201 200000000640 returned -22 [ 1109.787476][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1109.798359][T14345] em28xx 5-1:0.132: Closing input extension [ 1109.825293][T14345] em28xx 5-1:0.132: Freeing device [ 1110.143415][T15793] Failed to initialize the IGMP autojoin socket (err -2) [ 1110.259138][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'. [ 1110.428658][ T30] audit: type=1400 audit(1748070340.489:1896): avc: denied { create } for pid=15765 comm="syz.2.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1110.681027][ T30] audit: type=1400 audit(1748070340.713:1897): avc: denied { execute } for pid=15803 comm="syz.4.2380" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1110.881381][T15793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2378'. [ 1110.903354][T15793] netlink: 'syz.0.2378': attribute type 4 has an invalid length. [ 1110.997087][T15813] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 1111.223330][ T30] audit: type=1326 audit(1748070341.218:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.2.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48718e969 code=0x7fc00000 [ 1112.352619][ T30] audit: type=1326 audit(1748070341.938:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.2.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa48718e969 code=0x7fc00000 [ 1112.635539][T15833] binder: 15832:15833 ioctl c0306201 200000000780 returned -11 [ 1115.095694][ T30] audit: type=1400 audit(1748070344.810:1900): avc: denied { read } for pid=15863 comm="syz.5.2400" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1115.252796][ T30] audit: type=1400 audit(1748070344.838:1901): avc: denied { open } for pid=15863 comm="syz.5.2400" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1115.431625][T13172] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1115.616764][T13172] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1115.628084][T13172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.637461][T13172] usb 4-1: Product: syz [ 1115.641677][T13172] usb 4-1: Manufacturer: syz [ 1115.646780][T14345] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1115.656527][T13172] usb 4-1: SerialNumber: syz [ 1115.816235][T14345] usb 3-1: Using ep0 maxpacket: 16 [ 1115.822902][T14345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.837710][ T8338] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1115.838194][T14345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.864224][T14345] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1115.874136][T14345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.887551][T14345] usb 3-1: config 0 descriptor?? [ 1116.024102][ T8338] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1116.049222][ T8338] usb 6-1: config 0 has no interface number 0 [ 1116.063003][ T8338] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1116.072285][ T8338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.080926][ T8338] usb 6-1: Product: syz [ 1116.085408][ T8338] usb 6-1: Manufacturer: syz [ 1116.090083][ T8338] usb 6-1: SerialNumber: syz [ 1116.111185][ T8338] usb 6-1: config 0 descriptor?? [ 1116.131608][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2410'. [ 1116.390716][ T8338] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1116.426811][ T8338] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1116.448649][ T8338] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1116.474961][ T8338] usb 6-1: media controller created [ 1116.698065][ T8338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1116.738886][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2414'. [ 1116.876937][ T30] audit: type=1400 audit(1748070346.382:1902): avc: denied { read } for pid=15877 comm="syz.5.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1116.896510][T14345] letsketch 0003:6161:4D15.000C: Device info: 㠁 [ 1116.986369][T13172] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1116.999292][T13172] cdc_ncm 4-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 1117.008376][T13172] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1117.038470][ T8338] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1117.121704][T14345] letsketch 0003:6161:4D15.000C: Device info: Э [ 1117.232563][T13172] cdc_ncm 4-1:1.0: setting tx_max = 60 [ 1117.342743][T14345] letsketch 0003:6161:4D15.000C: Device info: 豧 [ 1117.431884][ T8338] usb 6-1: USB disconnect, device number 13 [ 1117.457039][T13172] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1117.531550][T13172] usb 4-1: USB disconnect, device number 22 [ 1117.543163][T13172] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1118.310245][T14345] usb 3-1: Max retries (5) exceeded reading string descriptor 2 [ 1118.329285][T14345] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -71 [ 1118.368510][T14345] usb 3-1: USB disconnect, device number 14 [ 1118.560657][ T30] audit: type=1400 audit(1748070348.084:1903): avc: denied { create } for pid=15916 comm="syz.3.