last executing test programs: 1m59.374546377s ago: executing program 2 (id=444): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='btrfs_sync_fs\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000580)={0x4, 0x5, 0x40000cf, 0x7fffffff, 0x9}) msync(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x2) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) set_mempolicy(0x8000, &(0x7f0000000300)=0x7fffffff, 0x7) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@local, @multicast2}, &(0x7f00000005c0)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x4}, 0x8) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000400)="9ca9ed2687421b031033da30e7dd69a364b4ca6b8754e20bb30b7795c5a875d5b2b67f6734502f8e251dc06e9428fd03cadc532060ce0e5c04b157520704030ab8a983abc9481cc16f2019", 0x4b, 0xffffffff80000000, 0x0, 0x3, r1}, &(0x7f00000004c0)) shmctl$IPC_RMID(r0, 0x0) shmat(0x0, &(0x7f0000004000/0x4000)=nil, 0x5000) shmget$private(0x0, 0x4000, 0x400, &(0x7f000000c000/0x4000)=nil) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) get_mempolicy(0x0, &(0x7f0000000200), 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) 1m59.203048591s ago: executing program 2 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xf, 0x7}, {0x5, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f00000003c0)=@ethtool_rx_ntuple={0x35, {0x6, @ether_spec={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @link_local, 0x5}, @udp_ip4_spec={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x4e21, 0xf}, 0x1ff, 0x5, 0x4, 0x8, 0xffffffffffffffff}}}) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x100}, {{0x4}, {0x2, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m58.26753514s ago: executing program 2 (id=448): r0 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000001c80)) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0x20000000) syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000001a00)={'syztnl0\x00', &(0x7f0000001900)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x0, 0xde6, {{0x1c, 0x4, 0x3, 0x2, 0x70, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast1, @broadcast, {[@noop, @rr={0x7, 0x1f, 0x40, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast1, @multicast2, @multicast2, @multicast1, @private=0xa010102, @remote]}, @lsrr={0x83, 0xf, 0x88, [@dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @loopback]}, @noop, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x3, [{@loopback, 0x6}, {@multicast1, 0x4d}, {@local, 0xfffffff7}, {@rand_addr=0x64010101, 0xcdc}, {@remote, 0x2}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x55cde6b51a9ca57e, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 1m57.19952547s ago: executing program 2 (id=452): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008", @ANYRES32], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x1c7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 1m55.638111241s ago: executing program 2 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') readv(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3fab00000000004000002e000000080001007063690011000200303030303a30303a801f2e30000000001c00"], 0x4c}}, 0x0) 1m54.410712287s ago: executing program 2 (id=456): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x170) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m39.13276169s ago: executing program 32 (id=456): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x170) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 14.048322987s ago: executing program 0 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 12.322451283s ago: executing program 4 (id=683): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, 0x0, &(0x7f0000000140)) 11.96242987s ago: executing program 3 (id=686): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x2, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=@newlink={0x20, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4406a, 0x420}}, 0x20}}, 0x0) 11.953365846s ago: executing program 5 (id=687): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x7ff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x2}, @in=@remote, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {@in6=@empty, 0x4d3, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x9}, {}, 0x70bd26, 0x10000002, 0x2}, 0x4, 0x5}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x17}}]}, 0x104}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000900d"]) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 11.607353534s ago: executing program 0 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "1a0c65"}}}}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x181641, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 10.239929734s ago: executing program 0 (id=689): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) mprotect(&(0x7f00009ab000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00009a9000/0x4000)=nil) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @rose, 0x1, @netrom}, &(0x7f0000000080)=0x1c, 0x800) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = shmget(0x1, 0x1000, 0x400, &(0x7f0000534000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)={0x448, 0x12, 0x400, 0x70bd27, 0x25dfdbff, {0x3, 0x8, 0x6, 0xf, {0x4e24, 0x4e22, [0xc, 0x0, 0x3, 0x7], [0x8, 0x0, 0x9a4, 0x100], 0x0, [0x7, 0x2]}, 0x8, 0xffff}, [@INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "27826f4b53c7c4e038c1e4d909d9bb1c751c5143fc0c4a1e7d2b81baef9a09cff7c5250188cd614dccd92126a9fbe37ce7e8779633458d935142cb7816997f34c182bf879d3881f9ce739ce1c732bff5ec6b5d2bf20b452444ff6b5cd638e474cf30a13d6c96926b93"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "b3bd277397411e2eb056f82f24026ee4f99a5a3a536053e737bcbf78dc6380575c110f6558dceffbc51fad85b02044b6cacc0a3b271fcaa24d7fc38b61eb4b252e561a3f352bc2cb76866bbf6530647670d9ef501603b017ba90560df330016ae4db790d8c7c9c86def2681579da567762e14bcfa09aa03dd14282bbd04f666bd4ef7131cd0f3e8fa26055d9538d3591ddaf931c1322bc41c9dc551b879309df3cca71cc81410289bf24a4b1506e448059d56e6d8731b79d3bad00bba3d8fe7539a4136650618f04a631bf9336e2e101a603db6beff4e9b6ca29f4180216eb610395cec8fdcfe22355623d1f7786"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "f2e24501982e66ee5faf9843a0f7b81e7dd7c3fc704c5994bbe3e0c28e8501b9d0752b747a3b693f5385aa32949f96d59deb0656cb9fc8d8db13c077a7ba5e7a32a72d60cf5d8b8b016f5ac3260cb01de58d68b00a1d99df1237d31e6836e1d7d253df5f854e092a6985c69149f3b14acc967609de5f1b00a5cd96ddb4b7803c8ef4f3f695e1beddfc3225df8ac15d25d2cee9bd5eac3cb361913945d3c6ee25"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "06d19a9a9809428aeed7f10043f42ab028c3464d67152b969748ce3a386ef1dbd3498250598954e3f53a81e3cec4e7301662b7f0bb0051d645fb8776c735aa62a31503ace90f"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "0839310a45cbbbe70c1cc493c35c17471728514055435418cd0400000000000000def9b97cb44c0dbaa64b3810c8496d803db6c75daa77fc79ee1502bec6bc07e155d0e1e445a27b7654d56dc7905afb937ca89b50abf65da08263e98b256c0370e03119b86156f81f38ec1d4c78eb633056dee95df275d712b09cd1d6913b437f51acc8912675f8bd823e4a020000000000000022c0948d3f2ebb4a4be7e0f6267f20ec4282cd19829928e33744b4dcc1c8514952e4e36afa41e59de0504c2e16f173962b3d940ffdd72c8791f00495d88e78ddfc22801955daa97a8606732e1f5e95bc50079916c049302d9c225163b759e4061b77fe5d41d98e1dec"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "d7f7632525f3eec31dd8187df0b81642666efe40e8f0ab95fc85449c71363d22389e9eacb7679ced05245117a9e19977056c01ff1008e232db05daa217fe8481be1bf447b84bf0a4a324c56bc116605af04c23d9c7bb6b9fb295d521219f0669ebe6b21e5c90efc308130bc5066995ff3cf6a2393dc7bef19f26320492d1158626cc5fc5c7481ffa53855b1e4e53e701c897866dd29b2ab1c19fff549b69"}]}, 0x448}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x378, 0x3) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000003600)=""/120) 10.209581773s ago: executing program 3 (id=690): waitid(0x258a6cbf2effb0f1, 0x0, 0x0, 0x8, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8001) semtimedop(0x0, &(0x7f0000005740)=[{0x3, 0x8}], 0x1, 0x0) socket$inet6(0xa, 0x3, 0x40) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000100)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x1d, 0x41, 0x10, 0x17cc, 0x41c, 0x814d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x9, 0x0, 0x9c, 0xe0, 0xea}}]}}]}}, 0x0) 10.126115357s ago: executing program 5 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffff9c, 0x0, 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a000000000000000000000000000014000000060a0000000000000000000008000000140000001100010000000000000000000000000a"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x588, 0x3000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 8.797568913s ago: executing program 1 (id=694): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000ef019e33b875288e62", @ANYRES8=r0], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)='6', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 8.795289247s ago: executing program 5 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r5, @ANYBLOB="00000000000000000a000100aaaaaa"], 0x2c}}, 0x0) 8.760699744s ago: executing program 4 (id=696): r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d", 0x24) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) read(r5, &(0x7f0000009180)=""/91, 0x5b) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000000)={0x0, 0xffffffff}, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x4d5}}, 0x1006) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f00000000c0), 0x20) 8.573172888s ago: executing program 1 (id=697): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/zoneinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000540)=""/182, 0xb6}], 0x1, 0x8007b9, 0x2) keyctl$dh_compute(0x17, &(0x7f00000003c0)={r0, 0x0, r0}, &(0x7f0000000400)=""/166, 0xa6, &(0x7f0000000500)={&(0x7f00000004c0)={'sha1-avx\x00'}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x9) r3 = io_uring_setup(0x253f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0) io_setup(0xfe, &(0x7f0000000380)=0x0) io_cancel(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0xc2, 0x7}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 7.935579982s ago: executing program 0 (id=698): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.762087498s ago: executing program 5 (id=699): ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x900) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x2, 0x0, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) r6 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x5, 0x0) 6.92939544s ago: executing program 3 (id=700): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xfffffe00}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0x138f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x50964ce357128210}]}}]}, 0x6c}}, 0x0) 6.754370719s ago: executing program 1 (id=701): r0 = socket(0x8000000010, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x90}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x24, 0x0, 0x101, 0x800, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) write(r0, &(0x7f00000003c0)="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", 0x16d) 5.048494097s ago: executing program 3 (id=702): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x2) 5.004200999s ago: executing program 4 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015000c00000012000300686173683a6e6574"], 0x60}}, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x5, 0x0, r3, 0x0}]) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x80000f892d) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x12, 0x1e, 0x5, 0x0}) 3.665261023s ago: executing program 5 (id=704): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0xfffffffe}}, 0x10) r1 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0), &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_FILES2(r1, 0x6, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x40) close(0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x1eff8a1cfddfdce2, 0x6, 0x4, "378e9277"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x5fc289143bb13800, &(0x7f00000000c0)={@loopback, @initdev}, &(0x7f0000000100)=0xc) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_enter(r5, 0x5ab4, 0x4, 0x8, &(0x7f0000000200)={[0x2]}, 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@gettaction={0x84, 0x32, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.618424788s ago: executing program 3 (id=705): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) futex(&(0x7f00000000c0)=0x1, 0x7, 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x1) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc02864ca, &(0x7f0000000340)={&(0x7f00000009c0), 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3}) 3.617070626s ago: executing program 1 (id=706): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) read$msr(r1, &(0x7f0000000680)=""/102400, 0x19000) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x48, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 3.484531829s ago: executing program 4 (id=707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000600)={@random="b8a3eb209aa0", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x1}, {0x21}, {}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000001100)=ANY=[], 0x0) sendmmsg$inet(r4, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 3.299799344s ago: executing program 0 (id=708): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x57}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0xffffffffffffff54}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "f2652b306098f5d4ca02e04d998b7966b77555678e9532c33f6864192506fa0d", 0x30383653}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, 0x0) socket(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 2.095260492s ago: executing program 3 (id=709): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) sigaltstack(0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$snapshot(r3, 0x0, 0xffffffbf) r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x521002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x603100) read(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2.091915542s ago: executing program 4 (id=710): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.029730316s ago: executing program 0 (id=711): waitid(0x258a6cbf2effb0f1, 0x0, 0x0, 0x8, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40008c0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8001) semtimedop(0x0, &(0x7f0000005740)=[{0x3, 0x8}], 0x1, 0x0) socket$inet6(0xa, 0x3, 0x40) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000100)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x1d, 0x41, 0x10, 0x17cc, 0x41c, 0x814d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x9, 0x0, 0x9c, 0xe0, 0xea}}]}}]}}, 0x0) 1.882447307s ago: executing program 1 (id=712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) prctl$PR_SET_MM(0x23, 0xb, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmdt(0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 445.871729ms ago: executing program 1 (id=713): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x22, 0x2, 0x3) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 443.594224ms ago: executing program 4 (id=714): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000300"], 0x30}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001"], 0x114}], 0x1}, 0x40004) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x248}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=715): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "3cae78117e75c2375b0290fa828d974126c1a70b22f77a37a37b7154cc0c406c", "d27bd50a2942aa283aeb9677e3ef551e", {"e72158200581e0854e6657fe05a72fce", "98d47eff9de7a9dad98d6fde327bb9c3"}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) kernel console output (not intermixed with test programs): r, different from the interface descriptor's value: 21 [ 140.422812][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.431905][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.455188][ T46] usb 3-1: config 0 descriptor?? [ 140.461145][ T6791] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.963947][ T46] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 140.971651][ T46] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 140.979383][ T46] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 140.992261][ T46] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 141.271391][ T46] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.954926][ T6820] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 142.827903][ T46] usb 3-1: USB disconnect, device number 4 [ 143.978726][ T6839] bridge0: port 3(team0) entered disabled state [ 143.985141][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.992278][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.032747][ T6839] bridge0: entered allmulticast mode [ 144.058864][ T6840] team0: left allmulticast mode [ 144.078332][ T6840] team_slave_0: left allmulticast mode [ 144.097083][ T6840] team_slave_1: left allmulticast mode [ 144.123241][ T6840] bridge0: port 3(team0) entered disabled state [ 144.169887][ T6840] bridge_slave_1: left allmulticast mode [ 144.200509][ T6840] bridge_slave_1: left promiscuous mode [ 144.213794][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.259943][ T6840] bridge_slave_0: left allmulticast mode [ 144.272894][ T6840] bridge_slave_0: left promiscuous mode [ 144.290855][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.824741][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 144.824758][ T29] audit: type=1400 audit(1732074904.887:402): avc: denied { ioctl } for pid=6843 comm="syz.4.231" path="socket:[11124]" dev="sockfs" ino=11124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.927665][ T29] audit: type=1400 audit(1732074904.887:403): avc: denied { bind } for pid=6843 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.526207][ T29] audit: type=1400 audit(1732074906.737:404): avc: denied { write } for pid=6861 comm="syz.3.235" name="ip_tables_matches" dev="proc" ino=4026532946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 146.549788][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.582342][ T6864] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 146.599619][ T6864] batman_adv: batadv0: Adding interface: team0 [ 146.615418][ T6864] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.827460][ T6864] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.862073][ T29] audit: type=1400 audit(1732074907.057:405): avc: denied { bind } for pid=6866 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 146.869198][ T6867] netdevsim netdevsim4 .: renamed from netdevsim0 (while UP) [ 146.882163][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.906796][ T29] audit: type=1400 audit(1732074907.077:406): avc: denied { ioctl } for pid=6866 comm="syz.4.237" path="socket:[11290]" dev="sockfs" ino=11290 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.932430][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.322937][ T6864] netlink: 'syz.1.236': attribute type 10 has an invalid length. [ 147.351253][ T29] audit: type=1400 audit(1732074907.467:407): avc: denied { bind } for pid=6861 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 147.613165][ T6864] netlink: 2 bytes leftover after parsing attributes in process `syz.1.236'. [ 147.626218][ T6864] team0: entered promiscuous mode [ 147.633651][ T6864] team_slave_0: entered promiscuous mode [ 147.639402][ T6864] team_slave_1: entered promiscuous mode [ 147.646427][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.666670][ T6864] batman_adv: batadv0: Interface activated: team0 [ 147.920951][ T6864] batman_adv: batadv0: Interface deactivated: team0 [ 148.116944][ T6864] batman_adv: batadv0: Removing interface: team0 [ 148.931239][ T6864] bridge0: port 4(team0) entered blocking state [ 148.937612][ T6864] bridge0: port 4(team0) entered disabled state [ 148.951165][ T6864] team0: entered allmulticast mode [ 148.956276][ T6864] team_slave_0: entered allmulticast mode [ 149.008452][ T6864] team_slave_1: entered allmulticast mode [ 149.080357][ T29] audit: type=1400 audit(1732074909.287:408): avc: denied { create } for pid=6887 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.947799][ T29] audit: type=1400 audit(1732074909.477:409): avc: denied { mount } for pid=6883 comm="syz.3.241" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 149.969879][ T29] audit: type=1400 audit(1732074909.787:410): avc: denied { write } for pid=6887 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.555603][ T29] audit: type=1400 audit(1732074910.767:411): avc: denied { ioctl } for pid=6944 comm="syz.0.244" path="socket:[11194]" dev="sockfs" ino=11194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.986219][ T29] audit: type=1400 audit(1732074911.197:412): avc: denied { read write } for pid=6942 comm="syz.3.245" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.021884][ T6943] kvm: emulating exchange as write [ 151.096793][ T29] audit: type=1400 audit(1732074911.197:413): avc: denied { open } for pid=6942 comm="syz.3.245" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.150655][ T29] audit: type=1400 audit(1732074911.197:414): avc: denied { ioctl } for pid=6942 comm="syz.3.245" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.175217][ T29] audit: type=1400 audit(1732074911.247:415): avc: denied { read } for pid=5186 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 151.197611][ T29] audit: type=1400 audit(1732074911.247:416): avc: denied { search } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.219699][ T29] audit: type=1400 audit(1732074911.247:417): avc: denied { append } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.242574][ T29] audit: type=1400 audit(1732074911.247:418): avc: denied { open } for pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 151.533413][ T6953] 9pnet_virtio: no channels available for device syz [ 151.602366][ T6956] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 151.759348][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 152.447347][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'. [ 152.467760][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.250'. [ 152.491577][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'. [ 152.523491][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'. [ 153.604469][ T6984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.163314][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.473407][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 155.473453][ T29] audit: type=1400 audit(1732074915.677:468): avc: denied { map_read map_write } for pid=6994 comm="syz.1.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 155.959034][ T7001] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 155.966470][ T7001] PKCS7: Only support pkcs7_signedData type [ 157.095857][ T29] audit: type=1400 audit(1732074917.307:469): avc: denied { create } for pid=7009 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.115739][ T29] audit: type=1400 audit(1732074917.307:470): avc: denied { connect } for pid=7009 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.342365][ T29] audit: type=1400 audit(1732074917.307:471): avc: denied { setopt } for pid=7009 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.298370][ T7029] mkiss: ax0: crc mode is auto. [ 158.456259][ T29] audit: type=1400 audit(1732074918.587:472): avc: denied { prog_run } for pid=7019 comm="syz.2.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.863637][ T29] audit: type=1400 audit(1732074918.737:473): avc: denied { read } for pid=5498 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 158.882004][ T128] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 158.892067][ T29] audit: type=1400 audit(1732074919.007:474): avc: denied { search } for pid=5498 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.970562][ T29] audit: type=1400 audit(1732074919.007:475): avc: denied { read } for pid=5498 comm="dhcpcd" name="n101" dev="tmpfs" ino=2983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.006155][ T29] audit: type=1400 audit(1732074919.007:476): avc: denied { open } for pid=5498 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.091163][ T29] audit: type=1400 audit(1732074919.007:477): avc: denied { getattr } for pid=5498 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2983 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 159.500797][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 160.300471][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 160.350526][ T5830] usb 3-1: config 16 has an invalid interface number: 54 but max is 0 [ 160.358727][ T5830] usb 3-1: config 16 has no interface number 0 [ 160.364954][ T5830] usb 3-1: config 16 interface 54 has no altsetting 0 [ 160.371766][ T5830] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=86.ce [ 160.380841][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.414631][ T5830] pxrc 3-1:16.54: Could not find endpoint [ 160.665100][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 160.682093][ T29] audit: type=1400 audit(1732074920.767:486): avc: denied { create } for pid=7044 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.106767][ T29] audit: type=1400 audit(1732074920.767:487): avc: denied { shutdown } for pid=7044 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.128512][ T29] audit: type=1400 audit(1732074920.987:488): avc: denied { read } for pid=7050 comm="syz.3.275" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.161138][ T29] audit: type=1400 audit(1732074920.987:489): avc: denied { open } for pid=7050 comm="syz.3.275" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.223649][ T29] audit: type=1400 audit(1732074921.407:490): avc: denied { ioctl } for pid=7026 comm="syz.4.268" path="socket:[11608]" dev="sockfs" ino=11608 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.249335][ T29] audit: type=1400 audit(1732074921.407:491): avc: denied { bind } for pid=7026 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.269149][ T29] audit: type=1400 audit(1732074921.407:492): avc: denied { connect } for pid=7026 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.551287][ T29] audit: type=1400 audit(1732074921.767:493): avc: denied { create } for pid=7058 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 161.575120][ T7059] bridge0: port 3(syz_tun) entered disabled state [ 161.585214][ T29] audit: type=1400 audit(1732074921.767:494): avc: denied { ioctl } for pid=7058 comm="syz.3.276" path="socket:[11612]" dev="sockfs" ino=11612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.649117][ T7059] syz_tun (unregistering): left allmulticast mode [ 161.660512][ T7059] syz_tun (unregistering): left promiscuous mode [ 161.680590][ T7059] bridge0: port 3(syz_tun) entered disabled state [ 161.912931][ T29] audit: type=1400 audit(1732074922.067:495): avc: denied { bind } for pid=7060 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.446836][ T25] usb 3-1: USB disconnect, device number 5 [ 165.112709][ T966] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.104300][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 166.104334][ T29] audit: type=1400 audit(1732074926.267:518): avc: denied { read } for pid=7092 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.609058][ T7097] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 166.619296][ T29] audit: type=1400 audit(1732074926.817:519): avc: denied { write } for pid=7096 comm="syz.2.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.642593][ T966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.671961][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.723877][ T966] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 166.753171][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 166.766229][ T966] usb 2-1: SerialNumber: syz [ 166.850722][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 167.116031][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 167.183608][ T25] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 167.192288][ T25] usb 4-1: config 0 has no interface number 0 [ 167.198469][ T25] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 167.208846][ T25] usb 4-1: config 0 interface 214 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 167.765747][ T29] audit: type=1400 audit(1732074927.957:520): avc: denied { create } for pid=7113 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 167.792241][ T966] usb 2-1: 0:2 : does not exist [ 167.806520][ T966] usb 2-1: unit 255 not found! [ 167.827552][ T966] usb 2-1: 5:0: cannot get min/max values for control 17 (id 5) [ 167.839833][ T29] audit: type=1400 audit(1732074928.017:521): avc: denied { connect } for pid=7113 comm="syz.4.292" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.866843][ T966] usb 2-1: USB disconnect, device number 4 [ 167.882949][ T25] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 167.892144][ T25] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 167.900131][ T25] usb 4-1: Manufacturer: syz [ 167.904985][ T25] usb 4-1: SerialNumber: syz [ 167.970183][ T25] usb 4-1: config 0 descriptor?? [ 168.040481][ T29] audit: type=1400 audit(1732074928.247:522): avc: denied { read write } for pid=7117 comm="syz.1.294" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.106212][ T29] audit: type=1400 audit(1732074928.247:523): avc: denied { open } for pid=7117 comm="syz.1.294" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 168.327647][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 168.336628][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 168.347269][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 168.707878][ T29] audit: type=1400 audit(1732074928.297:524): avc: denied { map } for pid=7117 comm="syz.1.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.777080][ T29] audit: type=1400 audit(1732074928.297:525): avc: denied { read write } for pid=7117 comm="syz.1.294" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.949775][ T25] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 168.956820][ T25] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 168.981138][ T25] usb 4-1: USB disconnect, device number 3 [ 168.990751][ T29] audit: type=1400 audit(1732074929.037:526): avc: denied { watch watch_reads } for pid=7104 comm="syz.3.289" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=12578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 169.022124][ T29] audit: type=1400 audit(1732074929.037:527): avc: denied { create } for pid=7121 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.832682][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.448324][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 171.448341][ T29] audit: type=1400 audit(1732074931.657:539): avc: denied { create } for pid=7150 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 172.535272][ T29] audit: type=1400 audit(1732074932.727:540): avc: denied { bind } for pid=7149 comm="syz.2.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.684678][ T29] audit: type=1400 audit(1732074932.737:541): avc: denied { name_bind } for pid=7149 comm="syz.2.303" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 173.166973][ T29] audit: type=1400 audit(1732074932.737:542): avc: denied { node_bind } for pid=7149 comm="syz.2.303" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 173.358370][ T29] audit: type=1400 audit(1732074932.857:543): avc: denied { setopt } for pid=7149 comm="syz.2.303" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.379898][ T29] audit: type=1400 audit(1732074932.937:544): avc: denied { create } for pid=7168 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.453071][ T29] audit: type=1400 audit(1732074933.667:545): avc: denied { write } for pid=7179 comm="syz.1.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 173.476579][ T29] audit: type=1400 audit(1732074933.687:546): avc: denied { write } for pid=7168 comm="syz.0.