last executing test programs: 14.898617551s ago: executing program 2 (id=1380): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d}, 0x28) close(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14.551672946s ago: executing program 1 (id=1381): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000006180), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000000ca007d05008686dd60ff38f5001c0600fe80000000000000000000000000000bfe8000000000000000000000000000aa730000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50040000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001b00)=ANY=[@ANYBLOB="021070091c00000028bd7000fddbdf2502001000000004d6000004d4005700000005001a00ac1414aa000000000000000000000000e00000010000000000000000000000001800101002001000000004d2000004d4000000001100180010ac7d00f0a98eaac80517f1a57f72b1240b82a10d875aa2195b90abd17fa1cdfe1f588b99fff796db7b227151389b328015862bb9dae18cf15e4c8afd3067df0ab12338ae0f3f4ee324289876e8f63fccf459281d80df4d6594dfc799962003c31a71a13caad2c7ee34bfbd2481149797e5fdbfea41ff11f96a860380"], 0xe0}}, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r5) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0x315, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 13.05726648s ago: executing program 1 (id=1383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58}, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xc, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x2, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x203, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) read$FUSE(r3, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) remap_file_pages(&(0x7f0000d92000/0x3000)=nil, 0x3000, 0x2000004, 0x0, 0x80000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 12.943130596s ago: executing program 0 (id=1384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=@ipv6_deladdr={0x2c, 0x15, 0x421, 0x70bd2a, 0x25dfdbfe, {0xa, 0x3f, 0x30, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) close(r4) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001dc0)}}], 0x3, 0x400000a0, 0x0) 11.28148463s ago: executing program 0 (id=1387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f0000002140)) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) 11.250727369s ago: executing program 2 (id=1388): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000300)={@local, @loopback, 0x1, 0x2, [@private=0xa010100, @private=0xa010100]}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x15c}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="aa", 0x1, 0xc800, &(0x7f00000002c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000}, 0x1c) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x8044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x810, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x7f4, 0x1, 0x0, 0x1, [@generic="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"]}, @nested={0x4, 0x4}]}, 0x810}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) 10.983875574s ago: executing program 4 (id=1389): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000440)={@multicast2, @loopback}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000780)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132a631b7c76001d24defc30855fefc927ef345b85edf8a2684cb052c868d7d776e20a68d0a292934402e70100360877278abc0336c3320c7626f1584664e76c6b96f402c703ef711063fec2372c20483318ecb0bb4ff3c46aa97cd0a302965d74ac5c4893a2e5d995ccce45f6797fd3f6921ea04ac5f9f722fc6b35b3ee0390000000000000000e79eebdd208e90da51d420d915f0efd0a70185d0075537665992cbc071d9dbc9cd14f08991679dd71f7c31efac02785c34eff6321505286a14d7ec3793938b29662b740a441f3f654abb68f926b96e4ed9162da6c95f7f80133b476e2447926defa3050e3179483c748854246f1f33ddb58fa00514fa725b72ba62b9a5d3d4dde07f86b44dc4507ec7d62b6b1da1a78053b1f44ba9d23c00000000000000", 0x15d}], 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, 0x0, 0x0) 9.90393431s ago: executing program 1 (id=1390): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000000000/0x3000)=nil) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f00000001c0)={0x4, 0x3c6, 0x4, 0x5, 0xc1, 0x4, "1130fd852869ab7e3763d015948ae7f8", 0x1, 0x1, 0x2, 0x0, 0x1, 0x8, 0x4}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000340)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x40408c0) 9.757752173s ago: executing program 3 (id=1391): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0) sendto(r7, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 9.045958643s ago: executing program 2 (id=1392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 8.849889021s ago: executing program 0 (id=1393): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0034e5b70100000000000000a036f04bc1c41dbd854d84671e12b200d1bf1518a67a25e4ce28dc4ee3b22975d1a7d135a7410b6c20d0abf6de0b24b54e4d3013778579a52296ae3d3c55e4ba7218e020d4352abe7c26721c5046d036e949d5e4163f12fa0a6474e300"/118, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r3, &(0x7f0000002240)=""/102400, 0x19000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x310) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 8.778782095s ago: executing program 3 (id=1394): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) 7.735293017s ago: executing program 2 (id=1395): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}]}}]}, 0x38}}, 0x4000) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_open_procfs(0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000000800)="e7f268a48728435fc5b6e2d5810a1a1a161fe3559b65ac4a88b40a30486a1a23043a69e0890bb76252e61439a7ccb398196a5800ea9e61977179771119719e88ac4ae4ce6553330d8ff0f726d60e5a106a32f0186fa80ce8c91661cad2cbcadccfb6dfcdbc18e5fa7adeed6e15b67973f82dae57bc723d9ddab1e040f81c35aab7a2cb0672b31c516b1c8a7ee7dfe61a0d0c3750701e574dff72d6689f817bf3fc3452704adb41fdeda712f1de8855c8837dccd693e8c1c6ead92f8b27f7866c1dadb2a95da7ae7102ffe4a32ad806eea7ed0abdbc08abab0c462d0116772aa0c97c0868ba62028ebd8ad901fbd0a30c473e771e9003149a7660e40b574c0af1230dbf7de719cf0c1eacd04cd03e4148e887e15a6695e1ff0ae25ee4dc72e8d534bf9b09c3bf1c8caea097341a92c808e40bfa40cd5690def353e5eef9dce39ba5cf56e208e4aa86b5e3099ff333f57cdd3f95d01486d76236d374f668cfeb2b0d2682f532aa0c66946199437cd9659de42a0d04f9edffb60e62afb3cf735fad9f8adb4d14d2a2f0bc6f2d9ff29ed5eea8dace7c2a0a3bfd21f84c2571789f1043935aebfa108b1998b5a363238e638677edeaec95398985fe3cc711aa374e448f728d8d071210dac842bfc7b819634e3b03249fddb2cae6623221e4dc748681181bcdadf6c9f5432a771a8b321c31d8b649f5d3a0325a69c37d5bb16dbb53d4f08afa7d27042b04ba80a3baa7e01984a29dcf7495a4