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1119.366857][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2434'. [ 1119.486184][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 1119.997890][T15969] binder: 15968:15969 ioctl 4018620d 0 returned -22 [ 1123.505062][T16019] Failed to initialize the IGMP autojoin socket (err -2) [ 1123.674782][ T30] audit: type=1400 audit(1748070352.873:1904): avc: denied { bind } for pid=16021 comm="syz.4.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1123.748224][ T30] audit: type=1400 audit(1748070352.892:1905): avc: denied { write } for pid=16021 comm="syz.4.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1124.114423][ T30] audit: type=1400 audit(1748070353.275:1906): avc: denied { read } for pid=16025 comm="syz.4.2462" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1124.158825][ T30] audit: type=1400 audit(1748070353.275:1907): avc: denied { open } for pid=16025 comm="syz.4.2462" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1124.577328][T16039] overlayfs: failed to clone upperpath [ 1125.022943][T16051] rdma_rxe: rxe_newlink: failed to add lo [ 1125.478051][T14345] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1125.695099][T14345] usb 5-1: Using ep0 maxpacket: 32 [ 1125.708053][T14345] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1125.783359][ T30] audit: type=1400 audit(1748070354.838:1908): avc: denied { connect } for pid=16063 comm="syz.0.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1125.826965][T14345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.054827][T14345] usb 5-1: Product: syz [ 1126.086429][T14345] usb 5-1: Manufacturer: syz [ 1126.101325][T14345] usb 5-1: SerialNumber: syz [ 1126.162676][T14345] usb 5-1: config 0 descriptor?? [ 1126.170605][T14345] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1126.415886][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1127.644120][T16096] rdma_rxe: rxe_newlink: failed to add lo [ 1128.340709][T14345] gspca_topro: reg_w err -110 [ 1128.580723][T14345] gspca_topro: Sensor soi763a [ 1129.659082][ T8399] usb 5-1: USB disconnect, device number 22 [ 1130.494283][T14345] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1130.654728][T14345] usb 4-1: Using ep0 maxpacket: 32 [ 1130.662148][T14345] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1130.778257][T14345] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1131.825283][T14345] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1131.836158][T14345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1131.846223][T14345] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1132.839230][T14345] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1133.214771][T14345] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1133.235443][T14345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.330674][T14345] usb 4-1: config 0 descriptor?? [ 1133.366931][T14345] usb 4-1: can't set config #0, error -71 [ 1133.457686][T14345] usb 4-1: USB disconnect, device number 23 [ 1135.293679][ T30] audit: type=1400 audit(1748070363.733:1909): avc: denied { watch } for pid=16192 comm="syz.3.2521" path="/494/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1135.383765][ T30] audit: type=1400 audit(1748070363.827:1910): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1135.520019][T16198] rdma_rxe: rxe_newlink: failed to add lo [ 1136.876653][ T8338] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1137.282044][ T30] audit: type=1400 audit(1748070365.585:1911): avc: denied { mount } for pid=16210 comm="syz.0.2527" name="/" dev="rpc_pipefs" ino=49512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1137.326035][ T8338] usb 3-1: Using ep0 maxpacket: 8 [ 1137.336606][ T8338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.357622][ T8338] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1137.381133][ T8338] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1137.399906][ T8338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.410690][ T8338] usb 3-1: Product: syz [ 1137.421656][ T8338] usb 3-1: Manufacturer: syz [ 1137.431889][ T8338] usb 3-1: SerialNumber: syz [ 1137.447248][ T8338] usb 3-1: config 0 descriptor?? [ 1137.646945][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1137.687792][ T8338] usb 3-1: USB disconnect, device number 15 [ 1137.818241][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1137.824862][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1137.836077][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1137.846263][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1137.856775][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1137.869841][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1137.878961][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.107429][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1138.113030][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1139.125786][ T951] usb 4-1: USB disconnect, device number 24 [ 1140.630235][ T8338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1140.816788][T16272] futex_wake_op: syz.0.2551 tries to shift op by 32; fix this program [ 1140.876850][ T8338] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1140.901670][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1140.920843][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1140.941760][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1140.982306][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1141.908169][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1141.964237][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.014362][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.027268][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.161810][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.191868][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.202998][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.214092][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.224086][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.233485][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.257588][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.268618][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.307358][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.399945][T16292] tipc: Enabling of bearer rejected, failed to enable media [ 1142.424746][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.475545][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.521107][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.626496][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.817491][ T8338] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1142.832693][ T8338] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1142.846805][ T8338] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1142.857847][ T8338] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1143.153694][T16301] rdma_rxe: rxe_newlink: failed to add lo [ 1143.871262][ T8338] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1143.887500][ T8338] usb 3-1: Product: syz [ 1143.894478][ T8338] usb 3-1: Manufacturer: syz [ 1143.905205][ T8338] usb 3-1: SerialNumber: syz [ 1143.921350][ T8338] usb 3-1: config 0 descriptor?? [ 1144.062713][ T8338] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1144.422410][ T8338] usb 3-1: USB disconnect, device number 16 [ 1144.432884][ T8338] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1145.890495][ T30] audit: type=1400 audit(1748070373.649:1912): avc: denied { read write } for pid=16339 comm="syz.3.2574" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1145.918905][T13172] hid-generic 0000:0004:0009.000D: unknown main item tag 0x0 [ 1145.992087][T13172] hid-generic 0000:0004:0009.000D: unknown main item tag 0x0 [ 1146.032147][T13172] hid-generic 0000:0004:0009.000D: unknown main item tag 0x0 [ 1146.207726][T13172] hid-generic 0000:0004:0009.000D: hidraw0: HID v0.04 Device [syz0] on syz1 [ 1146.217716][ T30] audit: type=1400 audit(1748070373.649:1913): avc: denied { open } for pid=16339 comm="syz.3.2574" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1146.853639][ T30] audit: type=1400 audit(1748070374.546:1914): avc: denied { read } for pid=16344 