last executing test programs: 17m1.477672699s ago: executing program 4 (id=1010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6erspan0\x00', 0x200}) r3 = userfaultfd(0x80001) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x3, &(0x7f00001c3000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 17m0.474476161s ago: executing program 4 (id=1014): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x350, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x304, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x21c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x350}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 16m54.556956202s ago: executing program 4 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_emit_ethernet(0x7c9, &(0x7f00000039c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x793, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x4, 0x6, "aaec6abdff6416cba74b557103b4927a9e49165dfec922450543fb23d9d61c30b64c09c4b3625b9b1e657a5e2a03f9c7b8b984abaa"}, {0x1f, 0x8, "1ea1632e7462658b10ee8c2f81a9240269a881b952d2c3655d113710cceaf6b52faec679403f0eff49b930f990a43b0fe6c47c9f47a1583521914500c77c"}, {0x18}, {0x1f, 0xe2, "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"}]}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000801010000000000010000e90008070600024088630000040004800900010073797a3000000000050003002f000000da0dd02f800fe392cebf3fc9230f4b926183f3512d6834350317cb864e157ae644ad405703178bac4bb23d3e505c1aa328b15d7a8017e520121cd673a14f84bc568804a7f9c349bf716aa807fb6ae7071f67eaabac61df95d2606ff601ba3a76452268fcbb6d19743c1a1e78268e4ef73dda0152dab5b40c60c5d9ab67badc6cb423dfb96466a14aea666eb77b0f7e553d7a5a43e783193cdf6db913bce6dc7a"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 16m52.621438547s ago: executing program 4 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000500)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)=ANY=[]) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000002b40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 16m50.616034917s ago: executing program 4 (id=1032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 16m46.162515156s ago: executing program 4 (id=1041): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x0, 0x148, 0x90, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010100, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_bridge\x00', {}, {}, 0x62, 0x1, 0x49}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010101, @remote, 0xff, 0x0, 'nr0\x00', 'lo\x00', {0xff}, {0xff}, 0x21, 0x3, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 16m29.31877554s ago: executing program 32 (id=1041): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000015c0)=[@in={0x2, 0x4e20, @empty}], 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) socket$kcm(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x0, 0x148, 0x90, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010100, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_bridge\x00', {}, {}, 0x62, 0x1, 0x49}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@rand_addr=0x64010101, @remote, 0xff, 0x0, 'nr0\x00', 'lo\x00', {0xff}, {0xff}, 0x21, 0x3, 0x4}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) close(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 13.971692388s ago: executing program 5 (id=3151): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 12.849274335s ago: executing program 0 (id=3155): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 12.351021308s ago: executing program 5 (id=3156): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xffffffffffffffb0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x33}, 0xe70bdd3d34fcba6) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44) r3 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x0, 0x0, &(0x7f0000000040)) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402000002800000121f", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) 9.920730462s ago: executing program 1 (id=3160): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4}) read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0xfffffffc, 0xfffffffe, 0x6, 0x10, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}) r3 = syz_open_pts(0xffffffffffffffff, 0x20800) dup3(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x44) 9.870308754s ago: executing program 0 (id=3161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) syz_open_dev$evdev(0x0, 0x0, 0x2002) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) fcntl$setownex(r2, 0xf, &(0x7f0000000080)) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400"/16], &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r7], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) fcntl$dupfd(r5, 0x0, r6) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x4, 0x0, {0xfffffffffffffffe, 0xd}}, 0x28) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, 0x0) 9.789093695s ago: executing program 3 (id=3163): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) sendmsg$nl_route(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000e8ffffff000000000000000004000000bb7f1a00c600feff0000000a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 9.71101406s ago: executing program 1 (id=3164): timer_create(0x0, 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000000c0)={0x2000001c}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) r6 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r6, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="70000000200001002cbd7000fddbdf250a8020440000000c12000000050016003a00000014000200fe80000000000000000000000000200008000a0000000000140001"], 0x70}}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(0xffffffffffffffff, 0xe9c04c821584d534, 0x80) 9.090385116s ago: executing program 5 (id=3165): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000012c0)=[{{}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000001c0)}, 0x40}], 0x2, 0x140, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x121) socket$nl_route(0x10, 0x3, 0x0) 8.779693442s ago: executing program 2 (id=3166): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.886131794s ago: executing program 3 (id=3167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r7, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) r8 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, r9, 0x60000}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r11, 0x90009427, &(0x7f0000000180)) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 7.822452299s ago: executing program 1 (id=3168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x4}}]}}]}, 0x3c}}, 0x4000010) memfd_create(&(0x7f0000000040)='/dev/sg#\x00', 0x0) syz_open_dev$vcsu(&(0x7f0000000180), 0x7, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) write$char_usb(r0, &(0x7f0000000240)="3e7bc7158c3fe38a674391ab06e98db0e0b2e2b948174be9a3ac689fbfc6c925d3ea96e0bf4006079c5b9ebeb3bd1ff27a13dcc3189d1150a7a29cb05ef04f2f11e4bac434440d22a50bbbaf9cbec72ee6e5bf7271d58457300b1691afe19e693e31ea57a4c7e712edc4980614620a2a311a12382fde5e1137d38c4be5569464996ac691ccf4bd5da6093b442a44107c97f0ba14eba25bde352895096413a80bc96429b9", 0xa4) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2c, 0xa, 0x0, "3ccfa4000000aafffffffff4dd4007400000e4000000adaf04008f097a8800", 0x31435750}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) 6.773445884s ago: executing program 2 (id=3169): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pipe(0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x800, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000044000180060001000200000008000500000000000c00070000000000d80d6c526406aee2362000000000c7b42538c80142490800090000000000090006006e6f6e650000"], 0x58}}, 0x0) write(r1, &(0x7f0000000000), 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@rc={0x1f, @none, 0x8c}, 0x80, 0x0}}], 0x1, 0x48094) 6.661346477s ago: executing program 3 (id=3170): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf41000000653600648d0a001600", 0x3c, 0x44014, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x18, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2b, 0xa, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810019000800450a00"], 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0xffff, 0x2, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @remote}, {0x0, 0x4, @mcast1}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'sane-20000\x00'}}, @CTA_NAT_SRC={0x4}]}, 0x8c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, r4, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 6.160787394s ago: executing program 1 (id=3171): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) bind$tipc(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}}, 0x0, 0x5e, 0x0, 0x1, 0x7}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r6, 0x25, 0x4, @void}, 0x10) 6.158424313s ago: executing program 0 (id=3172): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x18}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, 0x0, 0x0) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) r5 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x1, 0x80, 0xfffffffd, 0xfffffffd, "01e60000000000000034dbb39fe6083a", 0xff, 0x0, 0x0, 0x0, 0x1}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x7fffffff, 0x7, 0x4000000000000e52, 0x7, 0x5479, 0x1041, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x1, 0x40000000009, 0x0, 0x800040068], 0x2000, 0x40110}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f711ed8000800000000000000656d006544db5cdf3635d521f21170ea311c6da6f8c5231b2a45d56ab3da423ab993eb86047fb5a280a3380c3b31bbeeb1f63cb6620befcf2370059d2b7660f3dae143"], 0xc) 6.046714247s ago: executing program 3 (id=3173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r3, 0x401, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2e0, 0x1398, 0x1398, 0x2e0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x43}, [0x0, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff000000], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x7, 0x0, 0x1, [0x200, 0x101, 0x6, 0x8004, 0xcbdc, 0x3, 0x1, 0x9841, 0xffff, 0x7, 0x9, 0x3, 0x1, 0x101, 0x1], 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x7, 0x4, 0x82d, 'netbios-ns\x00', 'syz0\x00', {0x94}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r2) 4.73556615s ago: executing program 5 (id=3174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@bcast, @default, @netrom, @rose, @remote, @remote, @rose, @bcast]}, &(0x7f00000000c0)=0x48) sendmsg$nl_generic(r3, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000680)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={r5, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) 4.681785416s ago: executing program 2 (id=3175): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) bind$tipc(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}}, 0x0, 0x5e, 0x0, 0x1, 0x7}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r6, 0x25, 0x4, @void}, 0x10) 4.479726643s ago: executing program 0 (id=3176): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = memfd_create(&(0x7f00000002c0)=',\xea\xfa', 0x6) preadv(r6, 0x0, 0x0, 0x800002, 0x20006) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.950887457s ago: executing program 3 (id=3177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) fcntl$dupfd(r1, 0x0, r1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) getresuid(0x0, 0x0, 0x0) setuid(0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b06f8, [{{0x9, 0x2, 0xfffffc89}}]}}, 0x0) 2.794062444s ago: executing program 2 (id=3178): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) sendmsg$nl_route(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000e8ffffff000000000000000004000000bb7f1a00c600feff0000000a9500000020000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.62300928s ago: executing program 1 (id=3179): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000"/207, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x3, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x27}, 0xfffffffd}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10) socket$kcm(0x10, 0x2, 0x0) 2.264536398s ago: executing program 0 (id=3180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000040)={@loopback}, 0x14) socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@bcast, @default, @netrom, @rose, @remote, @remote, @rose, @bcast]}, &(0x7f00000000c0)=0x48) sendmsg$nl_generic(r2, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000000680)={0x14, 0x36, 0x51eb40323bf4c37b, 0x70bd2d, 0x25dfdbfd, {0x3}}, 0x14}}, 0x4000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={r4, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000100)=0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) 1.76086225s ago: executing program 5 (id=3181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000027c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r7}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) 1.121588307s ago: executing program 0 (id=3182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000f8ffffff9500004a0595e3a974355778254424c0f9c4f0cf23799be58addd6a2aff69673eddff39fd03bda960bd0"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000997aa910c6250290ba41010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x2b, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce17718", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r7 = dup(r6) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, r7}]) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$NFT_MSG_GETGEN(r4, 0x0, 0x4040080) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x57, &(0x7f0000001040)=[@op={0x18}], 0x18, 0x880}], 0x1, 0x80001) read$alg(0xffffffffffffffff, &(0x7f0000001080)=""/4130, 0x1022) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x7563) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f00000003c0)=0x100) 1.014441209s ago: executing program 2 (id=3183): socket$caif_seqpacket(0x25, 0x5, 