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 173.498526][ T7181] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 173.510195][ T7181] VFS: Can't find a romfs filesystem on dev nullb0. [ 173.510195][ T7181] [ 173.524885][ T29] audit: type=1400 audit(1732074933.707:547): avc: denied { read } for pid=7171 comm="syz.4.309" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 173.530279][ T7180] tipc: Started in network mode [ 173.552497][ T29] audit: type=1400 audit(1732074933.707:548): avc: denied { open } for pid=7171 comm="syz.4.309" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.128060][ T7180] tipc: Node identity 7, cluster identity 4711 [ 174.134966][ T7180] tipc: Node number set to 7 [ 174.145261][ T7184] : renamed from bond0 (while UP) [ 175.870516][ T2142] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.511130][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.521557][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 176.521571][ T29] audit: type=1400 audit(1732074936.677:557): avc: denied { create } for pid=7209 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 176.584980][ T2142] usb 4-1: Using ep0 maxpacket: 8 [ 176.596794][ T2142] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 176.606005][ T2142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.624657][ T2142] usb 4-1: Product: syz [ 176.637224][ T2142] usb 4-1: Manufacturer: syz [ 176.649020][ T2142] usb 4-1: SerialNumber: syz [ 176.669965][ T2142] usb 4-1: config 0 descriptor?? [ 176.732088][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 176.772368][ T8] usb 1-1: config 0 has no interfaces? [ 176.779631][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.791056][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.800490][ T8] usb 1-1: Product: syz [ 176.807564][ T8] usb 1-1: Manufacturer: syz [ 176.817694][ T8] usb 1-1: SerialNumber: syz [ 176.897201][ T29] audit: type=1800 audit(1732074937.107:558): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.320" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 176.897903][ T8] usb 1-1: config 0 descriptor?? [ 176.931008][ T2142] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 177.559234][ T29] audit: type=1400 audit(1732074937.667:559): avc: denied { mount } for pid=7219 comm="syz.1.322" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 177.669355][ T29] audit: type=1400 audit(1732074937.877:560): avc: denied { create } for pid=7200 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.716912][ T9] usb 1-1: USB disconnect, device number 5 [ 178.008590][ T29] audit: type=1400 audit(1732074938.187:561): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 178.536699][ T9] IPVS: starting estimator thread 0... [ 178.566900][ T29] audit: type=1400 audit(1732074938.737:562): avc: denied { setopt } for pid=7232 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 178.761986][ T7241] IPVS: using max 22 ests per chain, 52800 per kthread [ 178.896413][ T29] audit: type=1400 audit(1732074938.747:563): avc: denied { egress } for pid=7232 comm="syz.2.324" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 178.919774][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.038599][ T29] audit: type=1400 audit(1732074938.747:564): avc: denied { sendto } for pid=7232 comm="syz.2.324" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 179.355866][ T29] audit: type=1400 audit(1732074939.567:565): avc: denied { create } for pid=7234 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 179.382003][ T2142] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 179.393004][ T2142] usb 4-1: USB disconnect, device number 4 [ 179.403385][ T29] audit: type=1400 audit(1732074939.607:566): avc: denied { write } for pid=7234 comm="syz.1.325" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.298323][ T7275] SELinux: Context } is not valid (left unmapped). [ 182.454084][ T29] audit: type=1400 audit(1732074942.507:567): avc: denied { mac_admin } for pid=7272 comm="syz.2.335" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.476367][ T29] audit: type=1400 audit(1732074942.517:568): avc: denied { write } for pid=7272 comm="syz.2.335" path="socket:[11963]" dev="sockfs" ino=11963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.500487][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.506707][ T29] audit: type=1400 audit(1732074942.517:569): avc: denied { nlmsg_read } for pid=7272 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 182.797758][ T29] audit: type=1400 audit(1732074942.937:570): avc: denied { read } for pid=7268 comm="syz.3.334" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.830670][ T29] audit: type=1400 audit(1732074942.937:571): avc: denied { open } for pid=7268 comm="syz.3.334" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.906994][ T29] audit: type=1400 audit(1732074943.007:572): avc: denied { create } for pid=7278 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.926659][ T29] audit: type=1400 audit(1732074943.007:573): avc: denied { read } for pid=7278 comm="syz.4.336" path="socket:[11966]" dev="sockfs" ino=11966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.483550][ T7293] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 184.714536][ T29] audit: type=1400 audit(1732074944.897:574): avc: denied { ioctl } for pid=7297 comm="syz.0.341" path="/dev/input/event2" dev="devtmpfs" ino=928 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.315388][ T29] audit: type=1400 audit(1732074945.377:575): avc: denied { append } for pid=7281 comm="syz.2.337" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 185.710695][ T29] audit: type=1400 audit(1732074945.917:576): avc: denied { create } for pid=7294 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 187.922068][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 187.923370][ T29] audit: type=1400 audit(1732074948.127:580): avc: denied { mount } for pid=7321 comm="syz.0.346" name="/" dev="rpc_pipefs" ino=12882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 188.258309][ T29] audit: type=1400 audit(1732074948.427:581): avc: denied { read } for pid=7324 comm="syz.2.347" name="usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.782966][ T29] audit: type=1400 audit(1732074948.427:582): avc: denied { open } for pid=7324 comm="syz.2.347" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.870536][ T29] audit: type=1326 audit(1732074948.457:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa2b7e759 code=0x7ffc0000 [ 188.893757][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.074711][ T29] audit: type=1326 audit(1732074948.457:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa2b7e759 code=0x7ffc0000 [ 189.106860][ T29] audit: type=1326 audit(1732074948.457:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa2b7e759 code=0x7ffc0000 [ 189.144230][ T29] audit: type=1326 audit(1732074948.467:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa2b7e759 code=0x7ffc0000 [ 189.167847][ T29] audit: type=1326 audit(1732074948.467:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7324 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa2b7e759 code=0x7ffc0000 [ 189.191842][ T29] audit: type=1400 audit(1732074949.067:588): avc: denied { create } for pid=7329 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.212059][ T29] audit: type=1400 audit(1732074949.187:589): avc: denied { write } for pid=7329 comm="syz.3.348" path="socket:[12108]" dev="sockfs" ino=12108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.540685][ T966] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 192.046071][ T7360] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.048843][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 193.048859][ T29] audit: type=1400 audit(1732074953.177:599): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 193.077790][ T29] audit: type=1400 audit(1732074953.247:600): avc: denied { read write } for pid=7366 comm="syz.2.361" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 193.994190][ T29] audit: type=1400 audit(1732074953.247:601): avc: denied { open } for pid=7366 comm="syz.2.361" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.019921][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.026277][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.090424][ T966] usb 1-1: device not accepting address 6, error -71 [ 196.602364][ T7396] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 196.610027][ T7396] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.365'. [ 196.621883][ T7396] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.365'. [ 196.631108][ T7396] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 198.539670][ T29] audit: type=1326 audit(1732074957.777:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.563097][ T29] audit: type=1326 audit(1732074957.777:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.586333][ T29] audit: type=1326 audit(1732074957.777:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.773739][ T29] audit: type=1326 audit(1732074957.777:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.803924][ T29] audit: type=1326 audit(1732074957.777:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.827258][ T29] audit: type=1326 audit(1732074957.777:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.850792][ T29] audit: type=1326 audit(1732074957.777:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.874432][ T29] audit: type=1326 audit(1732074957.777:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd121d7e759 code=0x7ffc0000 [ 198.897934][ T29] audit: type=1326 audit(1732074957.777:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd121d7d0f0 code=0x7ffc0000 [ 198.921396][ T29] audit: type=1326 audit(1732074957.777:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7406 comm="syz.4.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd121d7e35b code=0x7ffc0000 [ 198.921472][ T966] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.308271][ T7419] can0: slcan on ttyS3. [ 199.551362][ T7419] can0 (unregistered): slcan off ttyS3. [ 199.700619][ T966] usb 5-1: Using ep0 maxpacket: 8 [ 199.710747][ T966] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 64, using maximum allowed: 30 [ 199.722337][ T966] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64 [ 199.735809][ T966] usb 5-1: New USB device found, idVendor=0548, idProduct=0069, bcdDevice= a.8d [ 199.745222][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.137436][ T966] usb 5-1: config 0 descriptor?? [ 201.605671][ T5878] usb 5-1: USB disconnect, device number 6 [ 201.613598][ T7441] vim2m vim2m.0: vidioc_s_fmt queue busy [ 202.753048][ T7452] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 202.759705][ T7452] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.769845][ T7452] vhci_hcd vhci_hcd.0: Device attached [ 204.230490][ T5878] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 204.240536][ T7456] usbip_core: unknown command [ 204.245226][ T7456] vhci_hcd: unknown pdu 3020988904 [ 204.335661][ T7456] usbip_core: unknown command [ 204.348317][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 204.348332][ T29] audit: type=1400 audit(1732074964.557:678): avc: denied { listen } for pid=7463 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.476005][ T6719] vhci_hcd: stop threads [ 204.481392][ T6719] vhci_hcd: release socket [ 204.486878][ T6719] vhci_hcd: disconnect device [ 204.508774][ T29] audit: type=1400 audit(1732074964.557:679): avc: denied { accept } for pid=7463 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.471521][ T7485] [U] [ 206.474271][ T7485] [U] [ 206.572202][ T7485] [U] [ 206.574945][ T7485] [U] [ 206.580605][ T7485] [U] [ 206.583305][ T7485] [U] [ 206.585965][ T7485] [U] [ 206.588627][ T7485] [U] [ 206.592569][ T7485] [U] [ 206.595273][ T7485] [U] [ 206.597947][ T7485] [U] [ 207.299820][ T29] audit: type=1400 audit(1732074966.687:680): avc: denied { watch } for pid=7487 comm="syz.2.390" path="/81" dev="tmpfs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.784465][ T7480] [U] [ 209.030568][ T29] audit: type=1400 audit(1732074969.127:681): avc: denied { ioctl } for pid=7509 comm="syz.1.396" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 209.162247][ T29] audit: type=1400 audit(1732074969.167:682): avc: denied { bind } for pid=7509 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 209.396187][ T7518] netlink: 'syz.3.400': attribute type 5 has an invalid length. [ 209.404371][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 209.430472][ T5878] vhci_hcd: vhci_device speed not set [ 210.305142][ T7526] syz.0.398 (7526): drop_caches: 2 [ 210.993307][ T7527] syz.4.401 (7527) used greatest stack depth: 20384 bytes left [ 211.064299][ T29] audit: type=1400 audit(1732074971.277:683): avc: denied { write } for pid=7514 comm="syz.2.397" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 211.522973][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 212.681927][ T7541] vlan2: entered promiscuous mode [ 212.689503][ T7541] batadv0: entered promiscuous mode [ 212.707778][ T7541] vlan2: entered allmulticast mode [ 212.761680][ T7541] batadv0: entered allmulticast mode [ 212.767752][ T7541] team0: Port device vlan2 added [ 213.416550][ T29] audit: type=1400 audit(1732074973.627:684): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 213.885686][ T29] audit: type=1400 audit(1732074974.077:685): avc: denied { mounton } for pid=7547 comm="syz.1.408" path="/proc/250/task" dev="proc" ino=13260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 214.606386][ T29] audit: type=1400 audit(1732074974.257:686): avc: denied { read } for pid=7551 comm="syz.0.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 214.920551][ T29] audit: type=1400 audit(1732074975.057:687): avc: denied { create } for pid=7560 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 216.630463][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 217.354325][ T7585] vivid-001: kernel_thread() failed [ 217.646264][ T5878] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.687137][ T5878] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 217.692391][ T7590] netlink: 996 bytes leftover after parsing attributes in process `syz.0.417'. [ 217.724258][ T7590] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 217.737440][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.763041][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 217.784765][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 217.790888][ T29] audit: type=1400 audit(1732074977.997:688): avc: denied { ioctl } for pid=7589 comm="syz.0.417" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14352 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.811166][ T5878] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.858378][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.877770][ T5878] usb 2-1: Product: syz [ 217.914311][ T5878] usb 2-1: Manufacturer: syz [ 217.945443][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 217.971304][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 217.976903][ T5878] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 218.042851][ T29] audit: type=1400 audit(1732074978.257:689): avc: denied { create } for pid=7603 comm="syz.3.420" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.099128][ T29] audit: type=1400 audit(1732074978.277:690): avc: denied { write } for pid=7603 comm="syz.3.420" name="file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.194311][ T29] audit: type=1400 audit(1732074978.277:691): avc: denied { open } for pid=7603 comm="syz.3.420" path="/84/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.216788][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.286530][ T29] audit: type=1400 audit(1732074978.277:692): avc: denied { ioctl } for pid=7603 comm="syz.3.420" path="/84/file0" dev="tmpfs" ino=462 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.334875][ T29] audit: type=1400 audit(1732074978.277:693): avc: denied { sqpoll } for pid=7603 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 218.366050][ T5878] usb 2-1: USB disconnect, device number 5 [ 219.011949][ T29] audit: type=1400 audit(1732074979.187:694): avc: denied { create } for pid=7626 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.835994][ T29] audit: type=1400 audit(1732074979.187:695): avc: denied { connect } for pid=7626 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.855606][ T29] audit: type=1400 audit(1732074979.257:696): avc: denied { write } for pid=7626 comm="syz.2.