f96c690238346c51e9f25137c7bcecb271c9fadd82265498c6816a2f709e56b39b4a170ba2ef590884ce7a1bfdb98bdf2ff6670ea71c7124c3d0c18d677c3fe50e994d459462c76511dd6e45e41cf857e59d1818a9f50183ea014af17c1e5bdef4941b9f92e1ae97fc6ad74d0a970fb150529c239b5780820c7918f78ac5eb766a146933814710912782388da834d05e17cbee181e2233cb890a4333acca9406f9542ffa7f762eee6a323d57bba6047b330464ebaadcc824ab47723dca490044afea8ca882b7e3eec41af1070a9752fa043602ecb008c3c38e938e506c3dcc4e17f5b600e0b90cae102e0c09b93fafe12f4811d66f3a3ac384d751bd618e66e8cb15dde90ccbb22e4c363154472d1c4416fb6c4ea6620c723f91e05cf483c5985d7d1028de999e7f3990fd73982a01584259d4f10d9ebffd14cb0df2398dbd9f7aa5574b1afe687c15e6de800b4e960ef22d461e9164a108aef965509f4ab1da56f07f77fd8568e9581ec1e6fb3fdd776ba235b3d3ad74779fe176d28ed8ed9f9044a582119434631db1486ed992a996fc1ff772d2757a060d04c1cd5dbdbaa8c04d9f620e87f21ef79730c529de74a06d8db6c83efc50948b4e5c4b5bb49404314266149f7a5027d14ad14d8ade1ba2346b5aba477456b9dc6df4bf8435a18ef7252f4f12218162d3d226e93b664e5767b0aa5a6304477035881bf7f54e7838672e84d8e71a7288071349df4b68a076c393579cb0c4e5157d883a55f424e0e72a782d8e3283d692f457adad09eb4dbadb87f52ab411b5d057f0d9f346385d5cc205d730a27a5913d1055607706092e8a43426fa06c1de8200b784adf5a0f38f7b5b2f7e53fdb58bfbff302c0c8cfd22a451cd029e521e2f6ac34e318551f379c183aed7a22db5f84619fc738b1ab81d96f8534c9f82b9f734df3eafea1978b8304a648bd599db8ce37c4aa5ea5615a045d8664858100add204288ade384bc6834882d49aaec934cff639c67e26a66e456ce65026b1ffc5ca1e9425b13765585b69e9fdb0158057d3c14fa9df45493b95ae53d4e7245ed0a6c1606d2b3cf6d47ac97aa2ad092f2b2a272dfd69df9caac3dcc1a2fb4b03e1dcf7a5014284bac4f614f3cda5494b3aa2f6e8f44ed471ee41e2c65de96f546652582a71aead53964af9187d5e4c0c0c6fe64f99232f51a8da5d3dc466adc3edeea23c3b796d6495dfd811e32c6b8f02bb8310cccdb11e4098ae7aad6e05f70f41ddb5c25afd1245aa0b47aac9b3cd157bf6837e65c87aa35d39574bb75622acac4530b350049ba32c2ed436d4b08fecfde125f49fe80286ae57669f6ef76a2898549cceaf09c316c90c44f64cec1fa63fbe12983edc1fc280b693c00f61f63322e75362b3fd00af628fc5077979f831a0dea581beebd0c52a4ad1071517b5e1382fee2585aaffc5307f9484cd56464e5a29ddc30b12870dad56260e82620267e01ffbd3a8b31fefcefa3e0b9aa05d81067a1c7dbf243ede1bbbb0a844faa4e8f17242e14798fd6160a4d7b770018581a384c6ce381382da1145aebebd92c31f54e1a5beee1ab2e82bb2aabc461dd6545f133020e20364d0cf1551dcff7abcd6db3f28701f0bbf90e81b775dc59b7f2644cca886510fc8cffe195df2ebd510d2848995b7d1fbae36c3baac61736cf75fccf1b5b7c9693315e67e9e8492f2a8afe8763c055eaf10fa3c615f5bcf4a4019e89b675d976edbfd5bd5ec7eeb6edf064264913aed5e03bbdabba41de2dac18aa4b2ae8c245f7eda1ee7b48f0f95097b7f94c99423566753c9c0938e50b2c07428fcca4cdaf6f50422c6d42a15cdf4284282a4ac0b46e91a56302ac0ad4ba6d26e29e67a0a5f11654ca55a54cd9a66179faa9fcda5248c9a3805a970bdc54278aa311c223690c4930fb489beebded23c5313e1f20b3ee80d939be84bc7dccded4682ef0f8e8ab586b4ed55960749ffa35c042472b59cd86af5c2e2f7163aa55fddb433774490f9f173be7950cd2a01d18e7f4e5723b4a613c91696ac3ef7e170b8c412b8e733a47883f17f130f474ad5f1f93d2f152e0f12fdf851bae021f554330932f9b67cffa998a70ebd61c65991e79e5dc25ab9a47608a380a632a8745afcd5d3070367f160e531f75b7405876dcfd5760e90bff2ab08e32e994f8f81f75c9599698c25dd05bb306ff285caeb68d8b5cb69469e0dbe1077cd1116256423d6651ae3781b1969c0e9f03a32a38ec9c9b18caa671b0e73f501bcc3cec5dc16f6352c5eb975f9a6d5190cce8863b68a988866a1cd2666050294494705321d3c5630d6ed04823c9563c99a6abdda44ae0d326697c2ae6a7470e2f8f03654caf62d6881e3a6e47af426a66b27e1cb1396c210958b0041f25aa64b75e95242aba566554d766ab68eb76967d5544ef20736625e8300d39a1bd03b2ebdc520e59ba9f9322a1f228a0ede384fd54125acf8c0835b7951f5660dd7c51004c448e0ec9e6e9024bec21379a29f56966c8b437b08d4929db502a19ec52b91936ac86b65446f758d3f77c3c5d9299777c18be82f7a6d88aaf8189d2009670a9c2f4cd5d4c3f4301352c8229b69940ce6a88fe53bb698779008318bd6e4157507e304f42e238c683da0f9e5e52d6bb990bc68d8314bbbcfd94fa510d9b37778a76d8158e7ef8762c53198c23a88cbe6ce5f15095a6fcf0aecd233ed9c82d59e8a47b654bca2c7f3bc60f6d403b729cb47b69aac7c6a90cd363708338eb2f9c02718fd3443bdd7ee32cc1bd4d5021f200a51c8348f0ec9484748b552b4125341a3ad310cef4dc9416e018b9910d0cd90c4c50f1088f7be2db4dfbbfae4f4911b36eb8bdafcd674c6d2cde2ff6771963e70c1ee5ac27b1dace74863783732b93602d5647cc433dcf74b74e8b72a22c6aaa4a2b21341674daca4a26d76e6b3c17b5257e3714c5273a07251650846c8b075c7fde59677cc6252026e0c7ca8940d14b31940f430389c7b8e936032fcbc261cd07bf89c61ee090276de50ec90fe108a42e03beacf9de155295575822684f3d77b2d286cb1c0a542cc1bdf96805af08907d484892d20c4d9fe64fd4d476d7cd5c8bceb451e7664449e137c0557f8c8e69f167c66c362afbd2bffbcf1ea53cbf68ebf8cb3bedc463e800ff281d9d7a658770f83d570e53f90354bcae1f817dbedbc617775bafc802fe930bff61d91c3b6910b19da16b65030016bc426ef1bab0c4328a69f71cee71a41d30fe54a0dcd1c27d31499f028c05b23520ee23f90aa9e8a41c77ba336925ff82f1f04975551746fd5884dbd3aa967cbd72c6c451f0396cc8804ec41dfbded0277b772e01bd8b53a10eed234d65c8700c481861f37fa93814e6ccc0d14cb3a2081450ef8285dc98798d75dd0d1638631eea216c5ba95884bcec86b553d168c4d31f2a58b9d9f8006b8030d30a600b8a5943e6b002457e73187b9b04fc59854e23ff0c4316cd274b8ddb10968aaeea1e588096122b3b25992f7eeada28f22790cd11086b551cc736410087493364f0b6028d22d0aa5ce64b78c18de353ff02c7269396774dda6662562b6342872e03c90d004c3ad376d0b6d2bb79634b773966719af42d9e8dbc225305cea5d49bd29e66db7d4e7693dc77de00793a8b9611793d8b4c30482e25e3bbb5eb6c96c88006183b83fe554f626397ee611356b585e4777d21160e62a3a824852f1b2c69680aae5672ee4764a5977286ba15d428343df644cb8c8d87dfd68e5bb210fea0c16bf19486f31bed2f26c39ac28b51e7e0828af5588da8735e7e02f4004cdc8ed98ddb23a496e4c03578dec5e7ac9a2f80326b210d70f0d490af0728bf9e8ec3126f85262ed806789a2f0b16a12e761ad55703674aa6f334df539dee2be3b93d45bde8253371bb93937909c7cba3548891b174fcf52880b3ec6393c15460f0a19ee817fb680c4f1a37f1310a7d4aa9cc78e501cd56ccc761e0c21d9827b08d474af86140b89a6a5df6a71b1f41bc693884d39d8ef91bc8db1a4d6f1c58888d85996636ecabcdad0709ebfa33109b3599c61312189d5d1a90b872153490cc795ab69ca0baec12d0be26d6338e7c4c0a9d0d863aadab13cb192722c9bb25bca2dadb6a5de467c596367084f30616e67a23a0435ce2ddfc4933342c7f48769535e8639df550baa97de2df27fe51b81e48bb5e00095352a5546f14d686cce8351162a08d7a838201ef9a0ca496d4e891eb41661a84d615b15de21014bd80f3af44af7df34125d3a54f4bb89b4024a47fb5210219dd127eed4ab393fffa399bd6036012ebf55aacf86dfe2604df2fc650ba76efc1e7243e7eda7766c4cc41a107f993ead16697df8207ecfb0f4008734fa3b5d7170969ac0db7319437a8a26975215aef8660c05ea377af26920efdffac87904dc0f9cc64f8a8146960165e7698ca3962d3145e5370d3eb478a2d8f98db44b3c0273695e78aa08de17adb023351e7dc3b7462b8fb21a6a790052342f6b153b35418f6a914aff3bb1a2b3adf72acaefa2ab97fe0e0324bab97cb1be15bcd4bbbccdb1a1666c80c218b04ad2e6ce487b1c50d577c41990af907865c40e1bd5d46a096d1460f1089