0x1) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0430f5c7c90034d9493ad3c6a2247a769bcc8203a462b70ef8f6102c57f4c6078eb7680df7ef6363d49068bdf124d44d66ea113597ab8730ea7a4c0f9b1346ea2556d7b8a7d238bfca953d17bf15fb2e0600000000000000cb9b002adb1213ceaebce539fd9a53263db49e0b47a8be0b10d6dae171728dcadef3e0c5"], 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xa880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mknod$loop(0x0, 0xfff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaba0180c20000000806000108400604"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 782.942162ms ago: executing program 1 (id=3184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000000)) ioctl$IOMMU_TEST_OP_ACCESS_RW(r8, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) 130.039655ms ago: executing program 5 (id=3185): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000"/74], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @broadcast}, 0x1, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)="d60eb19b2ae29157161c220f5c189bad1be346e6f6a91cc1415ad61e431135c67289f436eedef1f58db59871d87051585eb1533cb9801b54bdf7639cc3a39b0ded5f47f93e375a2c", 0x48}, {0x0}], 0x2, &(0x7f00000006c0)=[{0x90, 0x1, 0x8, "124c938f25f200bd5bf53b00d7a78c06eb884752023d264f21febe6c6c07913b9a05d0d48c5e364ace837b49f8fbd805d1abf05ce99e4b2a962389d7ca0cdd3cff3522531826d86311b59de6e43d6bf6fd9d7aa9e024700cec210ef7bba7ec1bb182f37092ab36e1cbf647dc77693ad759fb93b74a12123c183d23"}], 0x90}}, {{0x0, 0x0, &(0x7f0000000bc0)}}], 0x2, 0x400c013) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd700000", @ANYRES8], 0x20}}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 127.256617ms ago: executing program 3 (id=3186): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0x9be9, 0x800, 0x0, 0x25a}, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = userfaultfd(0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@multicast1, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000a3e000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x1, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) 0s ago: executing program 2 (id=3187): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(0x0, &(0x7f0000000540)=""/212, 0xd4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001", @ANYRES8=r4], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x20008040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 0003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1277.593861][ T30] audit: type=1326 audit(2000000261.855:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1277.668813][ T30] audit: type=1326 audit(2000000261.855:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1277.729249][ T30] audit: type=1326 audit(2000000261.855:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1277.866358][T23225] mkiss: ax0: crc mode is auto. [ 1278.032758][ T30] audit: type=1326 audit(2000000261.855:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23217 comm="syz.5.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1279.815806][T23250] mkiss: ax0: crc mode is auto. [ 1282.265451][T23287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1283.322796][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1283.322814][ T30] audit: type=1326 audit(2000000268.300:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1283.530358][ T30] audit: type=1326 audit(2000000268.300:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1283.914998][ T30] audit: type=1326 audit(2000000268.347:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1284.043342][ T30] audit: type=1326 audit(2000000268.347:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1284.107210][ T30] audit: type=1326 audit(2000000268.357:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1284.380044][T23306] mkiss: ax0: crc mode is auto. [ 1284.412818][ T30] audit: type=1326 audit(2000000268.357:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1284.516521][ T30] audit: type=1326 audit(2000000268.357:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1284.768538][ T30] audit: type=1326 audit(2000000268.357:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1285.101687][ T30] audit: type=1326 audit(2000000268.357:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1285.212571][ T30] audit: type=1326 audit(2000000268.357:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23292 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1286.661301][T23339] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1287.080405][T23343] mkiss: ax0: crc mode is auto. [ 1290.735286][T23384] mkiss: ax0: crc mode is auto. [ 1291.771175][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1291.771210][ T30] audit: type=1400 audit(2000000276.205:2637): avc: denied { getopt } for pid=23392 comm="syz.0.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1293.151653][ T30] audit: type=1400 audit(2000000276.625:2638): avc: denied { override_creds } for pid=23395 comm="syz.2.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1293.519797][ T30] audit: type=1400 audit(2000000277.018:2639): avc: denied { wake_alarm } for pid=23395 comm="syz.2.2560" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1293.975232][ T30] audit: type=1400 audit(2000000278.262:2640): avc: denied { ioctl } for pid=23413 comm="syz.5.2566" path="socket:[61918]" dev="sockfs" ino=61918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1294.767595][T23418] delete_channel: no stack [ 1294.818739][ T30] audit: type=1400 audit(2000000279.020:2641): avc: denied { setopt } for pid=23413 comm="syz.5.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1294.931566][T23422] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2567'. [ 1295.178802][T23429] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2567'. [ 1295.464049][T23424] lo speed is unknown, defaulting to 1000 [ 1295.476794][T23424] lo speed is unknown, defaulting to 1000 [ 1296.722173][T23446] mkiss: ax0: crc mode is auto. [ 1298.294691][T23467] bridge0: entered promiscuous mode [ 1298.299974][T23467] bridge0: entered allmulticast mode [ 1299.088907][ T30] audit: type=1400 audit(2000000283.014:2642): avc: denied { listen } for pid=23468 comm="syz.2.2580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1300.628592][T23487] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1300.983050][T23490] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2583'. [ 1301.652251][T23501] delete_channel: no stack [ 1301.736358][T15954] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1302.112294][T15954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.131998][T15954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.141757][T15954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1302.290534][T15954] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1302.411549][T15954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.449236][T15954] usb 1-1: config 0 descriptor?? [ 1303.085778][T15954] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1303.321675][T23518] Bluetooth: MGMT ver 1.23 [ 1304.315275][ T30] audit: type=1326 audit(2000000287.944:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23528 comm="syz.2.2594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x0 [ 1304.437747][T23536] bridge6: entered promiscuous mode [ 1304.443052][T23536] bridge6: entered allmulticast mode [ 1304.980945][T15954] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 1305.499374][T23519] Bluetooth: hci2: command 0x0406 tx timeout [ 1305.508344][ T5818] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1305.931964][ T1206] usb 1-1: USB disconnect, device number 17 [ 1307.059589][ T30] audit: type=1326 audit(2000000290.338:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23539 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1307.133627][ T30] audit: type=1326 audit(2000000290.338:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23539 comm="syz.0.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1307.157566][ T30] audit: type=1326 audit(2000000290.338:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.181663][ T30] audit: type=1326 audit(2000000290.338:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.219679][ T30] audit: type=1326 audit(2000000290.348:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.252863][T23564] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1307.284800][ T30] audit: type=1326 audit(2000000290.348:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.320860][T23565] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1307.404092][T23566] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2600'. [ 1307.492855][ T30] audit: type=1326 audit(2000000290.348:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.608027][ T30] audit: type=1326 audit(2000000290.348:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.639024][ T30] audit: type=1326 audit(2000000290.348:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1307.749662][ T30] audit: type=1326 audit(2000000290.348:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1308.583178][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.050723][T23594] delete_channel: no stack [ 1312.839568][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1312.839601][ T30] audit: type=1326 audit(2000000295.876:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1313.405222][T23626] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1313.417232][ T30] audit: type=1326 audit(2000000295.876:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1313.440870][ T30] audit: type=1326 audit(2000000295.885:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1313.568644][ T30] audit: type=1326 audit(2000000295.885:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1313.701130][ T30] audit: type=1326 audit(2000000295.885:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1313.872911][ T30] audit: type=1326 audit(2000000295.885:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb7298df10 code=0x7ffc0000 [ 1314.107290][ T30] audit: type=1326 audit(2000000295.885:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1314.321965][ T30] audit: type=1326 audit(2000000295.885:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23618 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1314.557018][T23640] mkiss: ax0: crc mode is auto. [ 1314.628141][ T30] audit: type=1326 audit(2000000297.373:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23629 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1314.754490][ T30] audit: type=1326 audit(2000000297.373:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23629 comm="syz.5.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1316.231353][T23651] mkiss: ax0: crc mode is auto. [ 1316.655907][T23660] mkiss: ax0: crc mode is auto. [ 1318.190790][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1318.190821][ T30] audit: type=1326 audit(2000000300.927:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1318.466252][ T30] audit: type=1326 audit(2000000300.927:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1318.509836][ T30] audit: type=1326 audit(2000000300.927:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1318.616757][ T30] audit: type=1326 audit(2000000300.955:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.103101][ T30] audit: type=1326 audit(2000000300.955:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.126887][ T30] audit: type=1326 audit(2000000300.955:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.150550][ T30] audit: type=1326 audit(2000000300.955:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.174205][ T30] audit: type=1326 audit(2000000300.955:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.197879][ T30] audit: type=1326 audit(2000000300.955:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.221492][ T30] audit: type=1326 audit(2000000300.955:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23657 comm="syz.0.2627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1319.442748][T23685] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1319.576046][T23692] delete_channel: no stack [ 1320.569573][T23698] mkiss: ax0: crc mode is auto. [ 1320.952070][T23702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1321.060344][T23705] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2635'. [ 1321.295406][T23711] tipc: Enabled bearer , priority 10 [ 1321.570913][T23716] mkiss: ax0: crc mode is auto. [ 1321.623896][T23717] tipc: Enabled bearer , priority 0 [ 1322.934070][T23730] lo speed is unknown, defaulting to 1000 [ 1322.975404][T23730] lo speed is unknown, defaulting to 1000 [ 1323.020688][T23732] mkiss: ax0: crc mode is auto. [ 1325.415129][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1325.415165][ T30] audit: type=1400 audit(2000000307.671:2725): avc: denied { getopt } for pid=23745 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1328.586052][T23780] mkiss: ax0: crc mode is auto. [ 1329.484134][ T30] audit: type=1400 audit(2000000311.488:2726): avc: denied { ioctl } for pid=23777 comm="syz.3.2654" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1330.641142][T20290] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1330.957407][T23806] bridge7: entered promiscuous mode [ 1330.963297][T23806] bridge7: entered allmulticast mode [ 1331.368944][T20290] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1331.383793][T20290] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1331.410639][T20290] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1331.429495][ T30] audit: type=1326 audit(2000000313.302:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23801 comm="syz.3.2657" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x0 [ 1331.655778][T20290] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1331.666616][T20290] usb 6-1: Product: syz [ 1331.681690][T20290] usb 6-1: Manufacturer: syz [ 1331.686371][T20290] usb 6-1: SerialNumber: syz [ 1331.705687][T20290] usb 6-1: config 0 descriptor?? [ 1331.752390][T20290] usb 6-1: selecting invalid altsetting 0 [ 1331.770296][T23812] mkiss: ax0: crc mode is auto. [ 