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1147.354162][T16350] fido_id[16350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1148.388190][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 1149.941972][ T951] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1150.017552][ T30] audit: type=1400 audit(1748070377.493:1915): avc: denied { write } for pid=16422 comm="syz.2.2599" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1150.207988][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 1150.344482][ T951] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1150.358592][ T30] audit: type=1400 audit(1748070377.502:1916): avc: denied { open } for pid=16422 comm="syz.2.2599" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1150.603954][ T951] usb 4-1: config 0 has no interface number 0 [ 1150.646895][ T951] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1150.694217][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.755935][ T951] usb 4-1: Product: syz [ 1150.788491][ T951] usb 4-1: Manufacturer: syz [ 1150.816777][ T951] usb 4-1: SerialNumber: syz [ 1150.868233][ T951] usb 4-1: config 0 descriptor?? [ 1150.882069][ T951] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1152.275203][ T30] audit: type=1400 audit(1748070379.626:1917): avc: denied { mount } for pid=16453 comm="syz.5.2611" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1152.551348][T16458] netlink: 'syz.4.2612': attribute type 1 has an invalid length. [ 1152.741817][T16464] rdma_rxe: rxe_newlink: failed to add lo [ 1153.200148][ T951] gspca_spca1528: reg_r err -71 [ 1153.211034][ T951] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1153.225318][ T951] usb 4-1: USB disconnect, device number 25 [ 1153.556187][T16462] veth3: entered promiscuous mode [ 1153.578110][T16462] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1153.726494][T16463] veth5: entered promiscuous mode [ 1153.748383][T16463] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 1154.985999][ T30] audit: type=1400 audit(1748070382.142:1918): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1155.418153][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.426074][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1158.832982][T16524] rdma_rxe: rxe_newlink: failed to add lo [ 1158.954890][T16526] fuse: Bad value for 'fd' [ 1160.727674][T16538] rdma_rxe: rxe_newlink: failed to add lo [ 1163.069140][T16571] rdma_rxe: rxe_newlink: failed to add lo [ 1164.285448][ T30] audit: type=1400 audit(1748070390.851:1919): avc: denied { connect } for pid=16579 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1164.343866][ T30] audit: type=1400 audit(1748070390.907:1920): avc: denied { read } for pid=16577 comm="syz.2.2651" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1164.366884][ T30] audit: type=1400 audit(1748070390.907:1921): avc: denied { open } for pid=16577 comm="syz.2.2651" path="/513/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1164.460425][ T30] audit: type=1400 audit(1748070391.028:1922): avc: denied { write } for pid=16584 comm="syz.4.2654" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1164.732373][T16587] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2656'. [ 1165.788190][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1165.796164][ T30] audit: type=1400 audit(1748070391.823:1923): avc: denied { write } for pid=16588 comm="syz.3.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1166.109262][T16587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.117953][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1166.128830][T16587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.138944][T16587] bond0 (unregistering): Released all slaves [ 1166.153770][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.177074][ T10] usb 5-1: config 0 has no interfaces? [ 1166.193769][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.209204][ T10] usb 5-1: config 0 has no interfaces? [ 1166.216454][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.237464][ T10] usb 5-1: config 0 has no interfaces? [ 1166.256057][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1166.277237][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.291786][ T10] usb 5-1: Product: syz [ 1166.295987][ T10] usb 5-1: Manufacturer: syz [ 1166.350907][ T10] usb 5-1: SerialNumber: syz [ 1166.392983][ T10] usb 5-1: config 0 descriptor?? [ 1166.675880][ T8399] usb 5-1: USB disconnect, device number 23 [ 1166.767979][T16608] rdma_rxe: rxe_newlink: failed to add lo [ 1168.337301][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 1168.375791][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 1168.504289][T16623] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1168.524909][T16622] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1168.627756][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2664'. [ 1169.045302][ T30] audit: type=1400 audit(1748070395.303:1924): avc: denied { listen } for pid=16624 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1170.040579][ T30] audit: type=1400 audit(1748070395.303:1925): avc: denied { accept } for pid=16624 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1170.107308][T16636] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1170.167384][ T30] audit: type=1400 audit(1748070395.350:1926): avc: denied { relabelfrom } for pid=16625 comm="syz.4.2666" name="" dev="pipefs" ino=51310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1170.832824][ T30] audit: type=1400 audit(1748070396.295:1927): avc: denied { create } for pid=16634 comm="syz.3.2670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1171.419025][T16645] SELinux: syz.2.2671 (16645) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1171.864701][ T30] audit: type=1400 audit(1748070397.941:1928): avc: denied { read } for pid=16650 comm="syz.2.2674" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1172.091796][ T30] audit: type=1400 audit(1748070397.941:1929): avc: denied { open } for pid=16650 comm="syz.2.2674" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1172.189662][ T30] audit: type=1400 audit(1748070398.240:1930): avc: denied { ioctl } for pid=16650 comm="syz.2.2674" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1175.072461][ T30] audit: type=1400 audit(1748070400.943:1931): avc: denied { accept } for pid=16674 comm="syz.5.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1175.163536][ T30] audit: type=1400 audit(1748070401.028:1932): avc: denied { read write } for pid=16670 comm="syz.3.2681" name="mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1175.703883][ T30] audit: type=1400 audit(1748070401.028:1933): avc: denied { open } for pid=16670 comm="syz.3.2681" path="/dev/input/mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1176.740878][ T30] audit: type=1400 audit(1748070402.506:1934): avc: denied { write } for pid=16696 comm="syz.5.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1181.141949][T16735] netlink: 'syz.5.2700': attribute type 1 has an invalid length. [ 1181.149785][T16735] netlink: 'syz.5.2700': attribute type 4 has an invalid length. [ 1181.157990][T16735] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1181.170304][T16735] netlink: 'syz.5.2700': attribute type 1 has an invalid length. [ 1181.178042][T16735] netlink: 'syz.5.2700': attribute type 4 has an invalid length. [ 1181.185826][T16735] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1181.363125][ T30] audit: type=1400 audit(1748070406.836:1935): avc: denied { append } for pid=16744 comm="syz.3.2702" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1181.508126][T16733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2699'. [ 1182.843532][T16756] overlayfs: failed to clone upperpath [ 1182.851986][ T30] audit: type=1400 audit(1748070407.557:1936): avc: denied { mount } for pid=16750 comm="syz.5.2705" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1182.852153][T16755] binder: 16752:16755 ioctl c0306201 0 returned -14 [ 1183.505004][T16764] rdma_rxe: rxe_newlink: failed to add lo [ 1189.752773][T16814] block nbd0: server does not support multiple connections per device. [ 1189.772567][T16814] block nbd0: shutting down sockets [ 1191.322373][ T30] audit: type=1400 audit(1748070416.144:1937): avc: denied { getopt } for pid=16832 comm="syz.5.2728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1191.602091][T16845] binder: 16838:16845 ioctl c0306201 0 returned -14 [ 1193.526756][T16864] rdma_rxe: rxe_newlink: failed to add lo [ 1195.042550][ T30] audit: type=1400 audit(1748070419.623:1938): avc: denied { map } for pid=16875 comm="syz.0.2740" path="socket:[51130]" dev="sockfs" ino=51130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1195.408519][T16880] siw: device registration error -23 [ 1195.451494][T16880] smc: removing ib device syz0 [ 1195.970841][ T30] audit: type=1400 audit(1748070419.623:1939): avc: denied { read } for pid=16875 comm="syz.0.2740" path="socket:[51130]" dev="sockfs" ino=51130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1196.433074][T16880] ------------[ cut here ]------------ [ 1196.463500][T16880] WARNING: CPU: 0 PID: 16880 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 1196.474307][T16880] Modules linked in: [ 1196.478836][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.4.2739 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1196.491535][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.501644][T16880] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1196.507090][T16880] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 b8 19 f9 e8 40 b8 19 f9 90 <0f> 0b 90 5b e9 36 b8 19 f9 e8 81 38 7f f9 eb da 66 66 2e 0f 1f 84 [ 1196.527214][T16880] RSP: 0018:ffffc9000bdcf1b0 EFLAGS: 00010246 [ 1196.533294][T16880] RAX: 0000000000080000 RBX: ffff88802aa11320 RCX: ffffc9000f3f4000 [ 1196.541345][T16880] RDX: 0000000000080000 RSI: ffffffff88a18db0 RDI: ffff88802aa113a0 [ 1196.549345][T16880] RBP: ffffffff889ff3e0 R08: 0000000000000005 R09: 0000000000000001 [ 1196.557883][T16880] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802aa10668 [ 1196.565872][T16880] R13: ffff88802aa0ffe0 R14: ffff88802aa0ffe0 R15: ffff88802aa11080 [ 1196.573835][T16880] FS: 00007fb84576f6c0(0000) GS:ffff8881249da000(0000) knlGS:0000000000000000 [ 1196.582745][T16880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1196.589839][T16880] CR2: 0000001b30f0eff8 CR3: 00000000334d4000 CR4: 00000000003526f0 [ 1196.597807][T16880] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1196.605791][T16880] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1196.613742][T16880] Call Trace: [ 1196.617503][T16880] [ 1196.620416][T16880] rxe_dealloc+0x25/0xc0 [ 1196.624639][T16880] ib_dealloc_device+0x49/0x230 [ 1196.629529][T16880] __ib_unregister_device+0x396/0x480 [ 1196.634884][T16880] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1196.640810][T16880] ib_unregister_device_and_put+0x5a/0x80 [ 1196.646514][T16880] nldev_dellink+0x21f/0x320 [ 1196.651600][T16880] ? __pfx_nldev_dellink+0x10/0x10 [ 1196.656707][T16880] ? __lock_acquire+0x5ca/0x1ba0 [ 1196.661689][T16880] ? cap_capable+0xb3/0x250 [ 1196.666172][T16880] ? bpf_lsm_capable+0x9/0x10 [ 1196.670864][T16880] ? security_capable+0x7e/0x260 [ 1196.675796][T16880] ? ns_capable+0xd7/0x110 [ 1196.680716][T16880] ? __pfx_nldev_dellink+0x10/0x10 [ 1196.685810][T16880] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1196.690581][T16880] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1196.695853][T16880] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 1196.702268][T16880] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1196.709194][T16880] ? netlink_deliver_tap+0x1ae/0xd30 [ 1196.714998][T16880] netlink_unicast+0x53a/0x7f0 [ 1196.719746][T16880] ? __pfx_netlink_unicast+0x10/0x10 [ 1196.725043][T16880] netlink_sendmsg+0x8d1/0xdd0 [ 1196.729790][T16880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.735085][T16880] ____sys_sendmsg+0xa95/0xc70 [ 1196.739832][T16880] ? copy_msghdr_from_user+0x10a/0x160 [ 1196.745766][T16880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.751055][T16880] ___sys_sendmsg+0x134/0x1d0 [ 1196.755743][T16880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.760939][T16880] __sys_sendmsg+0x16d/0x220 [ 1196.765533][T16880] ? __pfx___sys_sendmsg+0x10/0x10 [ 1196.770628][T16880] ? __x64_sys_futex+0x1e0/0x4c0 [ 1196.775561][T16880] ? rcu_is_watching+0x12/0xc0 [ 1196.780831][T16880] do_syscall_64+0xcd/0x260 [ 1196.785325][T16880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.791219][T16880] RIP: 0033:0x7fb84498e969 [ 1196.795616][T16880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.815789][T16880] RSP: 002b:00007fb84576f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.824208][T16880] RAX: ffffffffffffffda RBX: 00007fb844bb6160 RCX: 00007fb84498e969 [ 1196.832180][T16880] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1196.840667][T16880] RBP: 00007fb844a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1196.848616][T16880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.856585][T16880] R13: 0000000000000000 R14: 00007fb844bb6160 R15: 00007ffcf013d7a8 [ 1196.864557][T16880] [ 