cf719b0049e5e631acac58af0ac9319e8d09d4af7f0b4596253208e99ab37c19aec9bb8f4170800d8eafde3d81a962ae802c72c4e1e6350683927d0c03cb9cccfeae2e2c9ece5413cce574e716fc44f675a671da6e701821ceeaee38b13dd2b6e64099fe6bec2d8de873bf3c3ddb67a14bab9dff7346bdfdb20c638256e8df566312ba54625def4d257864bb61d8b313e0069b6b93a81f64421e63a06b2a1ad2b3ad6523543f26228eab2168ef2f51e89634fc991dbf9d8a6cb0d8025bd3c4fdc0f4ff227bcb8436ec198a05a177c2b6fca6155f4a7aa746740d3cd21c3dfbc3041dac00acaed52802576d950628378733f7bf922a7a7681953800bb038f0cb2311bd04282fd839738b0fd7b380ba647f95364a1162f5f0ad2ef083a8c071264d3ba891c2615412efac22758a443315ff9d6c80c485fb93c6c8fb9318f27fdd1c257b23ead16f898a6100d018f04bb36d8a34503152fb9957ae7694afdc75a27078a64f2ce1db5c79fc12c140b568d1e6f8281bda2eaa14f8f0150d2bb2a251b344aa5d79a49491d109d01be2e4e55de7c68f2ea1ab218653ce75f88fae0b32a7aa4d3dd0c9aa1b24f1385fb80ed3107cec3ed6d97a4e2dbfaa5b58b15fce6837ccedd9f0292e0f879f2109961ff4b73245302fd2127521484ad12566a9a20d7205cbd73d6e345e0a848229a258c11e60a8e4b3c9987f288e82a8e027d90c8c469add3c1c67b6253bd099ab9b72535b443373e1338345037eb51a7a790e8fe6161258d4413c3dd59358c6ee91bbf52befb9ed56a78f460fcfbd6dc3ebf6d5052eafd83f6792ce76a017ae735732831f7d848b3f3206a743e383de153119f8d8aa774a38ee8fc616541d29674142e66e730db39e3fd14b4dafaa7abc6c888703ce82b12c22e23f830fe6d3ed27b1dd8a647a60f86bdd050cdaf8da90489cb1a548dab9490b86ec6e44bb1cf75853fd728d1ec7f414d25bc709d3e4c363953a4184867c2595ac431cb4ebae2f2667c9d322e1acd50e5c0909204dc7566814056ae86dfa8655b1175788ce868742f1dae00ddbbc8501bf64788ff0ce88dc5405fc59470b2a07bbfaa813409937d32cf785ff96547f1816405cf03960bf68c7b22f6a84259badebc6b3d507657481f539efb087685d8bfba095267715e8a26168256dca89f81184e1c6354686be367f7f4834aa990ad71efae7da20235eac580db6312a88b36f0a402acef36b81a5fb7e686de0c16b9be480634544a0c227b279339a1b9f860f83e42af9d22004f0af9e76912b0375a22e75f65bfb89fcdfa79ef9bfdfae5bd9db569f6debc8f38094502f3f7d2aeaac0710440cbb5fccc3ddf66deb235de4d5f03ed5b32c953588dc672149ac9246444fb13c1cc9f8c9d1d8c98d27dd3f1689a2edda02f069aa4b4d71fd31678c9c2187377b15fec716354e24828a5b099d5ebbda9979c8407697bf6472d8982de49445d9aa427e995a87a1852f52dd6044a83615d7fc1142f6df5d8ef464aab407be230d0efea63ccc1e3402abf58c5e95bbb049bb29a8a0c841738fc8de527e438090bd6048de26be87430bb5d311e6b5729d4436b863cbbec0ffb341e9a51bcc36a41dbeefe96de49025d1848ac6c51297c9ba23bc0c33327e2cee68ed877247055593b3d857a60bfbc5a4bd16795a7b0860a5161e0a7ee12f62b70c7e4b1ee052711f4a133bf10a0d897cfa9679a6096a622d74612612911fba4c797baec19dc6113dee702dd901be0fd035a3fac8c52873d2c122e0b7208bbf632df788c5aaf39ebfc8d2ed90b246fcf2bac7eab098131de57c3632e62f6a22c0a1a1524f2e6faa72e46d5e8bb40bc1f0e8f944bdb380d7529e95e0adcfb25184b800ffb27e90a14f4615b377ab1ad4b867625f2119b8d57a95dd753d7fbdf9140087b20160552038c9abe8317d1c476fd90fe97c75ff7b38c0a0e20609db8ec90b5c3790fecbc2ea346019232486832f1dc61f40c9a80d67e2c6455defd9ca15920be314510e485ee09ad1f4d5a3e6425c23678f93cbf71bd8fa6f15dc8b6b1de967bf84218a03487f3641591b392d28f83706fe8dfaa2abee3d8ecda6f58bf1eaeb67d531edead572b901f84a5398edd6950b24c121ba3c37b09022d9a14c767150b7707af3ae7a2ebcaced96c81aa9130da5e49f765a2e1da4abd12156971c2237e2c55caf3361f227860fb9fd5090abc4ff47151e9e7036010284048072e34a959b9af20342037f588eba8fa88bdeac8540164c218e8b42468f6db2f89cc1e9defefb4290e0509084948b62cdd28b9e6b814f501c3fb9a281ec6ec93c80ba48612dce00cbd9258b4f4a4c8dbb60ae2bd8bc7c4924e19ae655a31ff282058783b88a270efcb51c5688f3016c23dc760b1e6a88c01157f388894baa365923af20ae91bb0024895764a7212dad1f8720f10b4e6506bece4a00d301f02a1afc6f12ad52d3352208618bc79b735dccc7107ca1b08a7d0ba80e918efc44766731f1cb6e07523a16b57e148f56ac2eaf56099cfabb3288eb98b488293b9e0d097f27275e1c86471095944159a5a5eeaac391b2abddfc2fcedca7c3284a272f6439da0c5a968d1d365c8cf053ea04321460b897356e50c375d60326601faf463f0ba9c6355aeb19dad1475e3fd741b4bfeb4799c49f870e60765c86d37ab3f5958e842cf0aabfbefa9f1416f11d907a9b2d79b39d2ee14ee82e77bb7bed0a0edf3018af2b9b3b1cfa7427b099cd5e2ad73a7ce9e2e993dfd4674ae9dbb672cf6537ecfdcd1fcadde04a21af60cab8c67db90cbf0a2b17ba8b6d5a0856ad2af92be8827d289c3d20c9a8f2ba2a063686bd3a1a3531ee1c7b4289eb27c1158b5d27e2691c6fb60198c56a98a96373c1f85cb99e1532ed9b2e21328e6883a5332799bd3f614c8edcbc9c3407fac98246c72a22675e3e5c9a70e9bc73d1d0274c9b6aacbe8d2a711fea1a944f60d520847ab842106f178f57aed772843d8086b3b58e8ae2095ea5d95461fff4cfd34db66760d82ea76c19fa6163f8eefbfa10f8a85bdc0d8f7c99ec3631c278841cd324b156263a592c37cfce5d7ad51529852220fd8e780f5f2820e490eb9dd04a366ca28aaddcadef31d75cab75b66e40078046b7a9244bd8de2c24b02507df8e671930a1e0d6588f0c7fe70da9fcb38bcf93f54738017decc83bd393b0f89942933ad669ca046b39a4d56202648f586d3a08b88c34cdc2cf58ed09205ee0742ad281af399ded7786e88612f0c8e321e51daa1b2c0bda4cb6fdfdcfa788973589a14242bebaae3abfa1859b8ad634eb0cc9bc61c3994504a10181cc895b484b7d438519627b29503da4fe2b922925ce5d2996fbbcaa1d8e7669b97e64459713843ca5530b8817dcb4813ec4ed26882dfb614abfe6880f8cc3f2510b07084a4891afffa36bfd8ea96d78b9bb02d98590de43f298eb202284efa944f62ada6b290f2dc73691a615ad7dbffb96ba9411fdefe97c9bbe347401f8da5bb22df2d3e64581cc30320f32f8eb6fec9cab1cabdb4a325caecf260dc7034ebb7a8611c0fdd12c4a2f22c0fb9e9cde1713f20b6c64765c921a168279200664c1cfd63a152915bb54dff3092ea0bc5328c1707b48bc2a9da1e6e7269baa9741c6766d126853ecadd427d438cae467cea8893cf180fde2b4aa6e3b3137d6d6ecd25f448d805ef14350699bddde76f2cd7cc45664731950f890acfbcb9789163f4dc3862ac289321f11f3a54acf506c1187eaa0f2ae1ab8c7543f104af9546b914dcaf8f52141b0423874e25de63dd95e633ac77ada1a6fde3b6a402a7ab92a7d52d44f424a5ab162bebadb0b9f3a0447581c78bf07fbbfc2d345c173af645357046d96bf53f53b9650dd73dcebe02be33bbfab1ceeddf74e2a180c3f8ebf82d7961e5f23a0c8be7ef3a2d4f98f2a0ec31d08e55b36ea72f35d37bd9ad04ac6bdb2a80f9fdbb69ad2ff2cb7e3206861ddc16d459c98653096021c892755078ed887e8e6784ac71343ce43c7bd7f2ab70728c41059d5f42370932b5fd5a6a7bca3a23c3a258ad3911d9b04384fac718bbc4ed4c3d3d5ed88f9fbecae59a09ddfefd6ad2336d8adebd2a7da4ad9331e71ac523e8c694cb796ec3a4dff8f87764e69d12f73482837cc0b1a02f9ce85a905e13cc8913dd03e1b6ca3fc1e2752873f6b2aec860fb6475de4e79de5698ab86e28a8f4fd65109774585e7b54f88a0593cdb5cc620fc29c285515eeddd95063f5821be1941edd4f66864647657369afd27cee42b7f555707df6f196159ae8ec284c8298f7e4b47f0cb107eec2f78e6ed353c937e3508446184a29eeddc3484dfab2547d4c218dcba0177ead513bf51932bd8fef502982edf6fcd6342bcc1030776b753305925395096ff29d79d58472697281bee5d157a7106dafb5ec4b744375c3b7a437a68a01202327a186a17fa2e64d8c151ee90cfb98edd9fee5dd0a5cf108a147286bf3033b9dc99ef0e683da603822bf40f4cd39657b041e76ba63ff44e6f30e2104361aec6669454431955c95d8407156118cc1716bd64fc9ecae5554bc3f71510929174ffe91e3697cf2a0e7abec2f2fcffe52b6964c03c61