1333.961978][ T1206] usb 6-1: USB disconnect, device number 6 [ 1335.742775][T23852] mkiss: ax0: crc mode is auto. [ 1336.577275][T23863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.738752][T23868] mkiss: ax0: crc mode is auto. [ 1337.389432][ T1206] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1337.715743][ T30] audit: type=1326 audit(2000000319.158:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23875 comm="syz.2.2677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x0 [ 1338.319616][ T1206] usb 1-1: Using ep0 maxpacket: 8 [ 1338.326117][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1338.334464][ T1206] usb 1-1: config 0 has no interface number 0 [ 1338.340635][ T1206] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1338.351108][ T1206] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1338.371171][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.393996][ T1206] usb 1-1: config 0 descriptor?? [ 1338.669453][ T1206] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 1339.596273][T23900] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2681'. [ 1339.696743][T23902] delete_channel: no stack [ 1340.557541][T23900] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2681'. [ 1340.588046][T20290] usb 1-1: USB disconnect, device number 18 [ 1340.719783][T23911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1340.728926][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1341.081155][T23908] mkiss: ax0: crc mode is auto. [ 1341.733602][T23910] tipc: Enabled bearer , priority 10 [ 1341.747802][T23910] tipc: Enabled bearer , priority 0 [ 1341.965485][ T30] audit: type=1400 audit(2000000323.152:2729): avc: denied { connect } for pid=23914 comm="syz.0.2689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1342.638884][ T30] audit: type=1400 audit(2000000323.424:2730): avc: denied { ioctl } for pid=23920 comm="syz.1.2690" path="socket:[63295]" dev="sockfs" ino=63295 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1342.995888][T20290] tipc: Node number set to 3278887169 [ 1343.205281][T23934] mkiss: ax0: crc mode is auto. [ 1343.367317][T23935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1345.014678][ T30] audit: type=1326 audit(2000000325.360:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1345.154282][T23947] bridge4: entered promiscuous mode [ 1345.159652][T23947] bridge4: entered allmulticast mode [ 1345.626488][ T30] audit: type=1326 audit(2000000325.360:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1345.653238][ T30] audit: type=1326 audit(2000000325.360:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1345.677260][ T30] audit: type=1326 audit(2000000325.369:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.203181][ T30] audit: type=1326 audit(2000000325.369:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.504672][ T30] audit: type=1326 audit(2000000325.369:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.858328][ T30] audit: type=1326 audit(2000000325.369:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.884668][ T30] audit: type=1326 audit(2000000325.369:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.942858][ T30] audit: type=1326 audit(2000000325.369:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1346.978170][ T30] audit: type=1326 audit(2000000325.369:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23936 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1347.546901][T23966] mkiss: ax0: crc mode is auto. [ 1347.685301][T23972] tipc: Enabled bearer , priority 10 [ 1347.693749][T23972] tipc: Enabled bearer , priority 0 [ 1348.911193][T20290] tipc: Node number set to 413705783 [ 1349.184499][T23989] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1349.367196][T23989] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1350.708794][T24009] ALSA: mixer_oss: invalid OSS volume '' [ 1350.731567][T24009] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1351.447932][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1351.449026][ T30] audit: type=1326 audit(2000000332.020:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.564789][ T30] audit: type=1326 audit(2000000332.020:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.609577][ T30] audit: type=1326 audit(2000000332.020:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.633466][ T30] audit: type=1326 audit(2000000332.020:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.657335][ T30] audit: type=1326 audit(2000000332.029:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.680726][ C0] vkms_vblank_simulate: vblank timer overrun [ 1351.687224][ T30] audit: type=1326 audit(2000000332.029:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.797972][ T30] audit: type=1326 audit(2000000332.029:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1351.821423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1352.037746][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2712'. [ 1352.549477][ T30] audit: type=1326 audit(2000000332.039:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1352.602173][ T30] audit: type=1326 audit(2000000332.039:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1352.634350][ T30] audit: type=1326 audit(2000000332.039:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23999 comm="syz.3.2707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1353.880007][T24040] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2717'. [ 1353.931320][T24040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1357.262748][ T5862] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1358.333525][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1358.333571][ T30] audit: type=1326 audit(2000000337.941:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1358.452587][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.872189][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.974491][ T30] audit: type=1326 audit(2000000337.950:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1358.980170][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1359.169178][T24089] mkiss: ax0: crc mode is auto. [ 1359.191565][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1359.201720][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.222201][ T5862] usb 3-1: config 0 descriptor?? [ 1359.229608][ T30] audit: type=1326 audit(2000000338.063:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.255569][ T30] audit: type=1326 audit(2000000338.063:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.285118][ T30] audit: type=1326 audit(2000000338.063:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.309144][ T30] audit: type=1326 audit(2000000338.175:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.310585][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 1359.484458][ T30] audit: type=1326 audit(2000000338.175:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.672713][ T30] audit: type=1326 audit(2000000338.278:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1359.746279][ T30] audit: type=1326 audit(2000000338.278:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1360.053848][ T30] audit: type=1326 audit(2000000338.278:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24081 comm="syz.3.2731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ad98f6c9 code=0x7ffc0000 [ 1360.979206][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 1360.988050][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1361.297096][ T5862] usb 3-1: USB disconnect, device number 17 [ 1362.920247][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 1362.970379][T24136] lo speed is unknown, defaulting to 1000 [ 1362.987780][T24136] lo speed is unknown, defaulting to 1000 [ 1363.596957][T24134] mkiss: ax0: crc mode is auto. [ 1367.521309][T24182] mkiss: ax0: crc mode is auto. [ 1368.149607][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1368.149622][ T30] audit: type=1400 audit(2000000347.660:2833): avc: denied { create } for pid=24187 comm="syz.1.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1368.285335][ T30] audit: type=1400 audit(2000000347.753:2834): avc: denied { ioctl } for pid=24187 comm="syz.1.2754" path="socket:[64393]" dev="sockfs" ino=64393 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1369.472178][ T30] audit: type=1400 audit(2000000347.763:2835): avc: denied { connect } for pid=24187 comm="syz.1.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1369.505250][ T30] audit: type=1400 audit(2000000347.809:2836): avc: denied { write } for pid=24187 comm="syz.1.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1371.044288][T24209] mkiss: ax0: crc mode is auto. [ 1371.513627][ T30] audit: type=1326 audit(2000000350.765:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24212 comm="syz.0.2760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x0 [ 1372.498622][T24227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1372.779445][T24232] lo speed is unknown, defaulting to 1000 [ 1372.791891][T24232] lo speed is unknown, defaulting to 1000 [ 1374.470886][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.034456][ T30] audit: type=1326 audit(2000000355.021:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1376.062234][ T30] audit: type=1326 audit(2000000355.021:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1376.088106][ T30] audit: type=1326 audit(2000000355.021:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1376.899471][ T30] audit: type=1326 audit(2000000355.021:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1377.297781][ T30] audit: type=1326 audit(2000000355.021:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1377.329586][ T30] audit: type=1326 audit(2000000355.021:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1377.639525][ T30] audit: type=1326 audit(2000000355.021:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1377.733923][T24281] mkiss: ax0: crc mode is auto. [ 1377.844145][ T30] audit: type=1326 audit(2000000355.021:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1377.867638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1378.552211][ T30] audit: type=1326 audit(2000000355.021:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1378.582890][ T30] audit: type=1326 audit(2000000355.021:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24264 comm="syz.1.2779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1378.831164][T24286] lo speed is unknown, defaulting to 1000 [ 1379.416679][T24286] lo speed is unknown, defaulting to 1000 [ 1379.638677][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1380.453251][ T24] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1380.587248][ T24] usb 1-1: config 8 has no interface number 0 [ 1380.627172][ T24] usb 1-1: config 8 interface 177 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 1381.490235][ T24] usb 1-1: config 8 interface 177 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1381.501261][ T24] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1381.508351][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1381.518168][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.567284][T24298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1383.117282][ T24] usb 1-1: string descriptor 0 read error: -71 [ 1383.125336][ T24] ir_toy 1-1:8.177: required endpoints not found [ 1384.174180][ T24] usb 1-1: USB disconnect, device number 19 [ 1384.327752][T24332] tipc: Resetting bearer [ 1385.230239][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1385.230256][ T30] audit: type=1400 audit(2000000363.618:2905): avc: denied { map } for pid=24322 comm="syz.1.2784" path="socket:[65661]" dev="sockfs" ino=65661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1385.456325][T24348] No control pipe specified [ 1386.223968][T24356] mkiss: ax0: crc mode is auto. [ 1389.378315][T24378] new mount options do not match the existing superblock, will be ignored [ 1390.947850][ T30] audit: type=1400 audit(2000000368.229:2906): avc: denied { bind } for pid=24372 comm="syz.2.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1390.967457][ T30] audit: type=1400 audit(2000000368.229:2907): avc: denied { write } for pid=24372 comm="syz.2.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1390.987485][ T30] audit: type=1400 audit(2000000368.239:2908): avc: denied { map } for pid=24372 comm="syz.2.2795" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1391.011180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1391.386252][ T30] audit: type=1400 audit(2000000368.239:2909): avc: denied { execute } for pid=24372 comm="syz.2.2795" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1391.630600][ T30] audit: type=1400 audit(2000000369.614:2910): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1391.877253][T24375] mkiss: ax0: crc mode is auto. [ 1392.378399][ T30] audit: type=1326 audit(2000000369.960:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24389 comm="syz.0.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1393.215245][T24401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1393.225150][T24401] unsupported nlmsg_type 40 [ 1393.334077][ T30] audit: type=1326 audit(2000000369.960:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24389 comm="syz.0.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1393.358297][ T30] audit: type=1326 audit(2000000369.960:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24389 comm="syz.0.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1393.392779][ T30] audit: type=1326 audit(2000000369.960:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24389 comm="syz.0.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1393.497030][T24402] xt_l2tp: v2 doesn't support IP mode [ 1393.500019][ T30] audit: type=1326 audit(2000000369.960:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24389 comm="syz.0.