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 219.915515][ T7636] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.924755][ T7636] overlayfs: missing 'lowerdir' [ 219.951194][ T29] audit: type=1400 audit(1732074980.127:697): avc: denied { read } for pid=7635 comm="syz.2.424" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 219.997942][ T5878] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 220.017040][ T5878] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 220.076356][ T7637] 9pnet: Found fid 0 not clunked [ 220.158577][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.425'. [ 220.400746][ T5878] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 221.450747][ T5830] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.185620][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.207204][ T5878] usb 1-1: config 174 has an invalid interface number: 178 but max is 0 [ 222.215753][ T5878] usb 1-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 222.226190][ T5878] usb 1-1: config 174 has no interface number 0 [ 222.232671][ T5878] usb 1-1: config 174 interface 178 has no altsetting 0 [ 222.241471][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 222.254506][ T5878] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 222.263788][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.271945][ T5878] usb 1-1: Product: syz [ 222.276172][ T5878] usb 1-1: Manufacturer: syz [ 222.281104][ T5878] usb 1-1: SerialNumber: syz [ 222.780431][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 222.804327][ T5878] usb 1-1: bad CDC descriptors [ 222.809603][ T5878] usb 1-1: unsupported MDLM descriptors [ 222.831494][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.841061][ T5830] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 222.848599][ T5830] usb 3-1: can't read configurations, error -71 [ 222.962610][ T5878] usb 1-1: USB disconnect, device number 8 [ 223.330576][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 223.337828][ T9] usb 5-1: config 6 has an invalid interface number: 35 but max is 1 [ 223.346014][ T9] usb 5-1: config 6 has an invalid interface number: 39 but max is 1 [ 223.357801][ T9] usb 5-1: config 6 has no interface number 0 [ 223.364083][ T9] usb 5-1: config 6 has no interface number 1 [ 223.370189][ T9] usb 5-1: config 6 interface 35 has no altsetting 0 [ 223.378354][ T9] usb 5-1: config 6 interface 39 has no altsetting 0 [ 223.423144][ T9] usb 5-1: New USB device found, idVendor=413c, idProduct=81a3, bcdDevice=28.ad [ 223.438867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.446946][ T9] usb 5-1: Product: syz [ 223.451540][ T9] usb 5-1: Manufacturer: syz [ 223.456165][ T9] usb 5-1: SerialNumber: syz [ 224.237676][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 224.237755][ T29] audit: type=1400 audit(1732074984.447:706): avc: denied { append } for pid=7686 comm="syz.2.435" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 224.279018][ T29] audit: type=1400 audit(1732074984.487:707): avc: denied { getopt } for pid=7667 comm="syz.4.430" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 224.529970][ T9] usb 5-1: USB disconnect, device number 7 [ 224.664610][ T29] audit: type=1400 audit(1732074984.877:708): avc: denied { mount } for pid=7693 comm="syz.0.438" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 225.577852][ T29] audit: type=1400 audit(1732074984.907:709): avc: denied { setattr } for pid=7693 comm="syz.0.438" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.609131][ T29] audit: type=1400 audit(1732074984.977:710): avc: denied { write } for pid=7692 comm="syz.1.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 225.892325][ T29] audit: type=1400 audit(1732074986.107:711): avc: denied { write } for pid=7693 comm="syz.0.438" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.086684][ T29] audit: type=1400 audit(1732074986.107:712): avc: denied { open } for pid=7693 comm="syz.0.438" path="/96/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.667780][ T29] audit: type=1400 audit(1732074986.857:713): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.846502][ T29] audit: type=1800 audit(1732074987.017:714): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.444" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 226.870697][ T29] audit: type=1800 audit(1732074987.017:715): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.444" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 226.900488][ T966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.101871][ T966] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.114409][ T966] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.148460][ T966] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.200686][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.286636][ T7757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.602071][ T966] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.888297][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 228.578813][ T2142] usb 2-1: USB disconnect, device number 6 [ 230.660522][ T2142] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 230.812151][ T2142] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 230.940450][ T2142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 1024 [ 231.100467][ T2142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 232.080563][ T7765] infiniband syz2: set down [ 232.085289][ T7765] infiniband syz2: added ipvlan1 [ 232.217457][ T2142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.468782][ T7765] syz2: rxe_create_cq: returned err = -12 [ 232.535682][ T7765] infiniband syz2: Couldn't create ib_mad CQ [ 232.544151][ T2142] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 232.561673][ T7765] infiniband syz2: Couldn't open port 1 [ 232.666605][ T2142] usb 5-1: string descriptor 0 read error: -71 [ 233.083790][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 233.083825][ T29] audit: type=1400 audit(1732074993.097:720): avc: denied { ioctl } for pid=7870 comm="syz.0.458" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.171242][ T29] audit: type=1400 audit(1732074993.107:721): avc: denied { setcheckreqprot } for pid=7870 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 233.328604][ T2142] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 233.337941][ T2142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.357499][ T7765] RDS/IB: syz2: added [ 233.373414][ T7765] smc: adding ib device syz2 with port count 1 [ 233.379769][ T7765] smc: ib device syz2 port 1 has pnetid [ 233.412830][ T2142] usb 5-1: config 0 descriptor?? [ 233.461594][ T2142] usb 5-1: can't set config #0, error -71 [ 233.618578][ T2142] usb 5-1: USB disconnect, device number 8 [ 233.750087][ T29] audit: type=1400 audit(1732074993.857:722): avc: denied { setopt } for pid=7874 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.156847][ T29] audit: type=1400 audit(1732074994.077:723): avc: denied { write } for pid=7874 comm="syz.1.460" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 235.070447][ T29] audit: type=1400 audit(1732074994.087:724): avc: denied { open } for pid=7874 comm="syz.1.460" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 235.120444][ T29] audit: type=1400 audit(1732074994.087:725): avc: denied { read } for pid=7874 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.139689][ T29] audit: type=1400 audit(1732074994.157:726): avc: denied { write } for pid=7874 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.271708][ T29] audit: type=1400 audit(1732074995.387:727): avc: denied { setopt } for pid=7876 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.291255][ T29] audit: type=1400 audit(1732074995.387:728): avc: denied { bind } for pid=7876 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 237.119385][ T29] audit: type=1400 audit(1732074997.097:729): avc: denied { read } for pid=7876 comm="syz.4.461" path="socket:[14687]" dev="sockfs" ino=14687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.415860][ T29] audit: type=1400 audit(1732075000.617:730): avc: denied { ioctl } for pid=7923 comm="syz.4.472" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.097326][ T29] audit: type=1400 audit(1732075002.307:731): avc: denied { recv } for pid=5836 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.1.5 dest=56428 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 242.170540][ T29] audit: type=1400 audit(1732075002.347:732): avc: denied { read write } for pid=5827 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.214885][ T29] audit: type=1400 audit(1732075002.347:733): avc: denied { open } for pid=5827 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.299883][ T29] audit: type=1400 audit(1732075002.347:734): avc: denied { ioctl } for pid=5827 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.333524][ T29] audit: type=1400 audit(1732075002.407:735): avc: denied { read } for pid=5186 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 243.320726][ T29] audit: type=1400 audit(1732075002.407:736): avc: denied { search } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.343619][ T29] audit: type=1400 audit(1732075002.407:737): avc: denied { append } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.343641][ T29] audit: type=1400 audit(1732075002.407:738): avc: denied { open } for pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.343656][ T29] audit: type=1400 audit(1732075002.407:739): avc: denied { getattr } for pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 243.910796][ T7959] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 243.918282][ T7959] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 246.308642][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 246.308654][ T29] audit: type=1400 audit(1732075006.177:777): avc: denied { create } for pid=7968 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.334636][ T29] audit: type=1400 audit(1732075006.277:778): avc: denied { getopt } for pid=7968 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.383298][ T7973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.408180][ T29] audit: type=1400 audit(1732075006.577:779): avc: denied { create } for pid=7966 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 246.624716][ T29] audit: type=1400 audit(1732075006.837:780): avc: denied { write } for pid=7949 comm="syz.4.479" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 246.744730][ T7953] kvm_intel: kvm [7949]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x5cd00000386 [ 246.756706][ T7953] kvm: kvm [7949]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x65000000372 [ 246.781591][ T7975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 246.790553][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 246.808824][ T7975] bridge0: port 1(syz_tun) entered blocking state [ 246.815363][ T7975] bridge0: port 1(syz_tun) entered disabled state [ 246.822899][ T7975] syz_tun: entered allmulticast mode [ 246.828762][ T7975] syz_tun: entered promiscuous mode [ 246.835397][ T7975] bridge0: port 1(syz_tun) entered blocking state [ 246.841877][ T7975] bridge0: port 1(syz_tun) entered forwarding state [ 246.861067][ T29] audit: type=1400 audit(1732075006.947:781): avc: denied { read write } for pid=7949 comm="syz.4.479" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 246.884906][ T29] audit: type=1400 audit(1732075006.947:782): avc: denied { open } for pid=7949 comm="syz.4.479" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 246.908044][ T29] audit: type=1400 audit(1732075006.987:783): avc: denied { create } for pid=7974 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.928592][ T29] audit: type=1400 audit(1732075007.067:784): avc: denied { create } for pid=7974 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.949122][ T29] audit: type=1400 audit(1732075007.067:785): avc: denied { write } for pid=7974 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.970962][ T7975] x_tables: duplicate underflow at hook 3 [ 247.116909][ T29] audit: type=1400 audit(1732075007.287:786): avc: denied { name_bind } for pid=7977 comm="syz.0.487" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 247.172784][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.245413][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.879294][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.016867][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.025739][ T5833] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.037143][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.049407][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.057289][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.065118][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.073387][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.080770][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.088215][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.212954][ T7996] Bluetooth: MGMT ver 1.23 [ 248.238323][ T7994] Zero length message leads to an empty skb [ 248.554715][ T7979] chnl_net:caif_netlink_parms(): no params data found [ 249.293065][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.318156][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.343635][ T7979] bridge_slave_0: entered allmulticast mode [ 249.388858][ T7979] bridge_slave_0: entered promiscuous mode [ 249.435280][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.467719][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.499180][ T7979] bridge_slave_1: entered allmulticast mode [ 249.534190][ T7979] bridge_slave_1: entered promiscuous mode [ 249.616397][ T7979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.139016][ T7979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.148278][ T5833] Bluetooth: hci5: command tx timeout [ 250.198401][ T7979] team0: Port device team_slave_0 added [ 250.206039][ T7979] team0: Port device team_slave_1 added [ 250.304430][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.313752][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.386640][ T7979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.472309][ T7979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.479275][ T7979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.505217][ T7979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.672063][ T7979] hsr_slave_0: entered promiscuous mode [ 250.714808][ T7979] hsr_slave_1: entered promiscuous mode [ 250.733172][ T7979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.743539][ T7979] Cannot create hsr debugfs directory [ 251.512036][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 251.512047][ T29] audit: type=1400 audit(1732075011.727:816): avc: denied { setopt } for pid=8024 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.665493][ T29] audit: type=1400 audit(1732075011.797:817): avc: denied { ioctl } for pid=8024 comm="syz.4.498" path="socket:[15104]" dev="sockfs" ino=15104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.774016][ T7979] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 251.899004][ T7979] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.915782][ T7979] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 251.939690][ T7979] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 