448f6172bb866bf001a8b538c943629d73dbc05335d14e6b5609d919efb28954bb1430e35b7b5cd920fc55eb96141c0804403698b20c1eb324f75d1cb6be2ea523192b63b7031e6eb4c3408eb8feb628d379ba4ff2feb2c9026b951f0f4e28a3d1c10fc7e7d3afc3ef78a3c2114e273aa7ba3080d89c456b65b0203fd02c786f8ff8345768b770a2ccbca9a7d955d50cc863b01387bc734136d24e41f5fef94a709d170a7bac1a1b74e3d91ab0a53163ae4993588f187cf6333064709d1914c60014ae1990c331926e8e0ba089663f42d621092e7233d23bbd7d728877aa184e0b32108d4bd04553c0f15cb7d4884996a7a7e352b6962b839a704f9f7c8ecccac9b744d49da68987c77953ee0d43b835d9a976fe85b3baee747e6866d9f9df4af7033ad31fbee42b6f37bfa359b095ff7d2f0ae29223dc583d96dba364746bb4b38b23c02701e270bd9b3ce3046c0db7467d5607bf7d231b97774992eda6dc4c2e12d2db0e0b3fa09ef8d3fa8386a65e3ecee8deab1352051bf75712db72a7d5c96a3ff8aa681a91b2567c30bebd5cf1567d2d70ebe6ec78e62d404c46c6320991a80fd65a5c7f8b1df0d4c52cca12b99c04c9f00971afb3495353a67df262f367b5c04aabbf71a13084c7639974b66c0e27abd6347f21460ce094e59be82af6860e7e45a9b6ad3bdbcf7fa502901430483a96e84f9cbed52279803956c3e51a3b77b86d67281deab3ce2a2b386c9c340770bac6ff91b6d55a5dd00430f5af5f74cdf7e52f67c3fe4f2245cffb2d3cf99fc061bfdb3520fdf8864e7c07554f5fe4d27bced9a8346ee9b195c5c29b0c3adec205e18319fde255e805a1a340ce5247a7ef128d2b6d25c34db012d54f435028ee6607ac5c7795a97812c3ad0dda61726fb2435907ec730270e2ed26f87bac160002f105c91c3f89107232efec637f0a81e0e4740a54a13c26bcf94bfdee06824bf701d40d2581f7b310e414546ee37aabcbb1c4b8359f2bec1565f5a52d09ae973698e6f12bd75250c4989011e44564427f138ea421ed03b6876d3b70f4f35a372106021cf7e40e2a1175a4fcdb85ce604412956ab732b8fb9431df87279363cecf4785e31f501a173ec7454c329d49b6894b8a3124246365fd5a6a6f3785807efc6a1902a3807bc2abbd79147c482bb04eac8f2088e0ee543d230451ecf707c7253165042bcfdf395112538e65d5f12396a2880da0c45ba9d712e45c75a7fcbea675c5481ae2a42cb3890bb49a3a5363c285c69088e6cd691b6b74420c58907d514567365f2a09dd14476191ac2f3739c12af2e739d9dac6f4769ffda4a9fd61889f629825ec1985b8a99f28491d195526060d14aec47acbad946abbb3adb2638a77c417be509682fef1d79c7bf673ed90e0010183de2dcf818256ec033bc392b26bfa7a1d081a4403ce336e79859c690d7c6281a815d4e3ef3e3fb6b5788997514e83441d00860ca11223417b8e4924197b07f78550d4e27bd73cfbb940c5f48cbdcaac773004f84b99429566be93ffc3a520c73e7f50fb68ae4d8e44c482c2999e484df6aa5a6f8e94e6ea6c286ec0358c5a82efde9d0965897eef", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000240)={0x7, &(0x7f00000001c0)=[{0x3, 0x5e, 0x40, 0x7fff}, {0x7, 0x86, 0x2, 0x8}, {0x3ff, 0x0, 0x4, 0x9}, {0x4, 0x81, 0xe, 0x1ff}, {0x3, 0x1, 0x7, 0xffffb89f}, {0xb, 0xf3, 0x4, 0xfffff800}, {0xfff8, 0x3, 0x5, 0x351}]}) 7.559855229s ago: executing program 0 (id=1396): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800000000ffffffff050090780a0101024a00000000000000000036de1e025a4f30ab0000ac1e0001ac141401071300e000000200000000ffffffffac14140c00da173dad41dbd33c21c6af8306b9a63ee237d70f95a930bcf24fbf86f85a4d7ab28de9e11db647a28a90cb0679b910"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000c40)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x01\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\x9c\xfaZ\xfeR\xbb\xea5F\x00G\xe8\xc6\xb9\x05\x00\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\'\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac \xc2\xe8\xc1\x1b\x17\xb5\x95\xb2\xdb\xe0+\x0e\xc0\x8d\xd8\xb5\xb4\xea\x90\x06\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|\xf0\xf7\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xff`\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00ct\x00\xe8\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00\x8cJ=\xfd\xed\xcd\xfb\xab\x19\x88Y&[\xfaS\x9a\x80\x85\xb5\xa7\xf6\xef}\x81G\x15\x93\xfd\x02\xab\xaf\xe7\xe8\xcfz\x80\xf7\xf9\xe0\xd6\x98\xbf]\t7nPV\xe5\xe7LF\xc4PM\'mp.\x8a\xc7', 0x4) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.199598179s ago: executing program 4 (id=1397): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000040), 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04ff06"], 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f00000002c0)=""/133, 0x85, 0x0, &(0x7f0000000680)=""/236, 0xec}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) epoll_create1(0x3da6a93ac6a54ffb) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000003c0)=[@timestamp, @timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp], 0x5) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/5, 0x5, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r8, &(0x7f0000006b40)={0x2020}, 0x2020) 6.475584172s ago: executing program 1 (id=1398): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x14, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d}, 0x28) close(r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6.324015416s ago: executing program 3 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000580)=0x4) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6002, 0x0, 0x40, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) 5.544163169s ago: executing program 4 (id=1400): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000), 0x2480, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf02d}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010300000000000000000100000908000240000000050900010073797a300000000028000000000a03000000000000000000010000090900010073797a3000000000080002"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r9, &(0x7f0000001680)={&(0x7f0000001700)={0x1d, r10, 0x0, {0x1, 0xfe, 0x3}, 0x1fe}, 0x18, &(0x7f0000000200)={&(0x7f0000000440)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x40}, 0x24000005) 4.75188382s ago: executing program 3 (id=1401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) poll(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x492492492492846, 0x0) 3.295703356s ago: executing program 4 (id=1402): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) gettid() timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) shutdown(r4, 0x1) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X'], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = syz_io_uring_setup(0x5c59, &(0x7f0000000140)={0x0, 0xa436, 0x2, 0x0, 0xee}, &(0x7f00000000c0), 0x0) unshare(0x26020400) syz_io_uring_setup(0x5c5c, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x40000000, 0x0, 0x0, r5}, 0x0, 0x0) 3.089569208s ago: executing program 4 (id=1403): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000cc9000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r0, 0x200000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x5) r4 = dup(r3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x50060}, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) socket$tipc(0x1e, 