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1394.533509][T24413] mkiss: ax0: crc mode is auto. [ 1395.344201][T24428] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2807'. [ 1397.395862][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1397.395879][ T30] audit: type=1400 audit(2000000374.721:2937): avc: denied { write } for pid=24436 comm="syz.1.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1398.524982][T24454] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2812'. [ 1399.129430][ T30] audit: type=1400 audit(2000000376.638:2938): avc: denied { sys_module } for pid=24450 comm="syz.2.2813" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1401.497967][ T30] audit: type=1400 audit(2000000378.837:2939): avc: denied { create } for pid=24479 comm="syz.1.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1401.972157][ T30] audit: type=1400 audit(2000000379.276:2940): avc: denied { mount } for pid=24478 comm="syz.0.2819" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1402.006346][ T30] audit: type=1400 audit(2000000379.323:2941): avc: denied { setopt } for pid=24484 comm="syz.5.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1402.039964][ T30] audit: type=1400 audit(2000000379.351:2942): avc: denied { ioctl } for pid=24484 comm="syz.5.2822" path="socket:[66777]" dev="sockfs" ino=66777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1402.069552][ T30] audit: type=1400 audit(2000000379.351:2943): avc: denied { ioctl } for pid=24484 comm="syz.5.2822" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1402.292203][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1402.655244][ T30] audit: type=1400 audit(2000000379.912:2944): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1402.687826][ T30] audit: type=1326 audit(2000000379.912:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24479 comm="syz.1.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7fc00000 [ 1402.711348][ C0] vkms_vblank_simulate: vblank timer overrun [ 1403.250545][T24505] lo speed is unknown, defaulting to 1000 [ 1403.265525][T24505] lo speed is unknown, defaulting to 1000 [ 1403.448905][ T30] audit: type=1400 audit(2000000380.679:2946): avc: denied { append } for pid=24496 comm="syz.2.2825" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1403.504548][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.515665][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.525595][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1403.538944][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1403.548139][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.637099][T24504] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1403.685773][ T24] usb 6-1: config 0 descriptor?? [ 1404.731654][ T24] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x2 [ 1404.739074][ T24] plantronics 0003:047F:FFFF.000C: unexpected long global item [ 1405.264519][T24525] ceph: No mds server is up or the cluster is laggy [ 1405.285864][ T24] plantronics 0003:047F:FFFF.000C: parse failed [ 1405.297134][ T5862] libceph: connect (1)[c::]:6789 error -22 [ 1405.365460][ T24] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 1405.365600][ T5862] libceph: mon0 (1)[c::]:6789 connect error [ 1405.865488][ T24] usb 6-1: USB disconnect, device number 7 [ 1406.830885][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1406.844428][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1406.863756][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1406.875342][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1406.891496][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1406.902880][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1406.917396][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1406.928081][T24545] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1406.938002][T24545] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1407.369140][T24552] ceph: No mds server is up or the cluster is laggy [ 1407.390489][ T24] libceph: connect (1)[c::]:6789 error -101 [ 1407.397937][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1407.785956][T24558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1407.798964][T24558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1407.833662][T24558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1407.865026][T24558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1408.548977][ T30] audit: type=1400 audit(2000000385.179:2947): avc: denied { connect } for pid=24559 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1408.674423][ T30] audit: type=1400 audit(2000000385.366:2948): avc: denied { create } for pid=24559 comm="syz.0.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1408.724574][ T30] audit: type=1400 audit(2000000385.394:2949): avc: denied { ioctl } for pid=24559 comm="syz.0.2838" path="socket:[66909]" dev="sockfs" ino=66909 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1410.105817][T24584] input: syz1 as /devices/virtual/input/input20 [ 1410.155796][ T30] audit: type=1400 audit(2000000386.890:2950): avc: denied { ioctl } for pid=24567 comm="syz.2.2840" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1410.212382][T24575] SELinux: ebitmap start bit (7340096) is beyond the end of the bitmap (1472) [ 1410.258339][T24575] SELinux: failed to load policy [ 1410.571634][ T30] audit: type=1326 audit(2000000387.237:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24579 comm="syz.0.2843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x0 [ 1410.628583][ T30] audit: type=1400 audit(2000000387.330:2952): avc: denied { read } for pid=5169 comm="acpid" name="event4" dev="devtmpfs" ino=3416 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1411.221772][ T30] audit: type=1400 audit(2000000387.330:2953): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3416 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1411.290815][ T30] audit: type=1400 audit(2000000387.330:2954): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3416 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1411.584817][ T30] audit: type=1400 audit(2000000387.414:2955): avc: denied { setopt } for pid=24587 comm="syz.1.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1411.698205][ T30] audit: type=1400 audit(2000000388.387:2956): avc: denied { bind } for pid=24602 comm="syz.5.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1412.469576][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1412.694038][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1412.700739][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1412.721671][ T24] usb 6-1: config 8 has an invalid interface number: 24 but max is 1 [ 1412.730141][ T24] usb 6-1: config 8 has an invalid interface number: 242 but max is 1 [ 1412.747699][ T24] usb 6-1: config 8 has no interface number 0 [ 1412.753792][ T24] usb 6-1: config 8 has no interface number 1 [ 1412.768879][ T24] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 1412.790324][ T24] usb 6-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 1412.821738][ T24] usb 6-1: config 8 interface 24 has no altsetting 0 [ 1412.845199][ T24] usb 6-1: config 8 interface 242 has no altsetting 0 [ 1413.041661][ T24] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1413.538606][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.546727][ T24] usb 6-1: Product: syz [ 1413.552891][ T24] usb 6-1: Manufacturer: syz [ 1413.557727][ T24] usb 6-1: SerialNumber: syz [ 1413.572689][T24605] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1414.164211][ T24] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 1414.284106][ T24] vmk80xx 6-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 1414.301311][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 1414.310432][ T1206] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1414.318114][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2851'. [ 1414.398033][ T24] usb 6-1: USB disconnect, device number 8 [ 1414.418437][ T30] audit: type=1400 audit(2000000390.941:2957): avc: denied { setopt } for pid=24623 comm="syz.3.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1414.624304][ T1206] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1414.646126][ T1206] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1414.686848][ T1206] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1414.804138][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.824789][ T1206] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1415.190599][ T1206] usb 3-1: invalid MIDI out EP 0 [ 1416.370476][T24643] ALSA: mixer_oss: invalid OSS volume '' [ 1416.394393][T24643] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1416.597088][ T1206] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1416.860956][ T1206] usb 3-1: USB disconnect, device number 18 [ 1417.033036][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1417.354469][T24653] delete_channel: no stack [ 1417.526816][ T30] audit: type=1400 audit(2000000393.850:2958): avc: denied { read } for pid=24646 comm="syz.2.2857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1420.158382][ T30] audit: type=1400 audit(2000000395.403:2959): avc: denied { execute } for pid=24659 comm="syz.1.2870" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=67056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1420.599482][T24682] 9pnet_fd: p9_fd_create_unix (24682): problem connecting socket: ./cgroup: -111 [ 1421.311699][ T30] audit: type=1400 audit(2000000397.367:2960): avc: denied { map } for pid=24670 comm="syz.2.2861" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1421.380096][ T30] audit: type=1400 audit(2000000397.367:2961): avc: denied { execute } for pid=24670 comm="syz.2.2861" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1422.670216][T24697] mkiss: ax0: crc mode is auto. [ 1423.074687][ T30] audit: type=1326 audit(2000000398.648:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24694 comm="syz.2.2867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x0 [ 1423.097647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.470229][ T30] audit: type=1400 audit(2000000398.864:2963): avc: denied { setopt } for pid=24701 comm="syz.5.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1424.644287][ T30] audit: type=1326 audit(2000000400.126:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.692242][ T30] audit: type=1326 audit(2000000400.126:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.715717][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.722879][ T30] audit: type=1326 audit(2000000400.126:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.747792][ T30] audit: type=1326 audit(2000000400.126:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.771221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.778877][ T30] audit: type=1326 audit(2000000400.126:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.804141][ T30] audit: type=1326 audit(2000000400.136:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.845453][ T30] audit: type=1326 audit(2000000400.136:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.906776][ T30] audit: type=1326 audit(2000000400.136:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.5.2871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1424.930231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.289909][T24721] ALSA: mixer_oss: invalid OSS volume '' [ 1425.335818][T24721] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1426.418521][T24733] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2875'. [ 1427.450405][T24742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.874915][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1431.874932][ T30] audit: type=1326 audit(2000000407.245:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24778 comm="syz.2.2887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x0 [ 1432.771011][ T30] audit: type=1400 audit(2000000408.059:3007): avc: denied { write } for pid=24786 comm="syz.0.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1434.453510][ T30] audit: type=1400 audit(2000000409.677:3008): avc: denied { getopt } for pid=24800 comm="syz.0.