1196.867569][T16880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1196.874826][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.4.2739 Not tainted 6.15.0-rc7-syzkaller-00142-g4856ebd99715 #0 PREEMPT(full) [ 1196.886933][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.896976][T16880] Call Trace: [ 1196.900234][T16880] [ 1196.903144][T16880] dump_stack_lvl+0x3d/0x1f0 [ 1196.907721][T16880] panic+0x71c/0x800 [ 1196.911634][T16880] ? __pfx_panic+0x10/0x10 [ 1196.916033][T16880] ? show_trace_log_lvl+0x29b/0x3e0 [ 1196.921217][T16880] ? rxe_pool_cleanup+0x41/0x60 [ 1196.926063][T16880] check_panic_on_warn+0xab/0xb0 [ 1196.930978][T16880] __warn+0xf6/0x3c0 [ 1196.934862][T16880] ? rxe_pool_cleanup+0x41/0x60 [ 1196.939692][T16880] report_bug+0x3c3/0x580 [ 1196.944003][T16880] ? rxe_pool_cleanup+0x41/0x60 [ 1196.948832][T16880] handle_bug+0x184/0x210 [ 1196.953139][T16880] exc_invalid_op+0x17/0x50 [ 1196.957617][T16880] asm_exc_invalid_op+0x1a/0x20 [ 1196.962446][T16880] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1196.967882][T16880] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 45 b8 19 f9 e8 40 b8 19 f9 90 <0f> 0b 90 5b e9 36 b8 19 f9 e8 81 38 7f f9 eb da 66 66 2e 0f 1f 84 [ 1196.987484][T16880] RSP: 0018:ffffc9000bdcf1b0 EFLAGS: 00010246 [ 1196.993535][T16880] RAX: 0000000000080000 RBX: ffff88802aa11320 RCX: ffffc9000f3f4000 [ 1197.001514][T16880] RDX: 0000000000080000 RSI: ffffffff88a18db0 RDI: ffff88802aa113a0 [ 1197.009463][T16880] RBP: ffffffff889ff3e0 R08: 0000000000000005 R09: 0000000000000001 [ 1197.017412][T16880] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802aa10668 [ 1197.025358][T16880] R13: ffff88802aa0ffe0 R14: ffff88802aa0ffe0 R15: ffff88802aa11080 [ 1197.033309][T16880] ? __pfx_rxe_dealloc+0x10/0x10 [ 1197.038230][T16880] ? rxe_pool_cleanup+0x40/0x60 [ 1197.043066][T16880] rxe_dealloc+0x25/0xc0 [ 1197.047289][T16880] ib_dealloc_device+0x49/0x230 [ 1197.052134][T16880] __ib_unregister_device+0x396/0x480 [ 1197.057488][T16880] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1197.063373][T16880] ib_unregister_device_and_put+0x5a/0x80 [ 1197.069078][T16880] nldev_dellink+0x21f/0x320 [ 1197.073647][T16880] ? __pfx_nldev_dellink+0x10/0x10 [ 1197.078737][T16880] ? __lock_acquire+0x5ca/0x1ba0 [ 1197.083697][T16880] ? cap_capable+0xb3/0x250 [ 1197.088183][T16880] ? bpf_lsm_capable+0x9/0x10 [ 1197.092852][T16880] ? security_capable+0x7e/0x260 [ 1197.097786][T16880] ? ns_capable+0xd7/0x110 [ 1197.102179][T16880] ? __pfx_nldev_dellink+0x10/0x10 [ 1197.107274][T16880] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1197.112026][T16880] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1197.117300][T16880] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 1197.123717][T16880] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1197.130656][T16880] ? netlink_deliver_tap+0x1ae/0xd30 [ 1197.135940][T16880] netlink_unicast+0x53a/0x7f0 [ 1197.140700][T16880] ? __pfx_netlink_unicast+0x10/0x10 [ 1197.145968][T16880] netlink_sendmsg+0x8d1/0xdd0 [ 1197.150727][T16880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1197.156010][T16880] ____sys_sendmsg+0xa95/0xc70 [ 1197.160756][T16880] ? copy_msghdr_from_user+0x10a/0x160 [ 1197.166195][T16880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1197.171469][T16880] ___sys_sendmsg+0x134/0x1d0 [ 1197.176134][T16880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1197.181344][T16880] __sys_sendmsg+0x16d/0x220 [ 1197.185913][T16880] ? __pfx___sys_sendmsg+0x10/0x10 [ 1197.191001][T16880] ? __x64_sys_futex+0x1e0/0x4c0 [ 1197.195925][T16880] ? rcu_is_watching+0x12/0xc0 [ 1197.200688][T16880] do_syscall_64+0xcd/0x260 [ 1197.205188][T16880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.211058][T16880] RIP: 0033:0x7fb84498e969 [ 1197.215451][T16880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.235048][T16880] RSP: 002b:00007fb84576f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1197.243455][T16880] RAX: ffffffffffffffda RBX: 00007fb844bb6160 RCX: 00007fb84498e969 [ 1197.251402][T16880] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 1197.259360][T16880] RBP: 00007fb844a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1197.267309][T16880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.275269][T16880] R13: 0000000000000000 R14: 00007fb844bb6160 R15: 00007ffcf013d7a8 [ 1197.283225][T16880] [ 1197.286462][T16880] Kernel Offset: disabled [ 1197.290765][T16880] Rebooting in 86400 seconds..