0x7, 0x0) listen(r0, 0x100) 2.873205562s ago: executing program 0 (id=1404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$inet6(0xa, 0x6, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r2, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000, 0x3, &(0x7f0000d39000/0x1000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.854918754s ago: executing program 2 (id=1405): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200003f, 0x28011, r5, 0x0) 1.752260384s ago: executing program 3 (id=1406): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.450765832s ago: executing program 3 (id=1407): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x4, 0x1) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f000017e000/0x2000)=nil, 0x2000, 0x17) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1.259676163s ago: executing program 1 (id=1408): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x20581, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) waitid(0x2, 0x0, &(0x7f0000000140), 0x8, &(0x7f0000000200)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) shutdown(r1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5416, &(0x7f0000001100)) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x28, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x100000}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 1.149356438s ago: executing program 2 (id=1409): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000, 0x80}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200}}, 0x10) 1.01991247s ago: executing program 0 (id=1410): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x2}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}]}}]}, 0x3c}}, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) chdir(&(0x7f0000002300)='./file0\x00') r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0x40000014}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000040)={0x6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002980), 0x80, 0x0) read$char_usb(r9, &(0x7f00000029c0)=""/16, 0x10) 833.275535ms ago: executing program 4 (id=1411): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r5, &(0x7f0000002240)=""/102400, 0x19000) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socket$netlink(0x10, 0x3, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=1412): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r1, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vcan0\x00', 0x400}) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], 0x0}, 0x94) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, 0x0, 0x25, 0x3, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): 474.982509][ T5896] usb 1-1: Manufacturer: syz [ 475.002794][ T5896] usb 1-1: SerialNumber: syz [ 475.011859][ T5896] usb 1-1: config 0 descriptor?? [ 475.029452][ T5896] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 475.110253][ T5896] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 475.515129][T11374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 475.528883][T11374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.586429][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.960222][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 475.961247][ T30] audit: type=1400 audit(1757146707.591:2396): avc: denied { create } for pid=11375 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 476.201217][ T30] audit: type=1400 audit(1757146707.971:2397): avc: denied { create } for pid=11376 comm="syz.3.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 476.232503][ T30] audit: type=1400 audit(1757146707.981:2398): avc: denied { read } for pid=11376 comm="syz.3.850" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 476.342775][ T30] audit: type=1400 audit(1757146707.981:2399): avc: denied { open } for pid=11376 comm="syz.3.850" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 476.368459][ T5896] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 476.417794][ T30] audit: type=1400 audit(1757146708.041:2400): avc: denied { ioctl } for pid=11376 comm="syz.3.850" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 476.531443][ T5896] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 476.561397][ T5896] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.613590][ T5896] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.706154][ T5896] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.753956][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.776505][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.786767][ T5896] usb 4-1: invalid MIDI out EP 0 [ 476.858438][T10723] usb 1-1: USB disconnect, device number 10 [ 476.902959][ T30] audit: type=1400 audit(1757146708.801:2401): avc: denied { ioctl } for pid=11383 comm="syz.1.851" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 476.978943][T10723] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 477.024781][T10723] kobil_sct 1-1:0.0: device disconnected [ 477.547711][T11381] delete_channel: no stack [ 477.652933][ T5896] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 477.705029][ T5896] usb 4-1: USB disconnect, device number 13 [ 478.015431][ T30] audit: type=1400 audit(1757146709.921:2402): avc: denied { setopt } for pid=11387 comm="syz.4.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 478.109311][ T30] audit: type=1400 audit(1757146709.921:2403): avc: denied { name_bind } for pid=11387 comm="syz.4.852" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 478.655490][T11402] lo: entered allmulticast mode [ 478.737951][ T30] audit: type=1326 audit(1757146710.571:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb00d8ebe9 code=0x7ffc0000 [ 478.770272][ T30] audit: type=1326 audit(1757146710.571:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11398 comm="syz.4.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbb00d8ebe9 code=0x7ffc0000 [ 481.215878][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 481.216382][ T30] audit: type=1400 audit(1757146713.121:2430): avc: denied { create } for pid=11416 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 481.246347][T11419] SELinux: failed to load policy [ 481.288951][ T30] audit: type=1400 audit(1757146713.131:2431): avc: denied { load_policy } for pid=11416 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 481.804797][ T30] audit: type=1400 audit(1757146713.501:2432): avc: denied { read write } for pid=11422 comm="syz.2.858" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 481.829132][ T30] audit: type=1400 audit(1757146713.501:2433): avc: denied { open } for pid=11422 comm="syz.2.858" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 481.854470][ T30] audit: type=1400 audit(1757146713.541:2434): avc: denied { create } for pid=11422 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 481.874679][ T30] audit: type=1400 audit(1757146713.561:2435): avc: denied { bind } for pid=11422 comm="syz.2.