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1434.483932][ T1206] IPVS: starting estimator thread 0... [ 1434.727522][T24818] IPVS: using max 46 ests per chain, 110400 per kthread [ 1435.870041][ T30] audit: type=1400 audit(2000000410.275:3009): avc: denied { bind } for pid=24823 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1436.695792][T24840] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1437.219129][T20007] Bluetooth: hci3: Frame reassembly failed (-84) [ 1439.011804][ T5818] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1439.946384][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1441.336386][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1441.946719][T24871] IPVS: Error connecting to the multicast addr [ 1441.979450][ T24] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1442.002610][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1442.011924][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1442.027082][ T24] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1442.045560][ T24] usb 4-1: Product: syz [ 1442.053178][ T24] usb 4-1: Manufacturer: syz [ 1442.123500][ T24] usb 4-1: SerialNumber: syz [ 1442.131879][ T30] audit: type=1400 audit(2000000416.861:3010): avc: denied { append } for pid=24875 comm="syz.2.2909" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1442.500239][ T24] usb 4-1: config 0 descriptor?? [ 1442.533388][ T24] usb 4-1: selecting invalid altsetting 0 [ 1442.848009][T20290] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1443.240982][ T30] audit: type=1400 audit(2000000417.899:3011): avc: denied { read write } for pid=24886 comm="syz.2.2913" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1443.301710][ T30] audit: type=1400 audit(2000000417.899:3012): avc: denied { open } for pid=24886 comm="syz.2.2913" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1443.383478][ T30] audit: type=1400 audit(2000000418.011:3013): avc: denied { watch } for pid=24886 comm="syz.2.2913" path="pipe:[67957]" dev="pipefs" ino=67957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1443.444378][T20290] usb 6-1: Using ep0 maxpacket: 8 [ 1443.453259][ T30] audit: type=1400 audit(2000000418.021:3014): avc: denied { setattr } for pid=24886 comm="syz.2.2913" name="" dev="pipefs" ino=67957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1443.483685][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2913'. [ 1443.533992][T20290] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1443.542637][T20290] usb 6-1: config 179 has no interface number 0 [ 1443.557828][T20290] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1443.641195][ T1206] usb 4-1: USB disconnect, device number 25 [ 1443.648938][T20290] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1443.660799][T20290] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1443.697600][T20290] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1443.741239][T20290] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1443.765444][T24888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1443.801460][T24888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1443.852260][T24896] netlink: 'syz.3.2905': attribute type 10 has an invalid length. [ 1443.906014][T20290] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1443.931588][T20290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.142926][T24899] mkiss: ax0: crc mode is auto. [ 1444.151569][T24879] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1444.511315][T20290] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21 [ 1445.299027][T24906] netlink: 'syz.5.2910': attribute type 10 has an invalid length. [ 1445.307075][T24906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2910'. [ 1445.524835][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 1445.560574][T24906] team0: entered promiscuous mode [ 1445.647291][T24906] team0: entered allmulticast mode [ 1445.662840][T24906] team_slave_0: entered allmulticast mode [ 1445.676060][T24906] team_slave_1: entered allmulticast mode [ 1445.788050][T24906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1445.891054][T20290] usb 6-1: USB disconnect, device number 9 [ 1445.891114][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1445.905228][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1446.055690][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1446.457867][T24915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1447.147869][ T30] audit: type=1400 audit(2000000421.547:3015): avc: denied { write } for pid=24912 comm="syz.3.2918" path="socket:[67563]" dev="sockfs" ino=67563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1448.420406][T24930] mkiss: ax0: crc mode is auto. [ 1448.498448][ T30] audit: type=1400 audit(2000000422.791:3016): avc: denied { connect } for pid=24919 comm="syz.2.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1449.503420][ T30] audit: type=1400 audit(2000000422.847:3017): avc: denied { read } for pid=24939 comm="syz.1.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1450.819768][ T30] audit: type=1400 audit(2000000424.989:3018): avc: denied { ioctl } for pid=24960 comm="syz.3.2928" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1450.844210][T24965] random: crng reseeded on system resumption [ 1451.545476][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1451.556091][T24972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'. [ 1451.820133][T24973] mkiss: ax0: crc mode is auto. [ 1452.645102][ T30] audit: type=1400 audit(2000000426.673:3019): avc: denied { name_connect } for pid=24979 comm="syz.1.2932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1452.959207][T24984] ALSA: mixer_oss: invalid OSS volume '' [ 1453.286827][T24990] lo speed is unknown, defaulting to 1000 [ 1453.317550][T24990] lo speed is unknown, defaulting to 1000 [ 1453.831472][ T1206] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1454.091797][ T1206] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1454.475349][ T1206] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1454.506120][ T1206] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1454.517577][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.532284][ T1206] usb 1-1: Product: ⃄䔅ᓕ赉룪äžíˆç¦‚퇥㫧縖è‡ê®”팳籧㔠䓰ï±â³– [ 1454.547134][ T1206] usb 1-1: Manufacturer: Ћ [ 1454.570477][ T1206] usb 1-1: SerialNumber: Ñ„ [ 1454.697414][ T30] audit: type=1400 audit(2000000428.609:3020): avc: denied { mount } for pid=24999 comm="syz.2.2937" name="/" dev="rpc_pipefs" ino=68807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1454.867433][ T30] audit: type=1400 audit(2000000428.759:3021): avc: denied { getopt } for pid=24999 comm="syz.2.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1454.926565][ T1206] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1454.933529][ T1206] cdc_ncm 1-1:1.0: bind() failure [ 1454.947418][ T1206] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1454.955178][ T1206] cdc_ncm 1-1:1.1: bind() failure [ 1456.544207][ T30] audit: type=1326 audit(2000000429.620:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1457.234865][ T30] audit: type=1326 audit(2000000429.620:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1457.275734][ T30] audit: type=1326 audit(2000000429.620:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1457.499536][ T30] audit: type=1326 audit(2000000429.620:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1457.669904][ T30] audit: type=1326 audit(2000000429.620:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1457.721187][T24989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.725660][ T30] audit: type=1326 audit(2000000429.620:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1458.175258][ T30] audit: type=1326 audit(2000000429.629:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1458.447255][T25000] usb 1-1: USB disconnect, device number 20 [ 1459.401331][ T30] audit: type=1326 audit(2000000429.629:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25013 comm="syz.2.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1460.842594][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1460.842611][ T30] audit: type=1400 audit(2000000434.306:3044): avc: denied { setopt } for pid=25051 comm="syz.1.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1460.871819][T25046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.887401][ T30] audit: type=1400 audit(2000000434.306:3045): avc: denied { create } for pid=25051 comm="syz.1.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1461.100850][T25046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1461.395857][ T30] audit: type=1400 audit(2000000434.306:3046): avc: denied { write } for pid=25051 comm="syz.1.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1461.416463][ T30] audit: type=1400 audit(2000000434.446:3047): avc: denied { read open } for pid=25061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1461.442316][ T30] audit: type=1400 audit(2000000434.465:3048): avc: denied { getattr } for pid=25061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1461.556748][T25071] mkiss: ax0: crc mode is auto. [ 1462.162208][T25088] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2950'. [ 1463.017411][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 1463.055024][ T30] audit: type=1400 audit(1382.748:3049): avc: denied { add_name } for pid=25059 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1463.327730][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1463.347911][ T30] audit: type=1400 audit(1382.748:3050): avc: denied { create } for pid=25059 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1463.378701][ T30] audit: type=1400 audit(1382.748:3051): avc: denied { write } for pid=25059 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=12732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1463.405099][ T30] audit: type=1400 audit(1382.748:3052): avc: denied { append } for pid=25059 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=12732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1463.488853][T25100] netlink: 'syz.1.2952': attribute type 1 has an invalid length. [ 1463.496737][T25100] netlink: 'syz.1.2952': attribute type 2 has an invalid length. [ 1464.359254][T25105] mkiss: ax0: crc mode is auto. [ 1464.414167][ T30] audit: type=1400 audit(1383.955:3053): avc: denied { remove_name } for pid=25102 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=12732 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1467.850763][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1467.850794][ T30] audit: type=1400 audit(1387.200:3056): avc: denied { mount } for pid=25164 comm="syz.5.2960" name="/" dev="autofs" ino=69653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1468.180964][T25171] mkiss: ax0: crc mode is auto. [ 1468.543094][T25000] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1468.632190][T25184] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1468.670177][ T30] audit: type=1400 audit(1387.967:3057): avc: denied { append } for pid=25178 comm="syz.0.2962" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1468.730744][T25185] netlink: 'syz.0.2962': attribute type 2 has an invalid length. [ 1468.775319][T25185] : entered promiscuous mode [ 1469.140725][T25000] usb 6-1: Using ep0 maxpacket: 8 [ 1469.344989][T25000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.453895][T25000] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.470564][T25000] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1469.496376][T25000] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1469.517915][T25000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.565388][T25000] usb 6-1: config 0 descriptor?? [ 1469.948265][T25199] bridge0: left promiscuous mode [ 1469.988356][T25199] bridge0: left allmulticast mode [ 1471.054061][T25000] usbhid 6-1:0.0: can't add hid device: -71 [ 1471.070718][T25000] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1471.089360][ T30] audit: type=1400 audit(1390.231:3058): avc: denied { unmount } for pid=16675 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1471.096673][T25000] usb 6-1: USB disconnect, device number 10 [ 1471.866844][ T30] audit: type=1400 audit(1390.923:3059): avc: denied { nlmsg_read } for pid=25217 comm="syz.0.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1472.251698][ T30] audit: type=1400 audit(1391.335:3060): avc: denied { ioctl } for pid=25225 comm="syz.2.2971" path="/dev/sg0" dev="devtmpfs" ino=749 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1472.330448][T25236] bridge0: entered promiscuous mode [ 1472.335745][T25236] bridge0: entered allmulticast mode [ 1472.358528][T25236] ubi: mtd0 is already attached to ubi0 [ 1475.383924][ T30] audit: type=1400 audit(1394.057:3061): avc: denied { getopt } for pid=25252 comm="syz.1.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1476.193814][ T30] audit: type=1400 audit(1395.048:3062): avc: denied { setopt } for pid=25257 comm="syz.3.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1476.645751][ T30] audit: type=1326 audit(1395.123:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1476.703246][ T30] audit: type=1326 audit(1395.123:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1476.994888][ T30] audit: type=1326 audit(1395.123:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1477.022506][ T30] audit: type=1326 audit(1395.123:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1477.120369][T25274] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1477.244181][ T30] audit: type=1326 audit(1395.123:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1477.411517][ T30] audit: type=1326 audit(1395.123:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1477.462807][T25279] mkiss: ax0: crc mode is auto. [ 1477.598324][ T30] audit: type=1326 audit(1395.123:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1477.639044][ T30] audit: type=1326 audit(1395.123:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25260 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7effd8b8f6c9 code=0x7ffc0000 [ 1478.732861][T25288] lo speed is unknown, defaulting to 1000 [ 1478.779849][T25288] lo speed is unknown, defaulting to 1000 [ 1479.528463][T25291] C: renamed from team_slave_0 [ 1479.554318][T25291] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 1479.644565][T25304] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1480.130544][T25291] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1480.139681][T25291] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1480.778045][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1480.778061][ T30] audit: type=1400 audit(1399.211:3095): avc: denied { write } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1481.907176][ T30] audit: type=1400 audit(1399.220:3096): avc: denied { create } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1481.978999][ T30] audit: type=1400 audit(1399.220:3097): avc: denied { create } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1482.001330][ T30] audit: type=1400 audit(1399.239:3098): avc: denied { shutdown } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1482.020897][ T30] audit: type=1400 audit(1399.239:3099): avc: denied { getopt } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1482.090932][ T30] audit: type=1400 audit(1399.239:3100): avc: denied { connect } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1482.201501][ T30] audit: type=1400 audit(1399.239:3101): avc: denied { name_connect } for pid=25310 comm="syz.2.2988" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1482.297519][ T30] audit: type=1400 audit(1399.248:3102): avc: denied { read } for pid=25310 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1482.701816][ T30] audit: type=1400 audit(1399.361:3103): avc: denied { allowed } for pid=25287 comm="syz.0.