252.210886][ T5833] Bluetooth: hci5: command tx timeout [ 252.286840][ T29] audit: type=1400 audit(1732075012.497:818): avc: denied { execute_no_trans } for pid=8028 comm="syz.1.499" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CC1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F5202864656C6574656429 dev="tmpfs" ino=1128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.320449][ T8029] 9pnet_virtio: no channels available for device syz [ 252.401854][ T7620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.457951][ T29] audit: type=1400 audit(1732075012.667:819): avc: denied { read } for pid=8035 comm="syz.1.502" name="cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.459783][ T7979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.655356][ T29] audit: type=1400 audit(1732075012.667:820): avc: denied { open } for pid=8035 comm="syz.1.502" path="/dev/cec0" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.790115][ T29] audit: type=1400 audit(1732075012.897:821): avc: denied { ioctl } for pid=8035 comm="syz.1.502" path="/dev/cec0" dev="devtmpfs" ino=948 ioctlcmd=0x6107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.792083][ T7979] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.863219][ T29] audit: type=1400 audit(1732075013.047:822): avc: denied { write } for pid=8033 comm="syz.4.501" name="net" dev="proc" ino=15176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 252.993507][ T29] audit: type=1400 audit(1732075013.047:823): avc: denied { add_name } for pid=8033 comm="syz.4.501" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 253.650560][ T29] audit: type=1400 audit(1732075013.047:824): avc: denied { create } for pid=8033 comm="syz.4.501" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 253.686508][ T29] audit: type=1400 audit(1732075013.047:825): avc: denied { associate } for pid=8033 comm="syz.4.501" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 253.821742][ T7620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.869595][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.876701][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.898778][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.905865][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.973716][ T7620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.027248][ T7979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.080531][ T7979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.162092][ T7620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.503217][ T5881] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.716578][ T5833] Bluetooth: hci5: command tx timeout [ 254.897856][ T7979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.936303][ T5881] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 254.946140][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.000870][ T5881] usb 1-1: Product: syz [ 255.017697][ T5881] usb 1-1: Manufacturer: syz [ 255.026807][ T5881] usb 1-1: SerialNumber: syz [ 255.034298][ T5881] usb 1-1: config 0 descriptor?? [ 255.890709][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.897031][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058903][ T5878] usb 1-1: USB disconnect, device number 9 [ 256.946646][ T5833] Bluetooth: hci5: command tx timeout [ 256.995575][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 256.995585][ T29] audit: type=1400 audit(1732075017.207:841): avc: denied { ioctl } for pid=8070 comm="syz.3.509" path="/dev/vbi3" dev="devtmpfs" ino=966 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 257.290491][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 257.455635][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 257.486514][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.533967][ T5830] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 257.580450][ T29] audit: type=1400 audit(1732075017.787:842): avc: denied { write } for pid=8082 comm="syz.0.511" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.608417][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.637941][ T7620]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.660079][ T7620]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.719214][ T7620]  (unregistering): Released all slaves [ 257.782067][ T5830] usb 4-1: config 0 descriptor?? [ 257.904932][ T8086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.293589][ T5830] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 258.548032][ T25] usb 4-1: USB disconnect, device number 5 [ 258.568888][ T25] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 258.667549][ T8094] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.886775][ T29] audit: type=1400 audit(1732075019.097:843): avc: denied { setopt } for pid=8089 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.525425][ T29] audit: type=1400 audit(1732075019.727:844): avc: denied { create } for pid=8097 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 259.551088][ T7979] veth0_vlan: entered promiscuous mode [ 259.710061][ T7979] veth1_vlan: entered promiscuous mode [ 259.758248][ T7979] veth0_macvtap: entered promiscuous mode [ 259.808359][ T7979] veth1_macvtap: entered promiscuous mode [ 259.838937][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.870277][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.889098][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.900162][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.912751][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.874065][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.884260][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.894998][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.904876][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.915411][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.051876][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.060482][ T29] audit: type=1400 audit(1732075020.237:845): avc: denied { open } for pid=8099 comm="syz.3.516" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.084088][ T29] audit: type=1400 audit(1732075020.957:846): avc: denied { ioctl } for pid=8099 comm="syz.3.516" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x4707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.109912][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 261.430698][ T29] audit: type=1400 audit(1732075021.427:847): avc: denied { write } for pid=8110 comm="syz.3.518" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.469524][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.491343][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.517400][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.550732][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.560644][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.580436][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.590293][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.601917][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.612213][ T7979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.622775][ T7979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.633568][ T7979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.643098][ T7979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.652405][ T7979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.661189][ T7979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.669914][ T7979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.002057][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.027176][ T7620] hsr_slave_0: left promiscuous mode [ 262.048225][ T7620] hsr_slave_1: left promiscuous mode [ 262.059874][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.074088][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 262.087278][ T7620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.101734][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.113052][ T7620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.122146][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.140084][ T7620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.154456][ T8102] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 262.191658][ T7620] veth1_macvtap: left promiscuous mode [ 262.206462][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.214753][ T7620] veth0_macvtap: left promiscuous mode [ 262.225499][ T7620] veth1_vlan: left promiscuous mode [ 262.234422][ T7620] veth0_vlan: left promiscuous mode [ 262.562117][ T29] audit: type=1400 audit(1732075022.777:848): avc: denied { connect } for pid=8126 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.347287][ T7620] team_slave_1 (unregistering): left promiscuous mode [ 263.360978][ T7620] team0 (unregistering): Port device team_slave_1 removed [ 263.399526][ T7620] team_slave_0 (unregistering): left promiscuous mode [ 263.409057][ T7620] team0 (unregistering): Port device team_slave_0 removed [ 264.083991][ T5921] usb 1-1: USB disconnect, device number 10 [ 264.177422][ T29] audit: type=1400 audit(1732075024.387:849): avc: denied { create } for pid=8141 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 264.370949][ T29] audit: type=1400 audit(1732075024.587:850): avc: denied { create } for pid=8139 comm="syz.0.525" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.338090][ T29] audit: type=1400 audit(1732075025.507:851): avc: denied { write } for pid=8139 comm="syz.0.525" name="file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.574081][ T7639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.580450][ T29] audit: type=1400 audit(1732075025.507:852): avc: denied { open } for pid=8139 comm="syz.0.525" path="/119/file0" dev="tmpfs" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.600661][ T7639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.616238][ T29] audit: type=1400 audit(1732075025.517:853): avc: denied { bind } for pid=8148 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.635741][ T29] audit: type=1400 audit(1732075025.517:854): avc: denied { name_bind } for pid=8148 comm="syz.3.528" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 265.658909][ T29] audit: type=1400 audit(1732075025.517:855): avc: denied { node_bind } for pid=8148 comm="syz.3.528" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 265.680506][ T29] audit: type=1400 audit(1732075025.527:856): avc: denied { create } for pid=8148 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.700580][ T29] audit: type=1400 audit(1732075025.547:857): avc: denied { bind } for pid=8148 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 265.771423][ T7618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.780802][ T7618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.119170][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 268.119185][ T29] audit: type=1400 audit(1732075027.447:873): avc: denied { ioctl } for pid=8160 comm="syz.1.531" path="net:[4026532812]" dev="nsfs" ino=4026532812 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 268.179652][ T29] audit: type=1400 audit(1732075028.377:874): avc: denied { create } for pid=8159 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 268.249153][ T29] audit: type=1400 audit(1732075028.457:875): avc: denied { listen } for pid=8159 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 268.271566][ T7620] IPVS: stop unused estimator thread 0... [ 268.823221][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.925178][ T29] audit: type=1400 audit(1732075029.137:876): avc: denied { read } for pid=8175 comm="syz.3.535" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.407946][ T8183] Mount JFS Failure: -22 [ 269.412604][ T8183] jfs_mount failed w/return code = -22 [ 269.766505][ T8161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.780467][ T29] audit: type=1400 audit(1732075029.167:877): avc: denied { open } for pid=8175 comm="syz.3.535" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.826324][ T29] audit: type=1400 audit(1732075029.617:878): avc: denied { mounton } for pid=8173 comm="syz.0.532" path="/121/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.159031][ T8159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.449285][ T8192] Process accounting resumed [ 270.802748][ T8192] Process accounting resumed [ 274.880523][ T29] audit: type=1400 audit(1732075034.087:879): avc: denied { setopt } for pid=8218 comm="syz.3.546" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 275.200438][ T29] audit: type=1400 audit(1732075035.407:880): avc: denied { read write } for pid=8228 comm="syz.0.548" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.218148][ T8229] Trying to write to read-only block-device nullb0 [ 275.228802][ T2142] IPVS: starting estimator thread 0... [ 275.237185][ T29] audit: type=1400 audit(1732075035.407:881): avc: denied { open } for pid=8228 comm="syz.0.548" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.260247][ T29] audit: type=1400 audit(1732075035.407:882): avc: denied { map } for pid=8228 comm="syz.0.548" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.283244][ T29] audit: type=1400 audit(1732075035.407:883): avc: denied { execute } for pid=8228 comm="syz.0.548" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.306827][ T29] audit: type=1400 audit(1732075035.427:884): avc: denied { ioctl } for pid=8228 comm="syz.0.548" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 275.331458][ T29] audit: type=1400 audit(1732075035.427:885): avc: denied { setopt } for pid=8228 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 275.350955][ T29] audit: type=1400 audit(1732075035.517:886): avc: denied { create } for pid=8223 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.448903][ T8230] IPVS: using max 28 ests per chain, 67200 per kthread [ 275.460479][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.570560][ T29] audit: type=1400 audit(1732075035.677:887): avc: denied { write } for pid=8223 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.592420][ T29] audit: type=1400 audit(1732075035.677:888): avc: denied { nlmsg_write } for pid=8223 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 276.201727][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.220439][ T5921] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.229543][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.248892][ T5921] usb 5-1: config 0 descriptor?? [ 276.256875][ T5921] pwc: Askey VC010 type 2 USB webcam detected. [ 276.607387][ T5921] pwc: send_video_command error -71 [ 276.654531][ T5921] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 276.662365][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.795811][ T5921] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 276.822077][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 276.838800][ T5921] usb 5-1: USB disconnect, device number 9 [ 276.849512][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 276.950739][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 277.047393][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.497647][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.542954][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.564654][ T9] usb 2-1: Product: syz [ 277.568944][ T9] usb 2-1: Manufacturer: syz [ 277.577676][ T9] usb 2-1: SerialNumber: syz [ 277.780796][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.814811][ T5881] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 277.948711][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.027223][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 278.040795][ T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 278.056420][ T5921] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.099887][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 278.148055][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.166398][ T5921] usb 5-1: config 0 descriptor?? [ 278.176662][ T5881] usb 6-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 278.186065][ T5881] usb 6-1: config 219 interface 0 has no altsetting 0 [ 278.193275][ T5881] usb 6-1: config 219 interface 0 has no altsetting 1 [ 278.203733][ T5921] pwc: Askey VC010 type 2 USB webcam detected. [ 278.232440][ T5921] pwc: send_video_command error -71 [ 278.238011][ T5921] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 278.245805][ T5921] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 278.265730][ T5881] usb 6-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 278.275087][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.283386][ T5921] usb 5-1: USB disconnect, device number 10 [ 278.289538][ T5881] usb 6-1: Product: syz [ 278.294988][ T5881] usb 6-1: Manufacturer: syz [ 278.299840][ T5881] usb 6-1: SerialNumber: syz [ 278.709141][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.717925][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.730665][ T8258] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 279.195643][ T9] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 279.352101][ T5881] usb 6-1: selecting invalid altsetting 0 [ 279.360117][ T5881] usb 6-1: selecting invalid altsetting 0 [ 279.745593][ T9] usb 2-1: USB disconnect, device number 7 [ 280.026176][ T5881] usb 6-1: USB disconnect, device number 2 [ 280.635934][ T8290] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 280.635934][ T8290] program syz.3.566 not setting count and/or reply_len properly [ 280.669521][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 280.669556][ T29] audit: type=1400 audit(1732075040.587:897): avc: denied { getopt } for pid=8281 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 280.707069][ T29] audit: type=1400 audit(1732075040.847:898): avc: denied { read write } for pid=8283 comm="syz.3.566" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 280.889200][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.958563][ T8271] udevd[8271]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:219.