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 482.206241][ T30] audit: type=1400 audit(1757146714.121:2436): avc: denied { read } for pid=11428 comm="syz.2.862" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 482.400245][T11432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 482.431765][T11432] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 482.439666][T11432] batman_adv: batadv0: Removing interface: virt_wifi0 [ 482.657190][ T30] audit: type=1400 audit(1757146714.121:2437): avc: denied { open } for pid=11428 comm="syz.2.862" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.388470][ T30] audit: type=1400 audit(1757146714.181:2438): avc: denied { create } for pid=11428 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 483.418476][ T30] audit: type=1400 audit(1757146714.221:2439): avc: denied { bind } for pid=11428 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 484.894631][T11457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.353047][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 486.353066][ T30] audit: type=1400 audit(1757146718.276:2463): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 486.388642][ T30] audit: type=1400 audit(1757146718.306:2464): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 486.696774][ T30] audit: type=1326 audit(1757146718.426:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 486.721190][ T30] audit: type=1326 audit(1757146718.426:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 486.865983][T11488] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 486.889628][T11488] overlayfs: missing 'lowerdir' [ 487.342589][ T30] audit: type=1326 audit(1757146718.426:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 487.498640][ T30] audit: type=1326 audit(1757146718.426:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 487.522825][ T30] audit: type=1326 audit(1757146718.426:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 487.554087][ T30] audit: type=1326 audit(1757146718.426:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 487.625890][T11493] ip6erspan0: entered promiscuous mode [ 488.180520][T11504] overlayfs: missing 'lowerdir' [ 488.219287][ T30] audit: type=1326 audit(1757146718.426:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 488.451484][ T30] audit: type=1326 audit(1757146718.426:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 489.312159][T11520] bridge0: port 2(team0) entered blocking state [ 489.328597][T11520] bridge0: port 2(team0) entered disabled state [ 489.351657][T11520] team0: entered allmulticast mode [ 489.356862][T11520] team_slave_0: entered allmulticast mode [ 489.363315][T11520] team_slave_1: entered allmulticast mode [ 489.371672][T11520] team0: entered promiscuous mode [ 489.377886][T11520] team_slave_0: entered promiscuous mode [ 489.385909][T11520] team_slave_1: entered promiscuous mode [ 489.812222][ T51] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 490.669063][T11532] netlink: 'syz.3.878': attribute type 5 has an invalid length. [ 491.785092][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 491.785107][ T30] audit: type=1400 audit(1757146723.616:2612): avc: denied { name_bind } for pid=11545 comm="syz.2.881" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 492.275999][ T5923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 492.340196][ T30] audit: type=1400 audit(1757146724.266:2613): avc: denied { read } for pid=11557 comm="syz.0.883" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.363123][ C1] vkms_vblank_simulate: vblank timer overrun [ 492.693617][ T30] audit: type=1400 audit(1757146724.296:2614): avc: denied { open } for pid=11557 comm="syz.0.883" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 492.703100][ T5923] usb 2-1: config 0 has no interfaces? [ 492.779954][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 492.789442][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.797605][ T5923] usb 2-1: Product: syz [ 492.804680][ T5923] usb 2-1: Manufacturer: syz [ 492.817918][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 492.845939][ T5923] usb 2-1: SerialNumber: syz [ 493.010872][T11569] netlink: 'syz.2.884': attribute type 10 has an invalid length. [ 493.019569][ T30] audit: type=1400 audit(1757146724.936:2615): avc: denied { ioctl } for pid=11567 comm="syz.2.884" path="socket:[23146]" dev="sockfs" ino=23146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 493.045188][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.052810][ T5923] usb 2-1: config 0 descriptor?? [ 493.100570][T11569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.111517][T11569] team0: Port device bond0 added [ 493.221497][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 493.339668][ T51] Bluetooth: hci2: unexpected event for opcode 0x1001 [ 493.788253][ T30] audit: type=1400 audit(1757146725.616:2616): avc: denied { read } for pid=11572 comm="syz.4.886" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 494.347511][T11571] team0 (unregistering): Port device team_slave_0 removed [ 494.505860][T11571] team0 (unregistering): Port device team_slave_1 removed [ 494.564329][T11571] team0 (unregistering): Port device bond0 removed [ 494.794178][ T30] audit: type=1400 audit(1757146726.696:2617): avc: denied { getopt } for pid=11590 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.957586][ T30] audit: type=1400 audit(1757146726.776:2618): avc: denied { create } for pid=11593 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 494.983079][ T30] audit: type=1400 audit(1757146726.806:2619): avc: denied { ioctl } for pid=11593 comm="syz.0.888" path="socket:[23593]" dev="sockfs" ino=23593 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 495.007794][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.789014][ T5923] usb 2-1: USB disconnect, device number 9 [ 496.399268][T11624] netlink: 'syz.3.891': attribute type 29 has an invalid length. [ 496.407201][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 496.790562][ T30] audit: type=1400 audit(1757146728.716:2620): avc: denied { create } for pid=11628 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 497.499328][ T30] audit: type=1400 audit(1757146728.786:2621): avc: denied { read write } for pid=11617 comm="syz.3.891" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 497.524221][ T30] audit: type=1400 audit(1757146728.796:2622): avc: denied { open } for pid=11617 comm="syz.3.891" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 497.547721][ T30] audit: type=1400 audit(1757146729.166:2623): avc: denied { accept } for pid=11628 comm="syz.4.