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1482.729511][ T30] audit: type=1400 audit(1399.361:3104): avc: denied { create } for pid=25287 comm="syz.0.2983" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1482.990870][T25000] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1483.157506][T25000] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1483.166847][T25000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.385601][T25341] mkiss: ax0: crc mode is auto. [ 1483.409505][T25339] lo speed is unknown, defaulting to 1000 [ 1483.421964][T25339] lo speed is unknown, defaulting to 1000 [ 1483.455207][T25000] usb 4-1: config 0 descriptor?? [ 1483.473371][T25000] pwc: Creative Labs Webcam Pro Ex detected. [ 1484.353139][T25347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.361934][T25347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.371412][T25347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.380242][T25347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.587935][T25352] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1484.716372][T25355] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1484.926408][T25352] gretap0: entered promiscuous mode [ 1484.939867][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 1485.144383][T25355] 0ªî{X¹¦: renamed from gretap0 [ 1485.201577][T25355] 0ªî{X¹¦: left promiscuous mode [ 1485.218896][T25355] 0ªî{X¹¦: entered allmulticast mode [ 1485.297381][T25355] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1485.936613][T25000] pwc: send_video_command error -71 [ 1485.942217][T25000] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1485.953770][T25000] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1486.045592][T25000] usb 4-1: USB disconnect, device number 26 [ 1487.020404][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1487.020444][ T30] audit: type=1400 audit(1405.179:3198): avc: denied { create } for pid=25360 comm="syz.5.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1487.040434][ T30] audit: type=1400 audit(1405.198:3199): avc: denied { connect } for pid=25360 comm="syz.5.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1487.127391][T25333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.624284][T25376] loop6: detected capacity change from 0 to 524287999 [ 1487.634209][T25376] buffer_io_error: 14 callbacks suppressed [ 1487.634237][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.648630][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.656990][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.665260][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.673543][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.682098][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.691919][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.700109][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.708231][T25376] ldm_validate_partition_table(): Disk read failed. [ 1487.739488][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.747970][T25376] Buffer I/O error on dev loop6, logical block 0, async page read [ 1487.758596][T25376] Dev loop6: unable to read RDB block 0 [ 1487.766204][T25376] loop6: unable to read partition table [ 1487.772786][T25376] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1487.790596][ T30] audit: type=1400 audit(1405.693:3200): avc: denied { create } for pid=25373 comm="syz.1.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1488.522588][ T30] audit: type=1400 audit(1405.721:3201): avc: denied { write } for pid=25373 comm="syz.1.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1488.565820][ T30] audit: type=1400 audit(1405.731:3202): avc: denied { append } for pid=25373 comm="syz.1.3001" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1488.952073][T18759] ldm_validate_partition_table(): Disk read failed. [ 1488.968757][ T30] audit: type=1400 audit(1406.947:3203): avc: denied { append } for pid=25379 comm="syz.3.3002" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1488.970513][T18759] Dev loop6: unable to read RDB block 0 [ 1488.992326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.129544][T18759] loop6: unable to read partition table [ 1489.277750][ T30] audit: type=1400 audit(1407.265:3204): avc: denied { write } for pid=25369 comm="syz.2.3000" name="vbi9" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1489.631212][ T30] audit: type=1400 audit(1407.573:3205): avc: denied { execute_no_trans } for pid=25389 comm="syz.5.3005" path="/354/file0" dev="tmpfs" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1489.654323][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.936928][T25395] mkiss: ax0: crc mode is auto. [ 1489.965221][ T30] audit: type=1400 audit(1407.658:3206): avc: denied { sqpoll } for pid=25387 comm="syz.1.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1490.335313][ T30] audit: type=1400 audit(1408.275:3207): avc: denied { create } for pid=25399 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1490.865250][T25400] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1490.897996][T25409] mkiss: ax0: crc mode is auto. [ 1495.073173][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1495.073188][ T30] audit: type=1400 audit(1412.709:3230): avc: denied { create } for pid=25443 comm="syz.1.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1495.180950][T25453] mkiss: ax0: crc mode is auto. [ 1495.236237][ T30] audit: type=1400 audit(1412.746:3231): avc: denied { unlink } for pid=25439 comm="syz.2.3015" name="#4d" dev="tmpfs" ino=3277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1495.333051][ T30] audit: type=1400 audit(1412.746:3232): avc: denied { mount } for pid=25439 comm="syz.2.3015" name="/" dev="overlay" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1495.391098][ T30] audit: type=1400 audit(1412.887:3233): avc: denied { write } for pid=25443 comm="syz.1.3016" name="route" dev="proc" ino=4026532812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1495.936460][ T30] audit: type=1400 audit(1413.504:3234): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1496.180936][T25464] mkiss: ax0: crc mode is auto. [ 1496.654566][ T30] audit: type=1400 audit(1414.187:3235): avc: denied { create } for pid=25467 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1496.878154][ T30] audit: type=1400 audit(1414.205:3236): avc: denied { setopt } for pid=25467 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1497.022717][T25477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3023'. [ 1497.053714][ T30] audit: type=1400 audit(1414.234:3237): avc: denied { bind } for pid=25467 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1497.096243][ T30] audit: type=1400 audit(1414.374:3238): avc: denied { read write } for pid=25470 comm="syz.1.3023" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1497.310745][ T30] audit: type=1400 audit(1414.374:3239): avc: denied { open } for pid=25470 comm="syz.1.3023" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1497.753018][T25472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1497.764998][T25472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1497.806638][T25483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1497.818199][T25483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'. [ 1498.599205][T25493] mkiss: ax0: crc mode is auto. [ 1499.138344][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 1499.993391][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1501.268253][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1501.268285][ T30] audit: type=1400 audit(1418.462:3251): avc: denied { write } for pid=25504 comm="syz.2.3030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1501.597156][ T30] audit: type=1400 audit(1418.471:3252): avc: denied { name_connect } for pid=25504 comm="syz.2.3030" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1502.575906][T25526] mkiss: ax0: crc mode is auto. [ 1503.085380][T25538] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1503.345094][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 1503.357025][T25545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3038'. [ 1504.879092][ T30] audit: type=1400 audit(1421.792:3253): avc: denied { create } for pid=25557 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.025028][ T30] audit: type=1400 audit(1421.792:3254): avc: denied { bind } for pid=25557 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.072363][ T30] audit: type=1400 audit(1421.792:3255): avc: denied { setopt } for pid=25557 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.327855][T25561] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1505.432368][ T30] audit: type=1400 audit(1421.792:3256): avc: denied { accept } for pid=25557 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.705533][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1505.816788][ T30] audit: type=1400 audit(1421.792:3257): avc: denied { write } for pid=25557 comm="syz.5.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1505.841336][ T30] audit: type=1400 audit(1421.866:3258): avc: denied { append } for pid=25557 comm="syz.5.3043" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1505.864144][ T30] audit: type=1400 audit(1422.082:3259): avc: denied { read write } for pid=25555 comm="syz.3.3042" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1505.889236][ T30] audit: type=1400 audit(1422.082:3260): avc: denied { open } for pid=25555 comm="syz.3.3042" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1506.755486][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1506.755503][ T30] audit: type=1400 audit(1423.634:3278): avc: denied { create } for pid=25583 comm="syz.1.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1506.878481][ T30] audit: type=1400 audit(1423.644:3279): avc: denied { ioctl } for pid=25580 comm="syz.3.3048" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=70328 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1508.390312][ T30] audit: type=1400 audit(1425.140:3280): avc: denied { write } for pid=25584 comm="syz.5.3047" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1508.752309][T25599] sg_write: data in/out 768/168 bytes for SCSI command 0x96-- guessing data in; [ 1508.752309][T25599] program syz.1.3050 not setting count and/or reply_len properly [ 1509.423316][ T30] audit: type=1400 audit(1426.122:3281): avc: denied { ioctl } for pid=25605 comm="syz.0.3053" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1510.237714][T25619] mkiss: ax0: crc mode is auto. [ 1510.681462][T25617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1512.062522][T25630] No control pipe specified [ 1512.488984][ T30] audit: type=1400 audit(1428.966:3282): avc: denied { audit_read } for pid=25632 comm="syz.0.3058" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1512.544505][T25637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25637 comm=syz.0.3058 [ 1512.557577][T25637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=12 sclass=netlink_audit_socket pid=25637 comm=syz.0.3058 [ 1512.570268][T25637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25637 comm=syz.0.3058 [ 1513.676460][ T30] audit: type=1400 audit(1429.097:3283): avc: denied { audit_write } for pid=25632 comm="syz.0.3058" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1514.338694][ T30] audit: type=1326 audit(1430.341:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1514.663389][T25647] tipc: Enabling of bearer rejected, already enabled [ 1514.673106][T25647] tipc: Enabling of bearer rejected, already enabled [ 1514.894199][ T30] audit: type=1326 audit(1430.341:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1515.132747][ T30] audit: type=1326 audit(1430.341:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1515.165518][ T30] audit: type=1326 audit(1430.341:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1515.582019][ T30] audit: type=1326 audit(1430.341:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1516.104419][ T30] audit: type=1326 audit(1430.341:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1516.144544][ T30] audit: type=1326 audit(1430.341:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1517.276603][ T30] audit: type=1326 audit(1430.341:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25635 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1517.363533][T25661] sp0: Synchronizing with TNC [ 1517.478892][T25661] sp0: Found TNC [ 1517.825485][T25674] xt_ecn: cannot match TCP bits for non-tcp packets [ 1517.857521][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 1517.857538][ T30] audit: type=1400 audit(1433.999:3341): avc: denied { setopt } for pid=25664 comm="syz.1.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1518.086423][T25676] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 1518.094314][T25676] netlink: 'syz.2.3068': attribute type 2 has an invalid length. [ 1518.105428][T25676] tmpfs: Bad value for 'mpol' [ 1518.124908][ T30] audit: type=1400 audit(1434.251:3342): avc: denied { mounton } for pid=25670 comm="syz.2.3068" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1518.180153][ T30] audit: type=1400 audit(1434.251:3343): avc: denied { create } for pid=25670 comm="syz.2.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1518.200539][ T30] audit: type=1400 audit(1434.260:3344): avc: denied { mounton } for pid=25670 comm="syz.2.3068" path="/633/file0" dev="tmpfs" ino=3346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1518.222757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.809571][ T30] audit: type=1400 audit(1434.822:3345): avc: denied { write } for pid=25677 comm="syz.3.3069" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1518.833035][ C0] vkms_vblank_simulate: vblank timer overrun [ 1518.883797][ T30] audit: type=1400 audit(1434.822:3346): avc: denied { open } for pid=25677 comm="syz.3.3069" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1520.131141][T25702] mkiss: ax0: crc mode is auto. [ 1520.151186][ T30] audit: type=1400 audit(1436.169:3347): avc: denied { ioctl } for pid=25687 comm="syz.5.3074" path="socket:[70992]" dev="sockfs" ino=70992 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1521.470296][T25708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1521.499717][T25708] netlink: 'syz.2.3076': attribute type 12 has an invalid length. [ 1521.800909][T25712] netlink: 'syz.5.3075': attribute type 21 has an invalid length. [ 1521.808835][T25712] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1521.818197][T25712] netlink: 'syz.5.3075': attribute type 4 has an invalid length. [ 1521.826063][T25712] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1521.843892][T25712] batadv1: entered promiscuous mode [ 1521.850417][T25712] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1521.889672][ T30] audit: type=1400 audit(1437.703:3348): avc: denied { create } for pid=25704 comm="syz.5.