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 281.093376][ T29] audit: type=1400 audit(1732075040.847:899): avc: denied { open } for pid=8283 comm="syz.3.566" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.305176][ T8292] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 281.311731][ T8292] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.372086][ T8292] vhci_hcd vhci_hcd.0: Device attached [ 281.384569][ T29] audit: type=1400 audit(1732075041.597:900): avc: denied { create } for pid=8303 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.400999][ T8304] x_tables: duplicate underflow at hook 2 [ 281.449175][ T29] audit: type=1400 audit(1732075041.597:901): avc: denied { connect } for pid=8303 comm="syz.5.572" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 281.557656][ T29] audit: type=1400 audit(1732075041.597:902): avc: denied { ioctl } for pid=8303 comm="syz.5.572" path="socket:[15876]" dev="sockfs" ino=15876 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.582523][ T29] audit: type=1400 audit(1732075041.607:903): avc: denied { write } for pid=8303 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.677526][ T29] audit: type=1400 audit(1732075041.827:904): avc: denied { setopt } for pid=8294 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.089542][ T8315] netlink: 257 bytes leftover after parsing attributes in process `syz.4.570'. [ 283.300506][ T2142] vhci_hcd: vhci_device speed not set [ 283.370598][ T2142] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 283.723858][ T29] audit: type=1400 audit(1732075043.927:905): avc: denied { ioctl } for pid=8307 comm="syz.0.571" path="/dev/sg0" dev="devtmpfs" ino=756 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 283.749252][ T8297] vhci_hcd: connection reset by peer [ 283.926037][ T8327] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 283.932457][ T8327] PKCS7: Only support pkcs7_signedData type [ 284.290731][ T29] audit: type=1326 audit(1732075044.137:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.3.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a31b7e759 code=0x7ffc0000 [ 284.314138][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.383433][ T7639] vhci_hcd: stop threads [ 284.389569][ T7639] vhci_hcd: release socket [ 284.634918][ T7639] vhci_hcd: disconnect device [ 286.817831][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 286.817846][ T29] audit: type=1400 audit(1732075047.017:931): avc: denied { ioctl } for pid=8344 comm="syz.4.579" path="socket:[16756]" dev="sockfs" ino=16756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.848768][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.961416][ T29] audit: type=1401 audit(1732075047.177:932): op=fscreate invalid_context="}" [ 287.735235][ T8367] Process accounting resumed [ 288.150913][ T8366] Process accounting resumed [ 288.632246][ T2142] vhci_hcd: vhci_device speed not set [ 291.729044][ T29] audit: type=1400 audit(1732075051.897:933): avc: denied { mount } for pid=8385 comm="syz.3.590" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 291.851056][ T8398] netlink: 68 bytes leftover after parsing attributes in process `syz.0.589'. [ 292.205915][ T29] audit: type=1400 audit(1732075052.397:934): avc: denied { create } for pid=8389 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 292.296782][ T5881] libceph: connect (1)[c::]:6789 error -22 [ 293.288876][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 293.493605][ T29] audit: type=1400 audit(1732075053.707:935): avc: denied { read } for pid=8410 comm="syz.3.595" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.519701][ T8390] ceph: No mds server is up or the cluster is laggy [ 293.525792][ T5881] libceph: connect (1)[c::]:6789 error -22 [ 293.535905][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 293.620461][ T29] audit: type=1400 audit(1732075053.767:936): avc: denied { open } for pid=8410 comm="syz.3.595" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 293.755347][ T29] audit: type=1400 audit(1732075053.867:937): avc: denied { sqpoll } for pid=8412 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 295.087888][ T8432] Process accounting resumed [ 295.225149][ T8433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.833612][ T8432] Process accounting resumed [ 296.370099][ T8443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.594'. [ 296.479864][ T29] audit: type=1400 audit(1732075056.317:938): avc: denied { create } for pid=8435 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 296.510229][ T29] audit: type=1400 audit(1732075056.717:939): avc: denied { setattr } for pid=8434 comm="syz.1.601" name="rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 300.207036][ T29] audit: type=1400 audit(1732075060.267:940): avc: denied { ioctl } for pid=8457 comm="syz.0.606" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 300.423672][ T29] audit: type=1400 audit(1732075060.507:941): avc: denied { bind } for pid=8457 comm="syz.0.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.741554][ T8466] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.749570][ T8466] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.759161][ T8466] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.919178][ T8466] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 300.934328][ T29] audit: type=1400 audit(1732075061.137:942): avc: denied { read } for pid=8465 comm="syz.3.610" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 300.969967][ T29] audit: type=1400 audit(1732075061.137:943): avc: denied { open } for pid=8465 comm="syz.3.610" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.213905][ T8446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 301.213943][ T8446] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 301.233303][ T29] audit: type=1400 audit(1732075061.447:944): avc: denied { write } for pid=8467 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.570823][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 301.661135][ T29] audit: type=1400 audit(1732075061.597:945): avc: denied { write } for pid=8473 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 301.865872][ T29] audit: type=1400 audit(1732075061.977:946): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 301.930552][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 302.941181][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.106529][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.116706][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 303.126035][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.231273][ T25] usb 4-1: config 0 descriptor?? [ 303.652705][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 303.659537][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 303.931424][ T25] usb 4-1: USB disconnect, device number 6 [ 304.822906][ T29] audit: type=1400 audit(1732075064.527:947): avc: denied { read } for pid=8498 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 305.493268][ T29] audit: type=1400 audit(1732075065.467:948): avc: denied { create } for pid=8501 comm="syz.5.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.746581][ T29] audit: type=1400 audit(1732075065.957:949): avc: denied { write } for pid=8512 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.920628][ T29] audit: type=1400 audit(1732075066.067:950): avc: denied { create } for pid=8517 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 306.212865][ T29] audit: type=1400 audit(1732075066.067:951): avc: denied { write } for pid=8517 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 306.479482][ T29] audit: type=1400 audit(1732075066.687:952): avc: denied { create } for pid=8528 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.557754][ T29] audit: type=1400 audit(1732075066.737:953): avc: denied { connect } for pid=8528 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.723275][ T29] audit: type=1400 audit(1732075066.807:954): avc: denied { read } for pid=8528 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.743662][ T29] audit: type=1400 audit(1732075066.887:955): avc: denied { write } for pid=8528 comm="syz.4.623" path="socket:[16298]" dev="sockfs" ino=16298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 306.777332][ T29] audit: type=1400 audit(1732075066.987:956): avc: denied { accept } for pid=8528 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.524610][ T29] audit: type=1400 audit(1732075068.527:957): avc: denied { create } for pid=8542 comm="syz.4.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 309.683207][ T8562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.081544][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 312.081560][ T29] audit: type=1400 audit(1732075072.287:963): avc: denied { mounton } for pid=8577 comm="syz.0.634" path="/proc/509/task" dev="proc" ino=17489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 312.341700][ T5921] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 313.182532][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 313.687337][ T5921] usb 1-1: config 0 has no interfaces? [ 313.735988][ T29] audit: type=1400 audit(1732075073.927:964): avc: denied { recv } for pid=8596 comm="syz.3.641" saddr=10.128.0.169 src=30006 daddr=10.128.1.5 dest=56428 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 313.745640][ T5921] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 313.770370][ T29] audit: type=1400 audit(1732075073.947:965): avc: denied { ioctl } for pid=8577 comm="syz.0.634" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 313.770411][ T29] audit: type=1400 audit(1732075073.947:966): avc: denied { read } for pid=8600 comm="syz.4.642" dev="nsfs" ino=4026533091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 313.816374][ T29] audit: type=1400 audit(1732075073.947:967): avc: denied { open } for pid=8600 comm="syz.4.642" path="net:[4026533091]" dev="nsfs" ino=4026533091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 313.839618][ T29] audit: type=1400 audit(1732075073.957:968): avc: denied { create } for pid=8600 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.859048][ T29] audit: type=1400 audit(1732075074.017:969): avc: denied { execmem } for pid=8600 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 313.929278][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.937592][ T5921] usb 1-1: Product: syz [ 313.973168][ T5921] usb 1-1: Manufacturer: syz [ 314.762211][ T5921] usb 1-1: SerialNumber: syz [ 314.920545][ T29] audit: type=1400 audit(1732075074.557:970): avc: denied { create } for pid=8600 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 314.940198][ T29] audit: type=1400 audit(1732075074.557:971): avc: denied { map_create } for pid=8586 comm="syz.1.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 314.959271][ T29] audit: type=1400 audit(1732075074.557:972): avc: denied { bpf } for pid=8586 comm="syz.1.640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 315.327964][ T5921] usb 1-1: config 0 descriptor?? [ 316.000231][ T5921] usb 1-1: USB disconnect, device number 11 [ 316.140232][ T8621] ptrace attach of ""[8624] was attempted by "./syz-executor exec"[8621] [ 316.862158][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.868791][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.406990][ T29] kauditd_printk_skb: 3818 callbacks suppressed [ 317.407009][ T29] audit: type=1400 audit(1732075077.487:4770): avc: denied { create } for pid=8640 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.559835][ T8643] evm: overlay not supported [ 317.615243][ T29] audit: type=1400 audit(1732075077.717:4771): avc: denied { mounton } for pid=8638 comm="syz.0.649" path="/142/bus" dev="tmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 318.481172][ T29] audit: type=1400 audit(1732075077.737:4772): avc: denied { unlink } for pid=8638 comm="syz.0.649" name="#12" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 318.503331][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.528554][ T29] audit: type=1400 audit(1732075077.737:4773): avc: denied { mount } for pid=8638 comm="syz.0.649" name="/" dev="overlay" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 318.550488][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.090848][ T29] audit: type=1400 audit(1732075078.537:4774): avc: denied { write } for pid=8647 comm="syz.1.651" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 319.122421][ T29] audit: type=1400 audit(1732075078.747:4775): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 319.142501][ T29] audit: type=1400 audit(1732075078.797:4776): avc: denied { write } for pid=8647 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.250097][ T29] audit: type=1400 audit(1732075079.417:4777): avc: denied { read write } for pid=8652 comm="syz.4.654" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.278977][ T29] audit: type=1400 audit(1732075079.417:4778): avc: denied { open } for pid=8652 comm="syz.4.654" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.302532][ T29] audit: type=1400 audit(1732075079.417:4779): avc: denied { ioctl } for pid=8652 comm="syz.4.654" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 320.496897][ T8659] veth1_macvtap: left promiscuous mode [ 320.502476][ T8659] macsec0: entered promiscuous mode [ 320.507696][ T8659] macsec0: entered allmulticast mode [ 320.515759][ T8661] bridge0: port 3(erspan0) entered blocking state [ 320.522273][ T8661] bridge0: port 3(erspan0) entered disabled state [ 320.528812][ T8661] erspan0: entered allmulticast mode [ 320.534978][ T8661] erspan0: entered promiscuous mode [ 320.540592][ T8661] bridge0: port 3(erspan0) entered blocking state [ 320.547044][ T8661] bridge0: port 3(erspan0) entered forwarding state [ 322.737811][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 322.737824][ T29] audit: type=1400 audit(1732075082.947:4795): avc: denied { name_connect } for pid=8679 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 322.930211][ T29] audit: type=1400 audit(1732075083.027:4796): avc: denied { write } for pid=8681 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.104191][ T29] audit: type=1400 audit(1732075083.027:4797): avc: denied { read } for pid=8681 comm="syz.1.