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 498.428307][T11640] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 498.535837][ T30] audit: type=1400 audit(1757146730.336:2624): avc: denied { create } for pid=11638 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.916379][ T30] audit: type=1400 audit(1757146730.346:2625): avc: denied { connect } for pid=11638 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.038719][ T30] audit: type=1400 audit(1757146730.346:2626): avc: denied { bind } for pid=11638 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.133393][ T30] audit: type=1400 audit(1757146730.376:2627): avc: denied { write } for pid=11638 comm="syz.2.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.215106][ T30] audit: type=1400 audit(1757146730.756:2628): avc: denied { bind } for pid=11642 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 499.294224][ T30] audit: type=1400 audit(1757146730.766:2629): avc: denied { write } for pid=11642 comm="syz.0.895" path="socket:[23723]" dev="sockfs" ino=23723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 501.273255][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.388043][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.524553][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 502.524575][ T30] audit: type=1400 audit(1757146733.686:2654): avc: denied { shutdown } for pid=11674 comm="syz.4.902" lport=33074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 502.904730][ T30] audit: type=1400 audit(1757146733.706:2655): avc: denied { read } for pid=11674 comm="syz.4.902" lport=33074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 503.414672][ T30] audit: type=1400 audit(1757146735.336:2656): avc: denied { write } for pid=11675 comm="syz.1.903" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 503.572281][ T30] audit: type=1400 audit(1757146735.456:2657): avc: denied { write } for pid=11700 comm="syz.4.905" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 503.727776][ T30] audit: type=1400 audit(1757146735.456:2658): avc: denied { create } for pid=11700 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.171948][ T30] audit: type=1400 audit(1757146735.466:2659): avc: denied { create } for pid=11700 comm="syz.4.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 505.081670][ T30] audit: type=1400 audit(1757146737.006:2660): avc: denied { ioctl } for pid=11720 comm="syz.1.908" path="socket:[23386]" dev="sockfs" ino=23386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.508456][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 505.741099][ T48] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 505.879760][ T48] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.016806][T11739] input: syz1 as /devices/virtual/input/input11 [ 506.041892][ T30] audit: type=1400 audit(1757146737.926:2661): avc: denied { write } for pid=11735 comm="syz.0.910" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 506.150430][ T48] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.175603][ T48] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.186539][ T30] audit: type=1400 audit(1757146737.966:2662): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=3003 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.211216][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.221108][ T30] audit: type=1400 audit(1757146737.966:2663): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3003 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 506.346672][ T48] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 506.355448][ T48] usb 5-1: invalid MIDI out EP 0 [ 506.600777][ T48] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 506.660559][ T8326] udevd[8326]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.661616][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 507.661638][ T30] audit: type=1400 audit(1757146739.586:2668): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 508.142842][ T30] audit: type=1326 audit(1757146740.026:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.278482][T10723] usb 5-1: USB disconnect, device number 6 [ 508.302914][T11727] delete_channel: no stack [ 508.458770][ T30] audit: type=1326 audit(1757146740.026:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.483901][ T30] audit: type=1326 audit(1757146740.036:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.525776][ T30] audit: type=1326 audit(1757146740.036:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.718663][ T30] audit: type=1326 audit(1757146740.036:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.796846][ T30] audit: type=1326 audit(1757146740.036:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.930127][ T30] audit: type=1326 audit(1757146740.036:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.954270][ T30] audit: type=1326 audit(1757146740.036:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 508.978766][ T30] audit: type=1326 audit(1757146740.056:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11757 comm="syz.2.