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1522.369095][ T30] audit: type=1400 audit(1438.152:3349): avc: denied { ioctl } for pid=25716 comm="syz.2.3078" path="socket:[71030]" dev="sockfs" ino=71030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1522.936057][T25726] mkiss: ax0: crc mode is auto. [ 1523.259500][ T30] audit: type=1400 audit(1439.078:3350): avc: denied { execute } for pid=25728 comm="syz.2.3080" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1524.128744][T25740] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1526.036887][ T30] audit: type=1326 audit(1441.313:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.116261][ T30] audit: type=1326 audit(1441.313:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.144140][ T30] audit: type=1326 audit(1441.313:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.170089][ T30] audit: type=1326 audit(1441.313:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.204784][ T30] audit: type=1326 audit(1441.313:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.228624][ T30] audit: type=1326 audit(1441.313:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.254149][ T30] audit: type=1326 audit(1441.313:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.288363][ T30] audit: type=1326 audit(1441.313:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1526.450398][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1527.861518][T25761] lo speed is unknown, defaulting to 1000 [ 1527.891897][T25761] lo speed is unknown, defaulting to 1000 [ 1528.178807][ T30] audit: type=1326 audit(1441.313:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25753 comm="syz.2.3086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x7ffc0000 [ 1528.201792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.472901][ T24] usb 4-1: device descriptor read/all, error -71 [ 1529.114858][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1529.114875][ T30] audit: type=1326 audit(1444.204:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.143965][ C1] vkms_vblank_simulate: vblank timer overrun [ 1529.182278][ T30] audit: type=1326 audit(1444.204:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.220178][ T30] audit: type=1326 audit(1444.204:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.348926][ T30] audit: type=1326 audit(1444.204:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.375711][ T30] audit: type=1326 audit(1444.204:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.399133][ T30] audit: type=1326 audit(1444.204:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.509798][ T30] audit: type=1326 audit(1444.204:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.533928][ T30] audit: type=1326 audit(1444.204:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.557852][ T30] audit: type=1326 audit(1444.204:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1529.581544][ T30] audit: type=1326 audit(1444.204:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25773 comm="syz.0.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x7ffc0000 [ 1531.827396][T25784] bridge0 (unregistering): left promiscuous mode [ 1532.274749][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1532.340919][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1532.353949][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1532.370156][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1532.382851][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1532.626628][T25788] netlink: 'syz.5.3095': attribute type 3 has an invalid length. [ 1532.941952][T25800] bond0: entered promiscuous mode [ 1532.947124][T25800] bond_slave_0: entered promiscuous mode [ 1532.955683][T25800] bond_slave_1: entered promiscuous mode [ 1532.978146][T25800] batadv0: entered promiscuous mode [ 1532.998481][T25800] debugfs: 'hsr1' already exists in 'hsr' [ 1533.004355][T25800] Cannot create hsr debugfs directory [ 1533.014854][T25800] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1533.116630][T25804] input: syz1 as /devices/virtual/input/input22 [ 1534.054710][T25807] serio: Serial port ttyS3 [ 1535.805278][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1535.805292][ T30] audit: type=1400 audit(1450.808:3425): avc: denied { append } for pid=25815 comm="syz.3.3099" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1536.279277][T25831] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1536.288408][ T30] audit: type=1326 audit(1450.892:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1536.430850][ T30] audit: type=1326 audit(1450.892:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1536.458159][ T30] audit: type=1326 audit(1450.892:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1536.483923][ T30] audit: type=1326 audit(1450.892:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1536.508086][ T30] audit: type=1326 audit(1450.892:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1536.532311][ T30] audit: type=1326 audit(1450.892:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1537.363391][ T30] audit: type=1326 audit(1450.892:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1537.395204][ T30] audit: type=1326 audit(1450.901:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1537.423905][ T30] audit: type=1326 audit(1450.901:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25825 comm="syz.5.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x7ffc0000 [ 1538.336976][T25852] mkiss: ax0: crc mode is auto. [ 1539.343781][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3110'. [ 1539.587184][T25860] : entered promiscuous mode [ 1539.984234][T25875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3113'. [ 1541.537594][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1541.537609][ T30] audit: type=1400 audit(1456.177:3459): avc: denied { execute } for pid=25892 comm="syz.2.3117" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=71286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1542.466740][ T30] audit: type=1400 audit(1457.019:3460): avc: denied { read } for pid=25898 comm="syz.5.3118" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1542.489643][ C1] vkms_vblank_simulate: vblank timer overrun [ 1542.620091][ T30] audit: type=1400 audit(1457.019:3461): avc: denied { open } for pid=25898 comm="syz.5.3118" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1543.290423][ T30] audit: type=1326 audit(1457.720:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25913 comm="syz.0.3119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x0 [ 1543.556737][T25921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'. [ 1544.261333][T25919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1544.267594][T25919] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1544.969349][ T30] audit: type=1400 audit(1459.376:3463): avc: denied { name_bind } for pid=25929 comm="syz.5.3125" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1545.798457][ T30] audit: type=1400 audit(1460.152:3464): avc: denied { write } for pid=25929 comm="syz.5.3125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1545.823561][ T5817] Bluetooth: hci1: command 0x0c1a tx timeout [ 1545.998285][ T30] audit: type=1400 audit(1460.227:3465): avc: denied { read open } for pid=25949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.067798][ T30] audit: type=1400 audit(1460.274:3466): avc: denied { getattr } for pid=25949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.363465][ T30] audit: type=1400 audit(1460.283:3467): avc: denied { getattr } for pid=25949 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.418590][ T30] audit: type=1400 audit(1460.283:3468): avc: denied { search } for pid=25949 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.444201][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 1546.553308][T25960] delete_channel: no stack [ 1546.934665][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1546.934679][ T30] audit: type=1400 audit(1461.125:3505): avc: denied { execmem } for pid=25965 comm="syz.2.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1547.460433][ T30] audit: type=1400 audit(1461.359:3506): avc: denied { prog_load } for pid=25965 comm="syz.2.3130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1547.679216][ T30] audit: type=1400 audit(1461.359:3507): avc: denied { bpf } for pid=25965 comm="syz.2.3130" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1547.736849][T25968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1547.744469][T25968] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1547.753073][T25968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1547.758972][T25968] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1547.821767][ T30] audit: type=1400 audit(1461.359:3508): avc: denied { perfmon } for pid=25965 comm="syz.2.3130" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1547.855336][ T30] audit: type=1400 audit(1462.079:3509): avc: denied { add_name } for pid=25940 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.980589][ T30] audit: type=1400 audit(1462.079:3510): avc: denied { create } for pid=25940 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1548.069289][ T30] audit: type=1400 audit(1462.079:3511): avc: denied { write } for pid=25940 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=13271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1548.096514][ T30] audit: type=1400 audit(1462.107:3512): avc: denied { append } for pid=25940 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=13271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1548.488883][ T30] audit: type=1400 audit(1462.669:3513): avc: denied { ioctl } for pid=25971 comm="syz.2.3131" path="socket:[72164]" dev="sockfs" ino=72164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1548.565128][T25979] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1548.651817][ T30] audit: type=1400 audit(1462.725:3514): avc: denied { read } for pid=25975 comm="syz.5.3132" name="cec5" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1550.126434][T26006] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3136'. [ 1552.325445][T26036] lo speed is unknown, defaulting to 1000 [ 1552.334024][T26036] lo speed is unknown, defaulting to 1000 [ 1552.385564][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1552.385579][ T30] audit: type=1400 audit(1466.317:3556): avc: denied { create } for pid=26038 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1552.566571][ T30] audit: type=1400 audit(1466.345:3557): avc: denied { write } for pid=26038 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1553.179447][ T30] audit: type=1400 audit(1466.345:3558): avc: denied { create } for pid=26038 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1553.257576][ T30] audit: type=1400 audit(1467.112:3559): avc: denied { create } for pid=26042 comm="syz.1.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1553.391639][T26051] sp0: Synchronizing with TNC [ 1553.399441][ T30] audit: type=1400 audit(1467.271:3560): avc: denied { read } for pid=5479 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1553.629927][T26054] sp0: Found TNC [ 1553.690927][T26051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1554.836385][ T30] audit: type=1400 audit(1468.272:3561): avc: denied { read } for pid=26055 comm="syz.0.3143" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1554.955457][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1555.018157][ T30] audit: type=1400 audit(1468.272:3562): avc: denied { open } for pid=26055 comm="syz.0.3143" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1555.125503][ T30] audit: type=1400 audit(1468.608:3563): avc: denied { create } for pid=26062 comm="syz.3.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1555.167220][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1555.400353][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1555.447393][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1555.470676][ T30] audit: type=1400 audit(1468.608:3564): avc: denied { connect } for pid=26062 comm="syz.3.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1555.499168][ T30] audit: type=1400 audit(1468.945:3565): avc: denied { mounton } for pid=26067 comm="syz.2.3145" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1555.502383][T26071] netlink: 'syz.3.3144': attribute type 3 has an invalid length. [ 1555.663037][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1555.771411][T26076] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1556.135020][T26083] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1556.850679][T26086] bridge10: entered promiscuous mode [ 1556.856061][T26086] bridge10: entered allmulticast mode [ 1558.082049][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1558.082066][ T30] audit: type=1326 audit(1471.564:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26088 comm="syz.5.3151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb7298f6c9 code=0x0 [ 1558.478559][ T30] audit: type=1400 audit(1472.004:3584): avc: denied { create } for pid=26100 comm="syz.2.