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.720611][ T29] audit: type=1400 audit(1732075083.027:4798): avc: denied { create } for pid=8679 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.808788][ T29] audit: type=1400 audit(1732075083.037:4799): avc: denied { ioctl } for pid=8681 comm="syz.1.658" path="socket:[18551]" dev="sockfs" ino=18551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.833802][ T29] audit: type=1400 audit(1732075083.057:4800): avc: denied { read } for pid=8681 comm="syz.1.658" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 323.860394][ T29] audit: type=1400 audit(1732075083.057:4801): avc: denied { open } for pid=8681 comm="syz.1.658" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 323.884097][ T29] audit: type=1400 audit(1732075083.057:4802): avc: denied { ioctl } for pid=8681 comm="syz.1.658" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 323.909210][ T29] audit: type=1400 audit(1732075083.127:4803): avc: denied { bind } for pid=8679 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.928368][ T29] audit: type=1400 audit(1732075083.127:4804): avc: denied { write } for pid=8679 comm="syz.3.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 328.295781][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 328.295812][ T29] audit: type=1400 audit(1732075088.507:4815): avc: denied { block_suspend } for pid=8736 comm="syz.1.672" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.859296][ T29] audit: type=1400 audit(1732075089.647:4816): avc: denied { mount } for pid=8749 comm="syz.5.675" name="/" dev="ramfs" ino=18716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 330.136118][ T29] audit: type=1400 audit(1732075090.147:4817): avc: denied { unmount } for pid=7979 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 330.282904][ T8756] overlayfs: overlapping lowerdir path [ 330.952249][ T29] audit: type=1400 audit(1732075090.407:4818): avc: denied { ioctl } for pid=8752 comm="syz.4.676" path="socket:[17821]" dev="sockfs" ino=17821 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.081019][ T29] audit: type=1400 audit(1732075090.637:4819): avc: denied { create } for pid=8760 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 331.104444][ T29] audit: type=1400 audit(1732075090.637:4820): avc: denied { ioctl } for pid=8760 comm="syz.3.678" path="socket:[17830]" dev="sockfs" ino=17830 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 331.407543][ T8771] hub 6-0:1.0: USB hub found [ 331.416649][ T8771] hub 6-0:1.0: 1 port detected [ 331.920704][ T29] audit: type=1400 audit(1732075092.107:4821): avc: denied { create } for pid=8760 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.180681][ T29] audit: type=1400 audit(1732075092.137:4822): avc: denied { listen } for pid=8760 comm="syz.3.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 332.457624][ T29] audit: type=1400 audit(1732075092.667:4823): avc: denied { create } for pid=8777 comm="syz.4.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 332.689381][ T29] audit: type=1400 audit(1732075092.897:4824): avc: denied { create } for pid=8775 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 333.694570][ T29] audit: type=1400 audit(1732075092.897:4825): avc: denied { write } for pid=8775 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 333.918408][ T29] audit: type=1400 audit(1732075094.127:4826): avc: denied { create } for pid=8783 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.966610][ T29] audit: type=1400 audit(1732075094.167:4827): avc: denied { read } for pid=8783 comm="syz.4.683" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 334.005658][ T29] audit: type=1400 audit(1732075094.167:4828): avc: denied { open } for pid=8783 comm="syz.4.683" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 334.147899][ T29] audit: type=1400 audit(1732075094.317:4829): avc: denied { read write } for pid=8786 comm="syz.3.684" name="sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 334.171872][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.245485][ T29] audit: type=1400 audit(1732075094.317:4830): avc: denied { open } for pid=8786 comm="syz.3.684" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 334.269320][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.275544][ T29] audit: type=1400 audit(1732075094.317:4831): avc: denied { name_bind } for pid=8786 comm="syz.3.684" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 334.297230][ T29] audit: type=1400 audit(1732075094.317:4832): avc: denied { node_bind } for pid=8786 comm="syz.3.684" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 334.318022][ T29] audit: type=1400 audit(1732075094.317:4833): avc: denied { map } for pid=8786 comm="syz.3.684" path="/dev/sg0" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 334.341708][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.464339][ T29] audit: type=1400 audit(1732075094.677:4834): avc: denied { ioctl } for pid=8783 comm="syz.4.683" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 334.490438][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.480445][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 336.509834][ T8820] bridge0: entered allmulticast mode [ 336.534975][ T8820] team0: left allmulticast mode [ 336.541913][ T8820] team_slave_0: left allmulticast mode [ 336.552247][ T8820] team_slave_1: left allmulticast mode [ 336.562209][ T5921] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 336.587115][ T8820] vlan2: left allmulticast mode [ 336.609729][ T8820] batadv0: left allmulticast mode [ 336.650159][ T8820] bridge0: port 4(team0) entered disabled state [ 336.656717][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 336.672891][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 336.691880][ T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 336.708252][ T8820] syz_tun: left allmulticast mode [ 336.722859][ T9] usb 1-1: Product: syz [ 336.727366][ T8820] syz_tun: left promiscuous mode [ 336.732647][ T9] usb 1-1: Manufacturer: syz [ 336.743402][ T5921] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 336.751580][ T5921] usb 4-1: config 0 has no interface number 0 [ 336.758440][ T8820] bridge0: port 3(syz_tun) entered disabled state [ 336.768340][ T9] usb 1-1: SerialNumber: syz [ 336.782528][ T5921] usb 4-1: config 0 interface 2 has no altsetting 0 [ 336.800206][ T9] usb 1-1: config 0 descriptor?? [ 336.811443][ T8820] bridge_slave_1: left allmulticast mode [ 336.818494][ T5921] usb 4-1: New USB device found, idVendor=17cc, idProduct=041c, bcdDevice=81.4d [ 336.842638][ T8820] bridge_slave_1: left promiscuous mode [ 336.855716][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.871746][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.886401][ T5921] usb 4-1: Product: syz [ 336.897523][ T5921] usb 4-1: Manufacturer: syz [ 336.905865][ T8820] bridge_slave_0: left allmulticast mode [ 336.918673][ T5921] usb 4-1: SerialNumber: syz [ 336.925723][ T8820] bridge_slave_0: left promiscuous mode [ 336.957422][ T5921] usb 4-1: config 0 descriptor?? [ 336.965552][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.983541][ T5921] snd-usb-caiaq 4-1:0.2: can't set alt interface. [ 337.002146][ T5921] usb 4-1: unable to init card! (ret=-5) [ 337.028863][ T5921] snd-usb-caiaq 4-1:0.2: probe with driver snd-usb-caiaq failed with error -5 [ 337.281057][ T5882] usb 4-1: USB disconnect, device number 7 [ 337.533337][ T8824] xt_CT: No such helper "snmp" [ 337.610016][ T8831] syz.4.696: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.611579][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.4.696 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 337.611604][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 337.611617][ T8831] Call Trace: [ 337.611624][ T8831] [ 337.611633][ T8831] dump_stack_lvl+0x16c/0x1f0 [ 337.611668][ T8831] warn_alloc+0x24d/0x3a0 [ 337.611696][ T8831] ? __pfx_warn_alloc+0x10/0x10 [ 337.611722][ T8831] ? mark_held_locks+0x9f/0xe0 [ 337.611744][ T8831] ? irqentry_exit+0x3b/0x90 [ 337.611784][ T8831] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 337.611817][ T8831] ? xskq_create+0xfb/0x1d0 [ 337.611853][ T8831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.611886][ T8831] ? xskq_create+0xfb/0x1d0 [ 337.611911][ T8831] vmalloc_user_noprof+0x6b/0x90 [ 337.611934][ T8831] ? xskq_create+0xfb/0x1d0 [ 337.611959][ T8831] xskq_create+0xfb/0x1d0 [ 337.611986][ T8831] xsk_setsockopt+0x757/0xa10 [ 337.612012][ T8831] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.612047][ T8831] ? selinux_socket_setsockopt+0x6a/0x80 [ 337.612081][ T8831] ? __pfx_xsk_setsockopt+0x10/0x10 [ 337.612107][ T8831] do_sock_setsockopt+0x222/0x480 [ 337.612130][ T8831] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 337.612154][ T8831] ? lock_acquire+0x2f/0xb0 [ 337.612185][ T8831] __sys_setsockopt+0x1a0/0x230 [ 337.612218][ T8831] __x64_sys_setsockopt+0xbd/0x160 [ 337.612247][ T8831] ? __x64_sys_setsockopt+0x4/0x160 [ 337.612277][ T8831] do_syscall_64+0xcd/0x250 [ 337.612306][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.612333][ T8831] RIP: 0033:0x7fd121d7e759 [ 337.612350][ T8831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.612369][ T8831] RSP: 002b:00007fd122c0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 337.612388][ T8831] RAX: ffffffffffffffda RBX: 00007fd121f36058 RCX: 00007fd121d7e759 [ 337.612402][ T8831] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 337.612414][ T8831] RBP: 00007fd121df175e R08: 0000000000000020 R09: 0000000000000000 [ 337.612426][ T8831] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 337.612439][ T8831] R13: 0000000000000001 R14: 00007fd121f36058 R15: 00007ffc972dff78 [ 337.612464][ T8831] [ 337.612542][ T8831] Mem-Info: [ 337.612772][ T8831] active_anon:8999 inactive_anon:0 isolated_anon:0 [ 337.612772][ T8831] active_file:13964 inactive_file:38541 isolated_file:0 [ 337.612772][ T8831] unevictable:773 dirty:467 writeback:0 [ 337.612772][ T8831] slab_reclaimable:11011 slab_unreclaimable:103341 [ 337.612772][ T8831] mapped:24871 shmem:4960 pagetables:834 [ 337.612772][ T8831] sec_pagetables:0 bounce:0 [ 337.612772][ T8831] kernel_misc_reclaimable:0 [ 337.612772][ T8831] free:1330968 free_pcp:1393 free_cma:0 [ 337.612868][ T8831] Node 0 active_anon:35996kB inactive_anon:0kB active_file:55856kB inactive_file:154088kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:99484kB dirty:1868kB writeback:0kB shmem:18304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12056kB pagetables:3336kB sec_pagetables:0kB all_unreclaimable? no [ 337.612936][ T8831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 337.613054][ T8831] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.613240][ T8831] lowmem_reserve[]: 0 2459 2459 0 0 [ 337.613778][ T8831] Node 0 DMA32 free:1399980kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:35996kB inactive_anon:0kB active_file:55856kB inactive_file:154000kB unevictable:1556kB writepending:1868kB present:3129332kB managed:2547128kB mlocked:20kB bounce:0kB free_pcp:5548kB local_pcp:5420kB free_cma:0kB [ 337.613989][ T8831] lowmem_reserve[]: 0 0 0 0 0 [ 337.614540][ T8831] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 337.614723][ T8831] lowmem_reserve[]: 0 0 0 0 0 [ 337.615296][ T8831] Node 1 Normal free:3908532kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.615480][ T8831] lowmem_reserve[]: 0 0 0 0 0 [ 337.616146][ T8831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 337.617761][ T8831] Node 0 DMA32: 460*4kB (UME) 293*8kB (UME) 338*16kB (UE) 667*32kB (UME) 303*64kB (UME) 44*128kB (UME) 38*256kB (UME) 22*512kB (UME) 12*1024kB (UM) 8*2048kB (ME) 316*4096kB (UM) = 1399960kB [ 337.619900][ T8831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.147708][ T8831] Node 1 Normal: 201*4kB (UE) 54*8kB (UME) 30*16kB (UME) 178*32kB (UME) 95*64kB (UME) 18*128kB (UME) 14*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908532kB [ 338.147880][ T8831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.147897][ T8831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.147911][ T8831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 338.147925][ T8831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 338.147940][ T8831] 57465 total pagecache pages [ 338.147948][ T8831] 0 pages in swap cache [ 338.147955][ T8831] Free swap = 124548kB [ 338.147962][ T8831] Total swap = 124996kB [ 338.147970][ T8831] 2097051 pages RAM [ 338.147977][ T8831] 0 pages HighMem/MovableOnly [ 338.147984][ T8831] 428611 pages reserved [ 338.147992][ T8831] 0 pages cma reserved [ 338.262065][ T8834] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 339.211156][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 339.211172][ T29] audit: type=1400 audit(1732075099.397:4861): avc: denied { create } for pid=8838 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.212652][ T29] audit: type=1400 audit(1732075099.397:4862): avc: denied { read } for pid=8838 comm="syz.5.699" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.219749][ T29] audit: type=1400 audit(1732075099.397:4863): avc: denied { open } for pid=8838 comm="syz.5.699" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 339.496565][ T29] audit: type=1400 audit(1732075099.697:4864): avc: denied { connect } for pid=8848 comm="syz.1.701" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.530139][ T29] audit: type=1400 audit(1732075100.737:4865): avc: denied { write } for pid=8848 comm="syz.1.701" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.651043][ T8852] netlink: 188 bytes leftover after parsing attributes in process `syz.1.701'. [ 342.160670][ T29] audit: type=1400 audit(1732075101.357:4866): avc: denied { getopt } for pid=8838 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 342.392957][ T8860] tty tty4: ldisc open failed (-12), clearing slot 3 [ 342.538910][ T29] audit: type=1400 audit(1732075102.747:4867): avc: denied { create } for pid=8866 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 342.810453][ T29] audit: type=1400 audit(1732075102.907:4868): avc: denied { bind } for pid=8863 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.852536][ T29] audit: type=1400 audit(1732075102.907:4869): avc: denied { write } for pid=8863 comm="syz.3.705" path="socket:[18007]" dev="sockfs" ino=18007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.895746][ T29] audit: type=1400 audit(1732075102.937:4870): avc: denied { write } for pid=8865 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.323908][ T5921] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 345.210406][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 345.248679][ T5921] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.264674][ T5921] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.080973][ T5921] usb 6-1: string descriptor 0 read error: -71 [ 346.087480][ T5921] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 346.096675][ T5921] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 346.150224][ T5921] usb 6-1: can't set config #4, error -71 [ 346.733184][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.742323][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.779010][ T5921] usb 6-1: USB disconnect, device number 3 [ 346.806745][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 346.806772][ T29] audit: type=1400 audit(1732075106.987:4872): avc: denied { create } for pid=8897 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 346.992692][ T8901] netlink: 256 bytes leftover after parsing attributes in process `syz.4.714'. [ 347.025731][ T8886] sp0: Synchronizing with TNC [ 347.032918][ T7638] [ 347.035225][ T7638] ===================================================== [ 347.042151][ T7638] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 347.049581][ T7638] 6.12.0-syzkaller-01518-ga5c93bfec0be #0 Not tainted [ 347.056312][ T7638] ----------------------------------------------------- [ 347.063212][ T7638] kworker/u8:27/7638 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 347.071170][ T7638] ffffffff8f3353b8 (disc_data_lock#4){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 347.079492][ T7638] [ 347.079492][ T7638] and this task is already holding: [ 347.086821][ T7638] ffffffff9ab02e98 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 347.095479][ T7638] which would create a new lock dependency: [ 347.101362][ T7638] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#4){.+.+}-{3:3} [ 347.109186][ T7638] [ 347.109186][ T7638] but this new dependency connects a HARDIRQ-irq-safe lock: [ 347.118617][ T7638] (&port_lock_key){-.-.}-{3:3} [ 347.118632][ T7638] [ 347.118632][ T7638] ... which became HARDIRQ-irq-safe at: [ 347.131118][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.136305][ T7638] _raw_spin_lock_irqsave+0x3a/0x60 [ 347.141561][ T7638] serial8250_handle_irq+0x95/0xc80 [ 347.146820][ T7638] serial8250_default_handle_irq+0x9a/0x210 [ 347.152776][ T7638] serial8250_interrupt+0x103/0x210 [ 347.158042][ T7638] __handle_irq_event_percpu+0x229/0x7c0 [ 347.163732][ T7638] handle_irq_event+0xab/0x1e0 [ 347.168563][ T7638] handle_edge_irq+0x263/0xd10 [ 347.173382][ T7638] __common_interrupt+0xdf/0x250 [ 347.178392][ T7638] common_interrupt+0xba/0xe0 [ 347.183123][ T7638] asm_common_interrupt+0x26/0x40 [ 347.188204][ T7638] _raw_spin_unlock_irqrestore+0x31/0x80 [ 347.193891][ T7638] uart_write+0x2a4/0xb30 [ 347.198277][ T7638] n_tty_write+0x419/0x1140 [ 347.202841][ T7638] file_tty_write.constprop.0+0x506/0x9a0 [ 347.208617][ T7638] redirected_tty_write+0xcc/0x140 [ 347.213783][ T7638] vfs_write+0x5ae/0x1150 [ 347.218168][ T7638] ksys_write+0x12b/0x250 [ 347.222551][ T7638] do_syscall_64+0xcd/0x250 [ 347.227111][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.233071][ T7638] [ 347.233071][ T7638] to a HARDIRQ-irq-unsafe lock: [ 347.240055][ T7638] (disc_data_lock#4){.+.+}-{3:3} [ 347.240072][ T7638] [ 347.240072][ T7638] ... which became HARDIRQ-irq-unsafe at: [ 347.252918][ T7638] ... [ 347.252921][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.260651][ T7638] _raw_read_lock+0x5f/0x70 [ 347.265223][ T7638] sp_get+0x18/0xf0 [ 347.269087][ T7638] sixpack_receive_buf+0x59/0x1c50 [ 347.274254][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 347.279596][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 347.285370][ T7638] flush_to_ldisc+0x264/0x780 [ 347.290103][ T7638] process_one_work+0x9c5/0x1ba0 [ 347.295098][ T7638] worker_thread+0x6c8/0xf00 [ 347.299742][ T7638] kthread+0x2c1/0x3a0 [ 347.303879][ T7638] ret_from_fork+0x45/0x80 [ 347.308350][ T7638] ret_from_fork_asm+0x1a/0x30 [ 347.313173][ T7638] [ 347.313173][ T7638] other info that might help us debug this: [ 347.313173][ T7638] [ 347.323379][ T7638] Possible interrupt unsafe locking scenario: [ 347.323379][ T7638] [ 347.331664][ T7638] CPU0 CPU1 [ 347.337008][ T7638] ---- ---- [ 347.342340][ T7638] lock(disc_data_lock#4); [ 347.346814][ T7638] local_irq_disable(); [ 347.353536][ T7638] lock(&port_lock_key); [ 347.360350][ T7638] lock(disc_data_lock#4); [ 347.367341][ T7638] [ 347.370773][ T7638] lock(&port_lock_key); [ 347.375243][ T7638] [ 347.375243][ T7638] *** DEADLOCK *** [ 347.375243][ T7638] [ 347.383353][ T7638] 6 locks held by kworker/u8:27/7638: [ 347.388690][ T7638] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 347.399782][ T7638] #1: ffffc900037bfd80 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 347.410784][ T7638] #2: ffff888024fd8ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 347.419790][ T7638] #3: ffff88807b5420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 347.429057][ T7638] #4: ffffffff9ab02e98 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 347.438150][ T7638] #5: ffff88807b5420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 347.447424][ T7638] [ 347.447424][ T7638] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 347.457794][ T7638] -> (&port_lock_key){-.-.}-{3:3} { [ 347.462978][ T7638] IN-HARDIRQ-W at: [ 347.466942][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.473671][ T7638] _raw_spin_lock_irqsave+0x3a/0x60 [ 347.480487][ T7638] serial8250_handle_irq+0x95/0xc80 [ 347.487305][ T7638] serial8250_default_handle_irq+0x9a/0x210 [ 347.494819][ T7638] serial8250_interrupt+0x103/0x210 [ 347.501642][ T7638] __handle_irq_event_percpu+0x229/0x7c0 [ 347.508904][ T7638] handle_irq_event+0xab/0x1e0 [ 347.515303][ T7638] handle_edge_irq+0x263/0xd10 [ 347.521698][ T7638] __common_interrupt+0xdf/0x250 [ 347.528258][ T7638] common_interrupt+0xba/0xe0 [ 347.534568][ T7638] asm_common_interrupt+0x26/0x40 [ 347.541214][ T7638] _raw_spin_unlock_irqrestore+0x31/0x80 [ 347.548467][ T7638] uart_write+0x2a4/0xb30 [ 347.554416][ T7638] n_tty_write+0x419/0x1140 [ 347.560539][ T7638] file_tty_write.constprop.0+0x506/0x9a0 [ 347.567886][ T7638] redirected_tty_write+0xcc/0x140 [ 347.574617][ T7638] vfs_write+0x5ae/0x1150 [ 347.580563][ T7638] ksys_write+0x12b/0x250 [ 347.586510][ T7638] do_syscall_64+0xcd/0x250 [ 347.592807][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.600323][ T7638] IN-SOFTIRQ-W at: [ 347.604282][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.611010][ T7638] _raw_spin_lock_irqsave+0x3a/0x60 [ 347.617843][ T7638] serial8250_handle_irq+0x95/0xc80 [ 347.624672][ T7638] serial8250_default_handle_irq+0x9a/0x210 [ 347.632184][ T7638] serial8250_interrupt+0x103/0x210 [ 347.639004][ T7638] __handle_irq_event_percpu+0x229/0x7c0 [ 347.646256][ T7638] handle_irq_event+0xab/0x1e0 [ 347.652638][ T7638] handle_edge_irq+0x263/0xd10 [ 347.659021][ T7638] __common_interrupt+0xdf/0x250 [ 347.665579][ T7638] common_interrupt+0x61/0xe0 [ 347.671872][ T7638] asm_common_interrupt+0x26/0x40 [ 347.678517][ T7638] sched_balance_update_blocked_averages+0x10aa/0x1cb0 [ 347.686996][ T7638] sched_balance_softirq+0x122/0x1a0 [ 347.693898][ T7638] handle_softirqs+0x213/0x8f0 [ 347.700280][ T7638] irq_exit_rcu+0xbb/0x120 [ 347.706326][ T7638] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 347.713578][ T7638] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.721180][ T7638] console_flush_all+0x9a4/0xc60 [ 347.727746][ T7638] console_unlock+0xd9/0x210 [ 347.733956][ T7638] vprintk_emit+0x424/0x6f0 [ 347.740075][ T7638] vprintk+0x7f/0xa0 [ 347.745590][ T7638] _printk+0xc8/0x100 [ 347.751187][ T7638] kauditd_hold_skb+0x205/0x250 [ 347.757658][ T7638] kauditd_send_queue+0x236/0x290 [ 347.764309][ T7638] kauditd_thread+0x611/0xa60 [ 347.770611][ T7638] kthread+0x2c1/0x3a0 [ 347.776306][ T7638] ret_from_fork+0x45/0x80 [ 347.782336][ T7638] ret_from_fork_asm+0x1a/0x30 [ 347.788719][ T7638] INITIAL USE at: [ 347.792577][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.799216][ T7638] _raw_spin_lock_irqsave+0x3a/0x60 [ 347.805955][ T7638] serial8250_do_set_termios+0x307/0x16f0 [ 347.813217][ T7638] serial8250_set_termios+0x6e/0x80 [ 347.819945][ T7638] uart_set_options+0x31b/0x5f0 [ 347.826325][ T7638] serial8250_console_setup+0x18a/0x460 [ 347.833406][ T7638] univ8250_console_setup+0x1d4/0x2c0 [ 347.840305][ T7638] try_enable_preferred_console+0x2fd/0x530 [ 347.847727][ T7638] register_console+0x3ac/0x1170 [ 347.854206][ T7638] univ8250_console_init+0x5f/0x90 [ 347.860847][ T7638] console_init+0xcc/0x680 [ 347.866794][ T7638] start_kernel+0x29a/0x4d0 [ 347.872833][ T7638] x86_64_start_reservations+0x18/0x30 [ 347.879823][ T7638] x86_64_start_kernel+0xb2/0xc0 [ 347.886294][ T7638] common_startup_64+0x13e/0x148 [ 347.892761][ T7638] } [ 347.895226][ T7638] ... key at: [] port_lock_key+0x0/0x40 [ 347.902836][ T7638] [ 347.902836][ T7638] the dependencies between the lock to be acquired [ 347.902841][ T7638] and HARDIRQ-irq-unsafe lock: [ 347.916287][ T7638] -> (disc_data_lock#4){.+.+}-{3:3} { [ 347.921639][ T7638] HARDIRQ-ON-R at: [ 347.925583][ T7638] lock_acquire.part.0+0x11b/0x380 [ 347.932311][ T7638] _raw_read_lock+0x5f/0x70 [ 347.938441][ T7638] sp_get+0x18/0xf0 [ 347.943864][ T7638] sixpack_receive_buf+0x59/0x1c50 [ 347.950609][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 347.957526][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 347.964873][ T7638] flush_to_ldisc+0x264/0x780 [ 347.971168][ T7638] process_one_work+0x9c5/0x1ba0 [ 347.977724][ T7638] worker_thread+0x6c8/0xf00 [ 347.983941][ T7638] kthread+0x2c1/0x3a0 [ 347.989628][ T7638] ret_from_fork+0x45/0x80 [ 347.995667][ T7638] ret_from_fork_asm+0x1a/0x30 [ 348.002049][ T7638] SOFTIRQ-ON-R at: [ 348.006004][ T7638] lock_acquire.part.0+0x11b/0x380 [ 348.012736][ T7638] _raw_read_lock+0x5f/0x70 [ 348.018856][ T7638] sp_get+0x18/0xf0 [ 348.024278][ T7638] sixpack_receive_buf+0x59/0x1c50 [ 348.031009][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 348.038006][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 348.045430][ T7638] flush_to_ldisc+0x264/0x780 [ 348.051811][ T7638] process_one_work+0x9c5/0x1ba0 [ 348.058369][ T7638] worker_thread+0x6c8/0xf00 [ 348.064574][ T7638] kthread+0x2c1/0x3a0 [ 348.070263][ T7638] ret_from_fork+0x45/0x80 [ 348.076295][ T7638] ret_from_fork_asm+0x1a/0x30 [ 348.082687][ T7638] INITIAL READ USE at: [ 348.086994][ T7638] lock_acquire.part.0+0x11b/0x380 [ 348.094069][ T7638] _raw_read_lock+0x5f/0x70 [ 348.100539][ T7638] sp_get+0x18/0xf0 [ 348.106321][ T7638] sixpack_receive_buf+0x59/0x1c50 [ 348.113394][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 348.120644][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 348.128328][ T7638] flush_to_ldisc+0x264/0x780 [ 348.135016][ T7638] process_one_work+0x9c5/0x1ba0 [ 348.141917][ T7638] worker_thread+0x6c8/0xf00 [ 348.148470][ T7638] kthread+0x2c1/0x3a0 [ 348.154506][ T7638] ret_from_fork+0x45/0x80 [ 348.160886][ T7638] ret_from_fork_asm+0x1a/0x30 [ 348.167703][ T7638] } [ 348.170170][ T7638] ... key at: [] disc_data_lock+0x18/0xfa0 [ 348.178032][ T7638] ... acquired at: [ 348.181809][ T7638] lock_acquire.part.0+0x11b/0x380 [ 348.187063][ T7638] _raw_read_lock+0x5f/0x70 [ 348.191706][ T7638] sp_get+0x18/0xf0 [ 348.195653][ T7638] sixpack_write_wakeup+0x20/0x390 [ 348.200907][ T7638] tty_wakeup+0xe5/0x120 [ 348.205288][ T7638] tty_port_default_wakeup+0x2a/0x40 [ 348.210721][ T7638] serial8250_tx_chars+0x68e/0x860 [ 348.215977][ T7638] __start_tx+0x3e9/0x4a0 [ 348.220450][ T7638] serial8250_start_tx+0x363/0x530 [ 348.225702][ T7638] __uart_start+0x292/0x4c0 [ 348.230345][ T7638] uart_write+0x218/0xb30 [ 348.234816][ T7638] sixpack_receive_buf+0x3d7/0x1c50 [ 348.240155][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 348.245580][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 348.251439][ T7638] flush_to_ldisc+0x264/0x780 [ 348.256268][ T7638] process_one_work+0x9c5/0x1ba0 [ 348.261354][ T7638] worker_thread+0x6c8/0xf00 [ 348.266083][ T7638] kthread+0x2c1/0x3a0 [ 348.270296][ T7638] ret_from_fork+0x45/0x80 [ 348.274850][ T7638] ret_from_fork_asm+0x1a/0x30 [ 348.279757][ T7638] [ 348.282063][ T7638] [ 348.282063][ T7638] stack backtrace: [ 348.287918][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: kworker/u8:27 Not tainted 6.12.0-syzkaller-01518-ga5c93bfec0be #0 [ 348.298467][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 348.308489][ T7638] Workqueue: events_unbound flush_to_ldisc [ 348.314265][ T7638] Call Trace: [ 348.317530][ T7638] [ 348.320431][ T7638] dump_stack_lvl+0x116/0x1f0 [ 348.325082][ T7638] check_irq_usage+0xf22/0x1290 [ 348.329899][ T7638] ? __pfx_check_irq_usage+0x10/0x10 [ 348.335151][ T7638] ? hlock_conflict+0x58/0x200 [ 348.339894][ T7638] ? __bfs+0x2fa/0x670 [ 348.343943][ T7638] ? __pfx_hlock_conflict+0x10/0x10 [ 348.349110][ T7638] ? hlock_conflict+0x58/0x200 [ 348.353848][ T7638] ? lockdep_lock+0xc6/0x200 [ 348.358408][ T7638] ? __pfx_lockdep_lock+0x10/0x10 [ 348.363402][ T7638] ? __lock_acquire+0x24b4/0x3c40 [ 348.368393][ T7638] __lock_acquire+0x24b4/0x3c40 [ 348.373212][ T7638] ? __pfx___lock_acquire+0x10/0x10 [ 348.378376][ T7638] ? lock_acquire.part.0+0x11b/0x380 [ 348.383628][ T7638] lock_acquire.part.0+0x11b/0x380 [ 348.388705][ T7638] ? sp_get+0x18/0xf0 [ 348.392652][ T7638] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 348.398250][ T7638] ? rcu_is_watching+0x12/0xc0 [ 348.402983][ T7638] ? trace_lock_acquire+0x14a/0x1d0 [ 348.408149][ T7638] ? tty_ldisc_ref+0x1c/0x80 [ 348.412709][ T7638] ? sp_get+0x18/0xf0 [ 348.416673][ T7638] ? lock_acquire+0x2f/0xb0 [ 348.421142][ T7638] ? sp_get+0x18/0xf0 [ 348.425089][ T7638] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 348.430774][ T7638] _raw_read_lock+0x5f/0x70 [ 348.435779][ T7638] ? sp_get+0x18/0xf0 [ 348.439740][ T7638] sp_get+0x18/0xf0 [ 348.443516][ T7638] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 348.449203][ T7638] sixpack_write_wakeup+0x20/0x390 [ 348.454294][ T7638] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 348.459992][ T7638] tty_wakeup+0xe5/0x120 [ 348.464203][ T7638] tty_port_default_wakeup+0x2a/0x40 [ 348.469458][ T7638] serial8250_tx_chars+0x68e/0x860 [ 348.474553][ T7638] __start_tx+0x3e9/0x4a0 [ 348.478866][ T7638] serial8250_start_tx+0x363/0x530 [ 348.483949][ T7638] __uart_start+0x292/0x4c0 [ 348.488421][ T7638] uart_write+0x218/0xb30 [ 348.492723][ T7638] sixpack_receive_buf+0x3d7/0x1c50 [ 348.497901][ T7638] ? ldsem_down_read_trylock+0x121/0x180 [ 348.503505][ T7638] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 348.509459][ T7638] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 348.515075][ T7638] tty_ldisc_receive_buf+0x153/0x190 [ 348.520334][ T7638] tty_port_default_receive_buf+0x70/0xb0 [ 348.526025][ T7638] flush_to_ldisc+0x264/0x780 [ 348.530677][ T7638] ? lock_acquire+0x2f/0xb0 [ 348.535157][ T7638] ? process_one_work+0x921/0x1ba0 [ 348.540251][ T7638] process_one_work+0x9c5/0x1ba0 [ 348.545160][ T7638] ? __pfx_batadv_nc_worker+0x10/0x10 [ 348.550503][ T7638] ? __pfx_process_one_work+0x10/0x10 [ 348.555849][ T7638] ? assign_work+0x1a0/0x250 [ 348.560407][ T7638] worker_thread+0x6c8/0xf00 [ 348.564980][ T7638] ? __pfx_worker_thread+0x10/0x10 [ 348.570059][ T7638] kthread+0x2c1/0x3a0 [ 348.574098][ T7638] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.579278][ T7638] ? __pfx_kthread+0x10/0x10 [ 348.583839][ T7638] ret_from_fork+0x45/0x80 [ 348.588238][ T7638] ? __pfx_kthread+0x10/0x10 [ 348.592797][ T7638] ret_from_fork_asm+0x1a/0x30 [ 348.597538][ T7638] [ 348.600682][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.723258][ T8909] xt_cgroup: xt_cgroup: no path or classid specified [ 349.571359][ T29] audit: type=1400 audit(1732075109.777:4873): avc: denied { create } for pid=8897 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 349.599006][ T29] audit: type=1400 audit(1732075109.807:4874): avc: denied { write } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.890439][ T29] audit: type=1400 audit(1732075109.807:4875): avc: denied { remove_name } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.913222][ T29] audit: type=1400 audit(1732075109.807:4876): avc: denied { rename } for pid=5186 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.935502][ T29] audit: type=1400 audit(1732075109.807:4877): avc: denied { add_name } for pid=5186 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.958045][ T29] audit: type=1400 audit(1732075109.807:4878): avc: denied { unlink } for pid=5186 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 349.980517][ T29] audit: type=1400 audit(1732075109.807:4879): avc: denied { create } for pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.786437][ T29] audit: type=1400 audit(1732075111.997:4880): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=34096 daddr=10.128.1.5 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1