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1558.508240][T26097] block device autoloading is deprecated and will be removed. [ 1558.737269][ T30] audit: type=1400 audit(1472.256:3585): avc: denied { connect } for pid=26100 comm="syz.2.3154" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1559.309367][T26122] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1559.450247][ T30] audit: type=1326 audit(1472.921:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26112 comm="syz.0.3155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf4e38f6c9 code=0x0 [ 1559.514144][T26129] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3156'. [ 1559.779578][ T30] audit: type=1400 audit(1473.211:3587): avc: denied { write } for pid=26126 comm="syz.2.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1560.807488][ T30] audit: type=1400 audit(1474.193:3588): avc: denied { create } for pid=26138 comm="syz.1.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1561.260597][T26129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.273936][T26129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.295908][T26129] bond0 (unregistering): Released all slaves [ 1561.319209][T26134] tipc: Enabling of bearer rejected, already enabled [ 1561.336563][T26136] tipc: Enabled bearer , priority 0 [ 1561.805657][T26155] bridge0: entered promiscuous mode [ 1561.811011][T26155] bridge0: entered allmulticast mode [ 1562.394134][ T30] audit: type=1400 audit(1475.661:3589): avc: denied { create } for pid=26156 comm="syz.0.3161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1562.536765][T26163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3164'. [ 1563.335412][ T30] audit: type=1326 audit(1476.531:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26166 comm="syz.2.3166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82b78f6c9 code=0x0 [ 1564.288178][ T30] audit: type=1400 audit(1477.111:3591): avc: denied { mount } for pid=26175 comm="syz.3.3167" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1564.351099][ T30] audit: type=1400 audit(1477.121:3592): avc: denied { read } for pid=26175 comm="syz.3.3167" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1564.495828][T26181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=26181 comm=syz.1.3168 [ 1564.521075][ T30] audit: type=1400 audit(1477.121:3593): avc: denied { open } for pid=26175 comm="syz.3.3167" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1564.820781][ T30] audit: type=1400 audit(1477.139:3594): avc: denied { ioctl } for pid=26175 comm="syz.3.3167" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1565.161741][T26183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1565.170883][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1565.246599][ T30] audit: type=1400 audit(1477.495:3595): avc: denied { append } for pid=26174 comm="syz.1.3168" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1565.601802][ T30] audit: type=1400 audit(1477.495:3596): avc: denied { open } for pid=26174 comm="syz.1.3168" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1565.637769][ T30] audit: type=1400 audit(1478.299:3597): avc: denied { create } for pid=26185 comm="syz.1.3171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1565.950511][T26204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1566.217961][T26192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1566.223512][T26199] mkiss: ax0: crc mode is auto. [ 1566.458769][ T30] audit: type=1400 audit(1478.823:3598): avc: denied { create } for pid=26187 comm="syz.0.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1566.515001][ T30] audit: type=1400 audit(1478.842:3599): avc: denied { bind } for pid=26187 comm="syz.0.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1566.633198][T26200] xt_ecn: cannot match TCP bits for non-tcp packets [ 1566.692342][ T30] audit: type=1400 audit(1478.842:3600): avc: denied { connect } for pid=26187 comm="syz.0.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1567.185453][T26216] mkiss: ax0: crc mode is auto. [ 1568.210414][ T1206] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1568.467616][ T1206] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 1568.596383][ T1206] usb 4-1: config index 0 descriptor too short (expected 64649, got 45) [ 1568.640323][ T1206] usb 4-1: config index 1 descriptor too short (expected 64649, got 45) [ 1568.676610][ T1206] usb 4-1: config index 2 descriptor too short (expected 64649, got 45) [ 1568.693096][ T1206] usb 4-1: config index 3 descriptor too short (expected 64649, got 45) [ 1568.706085][ T1206] usb 4-1: config index 4 descriptor too short (expected 64649, got 45) [ 1568.716260][ T1206] usb 4-1: config index 5 descriptor too short (expected 64649, got 45) [ 1568.727993][ T1206] usb 4-1: config index 6 descriptor too short (expected 64649, got 45) [ 1568.746685][ T1206] usb 4-1: config index 7 descriptor too short (expected 64649, got 45) [ 1569.037762][ T1206] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1569.055019][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.064083][ T1206] usb 4-1: Product: syz [ 1569.072177][T26236] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1569.082458][ T1206] usb 4-1: Manufacturer: syz [ 1569.091655][ T1206] usb 4-1: SerialNumber: syz [ 1569.936471][T26245] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1570.296648][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1570.296683][ T30] audit: type=1400 audit(1483.079:3605): avc: denied { create } for pid=26248 comm="syz.2.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1570.342633][ T30] audit: type=1400 audit(1483.098:3606): avc: denied { write } for pid=26248 comm="syz.2.3183" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1570.374218][ T1206] rtl8150 4-1:1.0: couldn't reset the device [ 1570.382400][ T1206] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1570.503686][T25000] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1570.687599][T26252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1571.152505][ T24] usb 4-1: USB disconnect, device number 29 [ 1571.273897][ T30] audit: type=1400 audit(1483.986:3607): avc: denied { mount } for pid=26255 comm="syz.5.3185" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1571.314184][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1683.540464][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1683.547423][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18754/2:b..l [ 1683.555996][ C0] rcu: (detected by 0, t=10502 jiffies, g=80013, q=408 ncpus=2) [ 1683.563726][ C0] task:udevd state:R running task stack:25592 pid:18754 tgid:18754 ppid:5184 task_flags:0x400140 flags:0x00080001 [ 1683.578002][ C0] Call Trace: [ 1683.581281][ C0] [ 1683.584205][ C0] __schedule+0x1190/0x5de0 [ 1683.588882][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1683.594073][ C0] ? write_profile+0x130/0x150 [ 1683.598830][ C0] ? kernel_text_address+0x8d/0x100 [ 1683.604025][ C0] ? __pfx___schedule+0x10/0x10 [ 1683.608881][ C0] ? mark_held_locks+0x49/0x80 [ 1683.613648][ C0] preempt_schedule_irq+0x51/0x90 [ 1683.618673][ C0] irqentry_exit+0x36/0x90 [ 1683.623096][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1683.629079][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 1683.634265][ C0] Code: 94 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 12 21 e9 0e 0f 82 74 02 00 00 8b 35 8a 51 e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 94 08 12 0f 85 c7 02 00 00 48 83 c4 [ 1683.653861][ C0] RSP: 0018:ffffc9000e5c7330 EFLAGS: 00000206 [ 1683.659921][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c4760 RCX: 0000000038c2593b [ 1683.667878][ C0] RDX: 0000000000000000 RSI: ffffffff8da05d92 RDI: ffffffff8bf07040 [ 1683.675840][ C0] RBP: 0000000000000002 R08: 60c1ef9e54885703 R09: 0000000000000000 [ 1683.683798][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 1683.691755][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1683.699741][ C0] prepend_path+0x22a/0xfb0 [ 1683.704243][ C0] ? prepend_path+0x219/0xfb0 [ 1683.708938][ C0] ? __pfx_prepend_path+0x10/0x10 [ 1683.713971][ C0] d_absolute_path+0xfe/0x1a0 [ 1683.718643][ C0] ? __pfx_d_absolute_path+0x10/0x10 [ 1683.723922][ C0] ? kfree+0x252/0x6d0 [ 1683.727993][ C0] tomoyo_realpath_from_path+0x355/0x6e0 [ 1683.733620][ C0] ? tomoyo_profile+0x47/0x60 [ 1683.738293][ C0] tomoyo_path_number_perm+0x245/0x580 [ 1683.743760][ C0] ? tomoyo_path_number_perm+0x237/0x580 [ 1683.749399][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1683.755401][ C0] ? d_alloc_parallel+0xb4e/0x1510 [ 1683.760508][ C0] ? current_check_access_path+0x33c/0x460 [ 1683.766311][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 1683.772467][ C0] tomoyo_path_mknod+0x10c/0x190 [ 1683.777398][ C0] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1683.782852][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1683.788743][ C0] security_path_mknod+0x161/0x310 [ 1683.793855][ C0] lookup_open.isra.0+0xc17/0x1580 [ 1683.798972][ C0] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1683.804533][ C0] ? find_held_lock+0x2b/0x80 [ 1683.809210][ C0] ? __pfx_down_write+0x10/0x10 [ 1683.814059][ C0] path_openat+0x893/0x2cb0 [ 1683.818563][ C0] ? __pfx_path_openat+0x10/0x10 [ 1683.823493][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1683.828428][ C0] do_filp_open+0x20b/0x470 [ 1683.832923][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1683.837956][ C0] ? alloc_fd+0x471/0x7d0 [ 1683.842283][ C0] do_sys_openat2+0x11b/0x1d0 [ 1683.846955][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1683.852176][ C0] __x64_sys_openat+0x174/0x210 [ 1683.857022][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1683.862399][ C0] do_syscall_64+0xcd/0xfa0 [ 1683.866892][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.872775][ C0] RIP: 0033:0x7f99007c5407 [ 1683.877188][ C0] RSP: 002b:00007ffe2b520d70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1683.885590][ C0] RAX: ffffffffffffffda RBX: 00007f9900199880 RCX: 00007f99007c5407 [ 1683.893545][ C0] RDX: 0000000000080241 RSI: 00007ffe2b5212d0 RDI: ffffffffffffff9c [ 1683.901499][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 1683.909454][ C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055d74f7f9dfc [ 1683.917422][ C0] R13: 000055d74f7f9dfc R14: 0000000000000001 R15: 000055d75164e650 [ 1683.925393][ C0] [ 1683.928398][ C0] rcu: rcu_preempt kthread starved for 10291 jiffies! g80013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1683.939573][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1683.949523][ C0] rcu: RCU grace-period kthread stack dump: [ 1683.955391][ C0] task:rcu_preempt state:R running task stack:28080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1683.968868][ C0] Call Trace: [ 1683.972131][ C0] [ 1683.975050][ C0] __schedule+0x1190/0x5de0 [ 1683.979563][ C0] ? __pfx___schedule+0x10/0x10 [ 1683.984421][ C0] ? find_held_lock+0x2b/0x80 [ 1683.989091][ C0] ? schedule+0x2d7/0x3a0 [ 1683.993420][ C0] schedule+0xe7/0x3a0 [ 1683.997481][ C0] schedule_timeout+0x123/0x290 [ 1684.002337][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1684.007699][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1684.012979][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1684.018782][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1684.024255][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1684.029010][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1684.034368][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1684.039568][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1684.044492][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1684.049333][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1684.055136][ C0] rcu_gp_kthread+0x26d/0x380 [ 1684.059799][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.064984][ C0] ? rcu_is_watching+0x12/0xc0 [ 1684.069761][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1684.074961][ C0] ? __kthread_parkme+0x19e/0x250 [ 1684.079985][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1684.085168][ C0] kthread+0x3c5/0x780 [ 1684.089225][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.093802][ C0] ? rcu_is_watching+0x12/0xc0 [ 1684.098557][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.103148][ C0] ret_from_fork+0x675/0x7d0 [ 1684.107754][ C0] ? __pfx_kthread+0x10/0x10 [ 1684.112343][ C0] ret_from_fork_asm+0x1a/0x30 [ 1684.117123][ C0] [ 1684.120129][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1684.126437][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1684.135363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1684.145404][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1684.151037][ C0] Code: d7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 86 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1684.170638][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1684.176703][ C0] RAX: 0000000007b98db3 RBX: 0000000000000000 RCX: ffffffff8b60a2a9 [ 1684.184663][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b754 RDI: ffffffff8bf07040 [ 1684.192627][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1684.200600][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1684.208565][ C0] R13: ffffffff8e097a00 R14: ffffffff90820cd0 R15: 0000000000000000 [ 1684.216794][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 1684.225728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1684.232303][ C0] CR2: 00007f65a7038d14 CR3: 0000000027e71000 CR4: 00000000003526f0 [ 1684.240261][ C0] Call Trace: [ 1684.243532][ C0] [ 1684.246450][ C0] default_idle+0x13/0x20 [ 1684.250771][ C0] default_idle_call+0x6c/0xb0 [ 1684.255542][ C0] do_idle+0x38d/0x500 [ 1684.259611][ C0] ? __pfx_do_idle+0x10/0x10 [ 1684.264197][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1684.269388][ C0] cpu_startup_entry+0x4f/0x60 [ 1684.274143][ C0] rest_init+0x16b/0x2b0 [ 1684.278373][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1684.283649][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1684.289190][ C0] start_kernel+0x3f6/0x4e0 [ 1684.293690][ C0] x86_64_start_reservations+0x18/0x30 [ 1684.299225][ C0] x86_64_start_kernel+0x130/0x190 [ 1684.304331][ C0] common_startup_64+0x13e/0x148 [ 1684.309269][ C0]