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 509.160174][T11775] IPv6: sit2: Disabled Multicast RS [ 509.172394][T11775] sit2: entered allmulticast mode [ 510.115032][T11785] loop6: detected capacity change from 0 to 2560 [ 510.132570][T11785] buffer_io_error: 310 callbacks suppressed [ 510.139279][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.149207][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.160402][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.171847][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.181877][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.191900][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.201938][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.211450][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.220142][T11785] ldm_validate_partition_table(): Disk read failed. [ 510.227521][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.237299][T11785] Buffer I/O error on dev loop6, logical block 0, async page read [ 510.250083][T11785] Dev loop6: unable to read RDB block 0 [ 510.261423][T11785] loop6: unable to read partition table [ 510.269797][T11785] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 510.418739][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 510.427797][T11777] net_ratelimit: 1 callbacks suppressed [ 510.427812][T11777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.201775][T11786] block nbd0: Attempted send on invalid socket [ 511.208062][T11786] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 511.869792][ T48] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 512.081055][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 512.091518][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 512.242535][ T48] usb 3-1: config 2 has an invalid interface number: 226 but max is 0 [ 512.251122][ T48] usb 3-1: config 2 has no interface number 0 [ 512.257195][ T48] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 512.713741][ T48] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 512.738657][ T48] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 512.747799][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.759403][ T48] usb 3-1: Product: syz [ 512.763602][ T48] usb 3-1: Manufacturer: syz [ 512.803412][ T48] usb 3-1: SerialNumber: syz [ 513.898958][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 513.898971][ T30] audit: type=1400 audit(1757146745.806:2697): avc: denied { map } for pid=11810 comm="syz.0.925" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.930035][ T30] audit: type=1400 audit(1757146745.806:2698): avc: denied { execute } for pid=11810 comm="syz.0.925" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 514.082337][T11799] pim6reg: entered allmulticast mode [ 514.094847][T11799] pim6reg: left allmulticast mode [ 515.840198][ T48] usb 3-1: USB disconnect, device number 7 [ 516.098598][ T30] audit: type=1400 audit(1757146748.016:2699): avc: denied { create } for pid=11835 comm="syz.1.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 516.164869][ T30] audit: type=1400 audit(1757146748.076:2700): avc: denied { write } for pid=11835 comm="syz.1.929" path="socket:[24627]" dev="sockfs" ino=24627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 517.861135][ T30] audit: type=1400 audit(1757146749.776:2701): avc: denied { getopt } for pid=11847 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 518.416986][ T30] audit: type=1400 audit(1757146750.336:2702): avc: denied { read write } for pid=11861 comm="syz.0.934" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 519.002903][T11866] Device name cannot be null; rc = [-22] [ 519.538458][ T30] audit: type=1400 audit(1757146750.336:2703): avc: denied { open } for pid=11861 comm="syz.0.934" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 519.567190][ T30] audit: type=1400 audit(1757146750.926:2704): avc: denied { create } for pid=11861 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 519.687534][ T30] audit: type=1400 audit(1757146750.936:2705): avc: denied { wake_alarm } for pid=11861 comm="syz.0.934" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 519.748886][ T30] audit: type=1400 audit(1757146750.936:2706): avc: denied { bind } for pid=11861 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 519.986735][T11876] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 520.017111][ T7244] Bluetooth: hci5: Frame reassembly failed (-84) [ 520.581112][ T30] audit: type=1400 audit(1757146752.506:2707): avc: denied { listen } for pid=11880 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 520.632047][ T30] audit: type=1400 audit(1757146752.556:2708): avc: denied { read write } for pid=11868 comm="syz.1.935" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 520.678835][ T30] audit: type=1400 audit(1757146752.556:2709): avc: denied { open } for pid=11868 comm="syz.1.935" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 520.712244][ T30] audit: type=1400 audit(1757146752.636:2710): avc: denied { append } for pid=11868 comm="syz.1.935" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 520.942111][ T30] audit: type=1400 audit(1757146752.856:2711): avc: denied { name_connect } for pid=11880 comm="syz.4.939" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 521.147152][ T30] audit: type=1400 audit(1757146753.066:2712): avc: denied { ioctl } for pid=11885 comm="syz.3.940" path="mnt:[4026532788]" dev="nsfs" ino=4026532788 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 522.088195][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 524.363345][T11917] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 524.596268][T11923] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 524.612035][T11923] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.662175][T11923] vhci_hcd vhci_hcd.0: Device attached [ 524.689393][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 524.689404][ T30] audit: type=1400 audit(1757146756.616:2743): avc: denied { read } for pid=11922 comm="syz.1.949" path="socket:[24770]" dev="sockfs" ino=24770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 524.908439][ T48] vhci_hcd: vhci_device speed not set [ 525.047688][ T30] audit: type=1400 audit(1757146756.946:2744): avc: denied { setopt } for pid=11921 comm="syz.0.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 525.387101][ T48] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 525.494183][ T30] audit: type=1400 audit(1757146757.386:2745): avc: denied { accept } for pid=11922 comm="syz.1.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.843159][ T30] audit: type=1400 audit(1757146757.686:2746): avc: denied { attach_queue } for pid=11935 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 525.956602][ T30] audit: type=1400 audit(1757146757.696:2747): avc: denied { create } for pid=11935 comm="syz.2.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 526.335841][T11924] vhci_hcd: connection reset by peer [ 526.440808][ T7244] vhci_hcd: stop threads [ 526.445192][ T7244] vhci_hcd: release socket [ 526.526774][ T30] audit: type=1400 audit(1757146757.706:2748): avc: denied { write } for pid=11935 comm="syz.2.950" path="socket:[24134]" dev="sockfs" ino=24134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 526.583235][ T30] audit: type=1400 audit(1757146757.766:2749): avc: denied { write } for pid=11939 comm="syz.3.951" path="socket:[24135]" dev="sockfs" ino=24135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 526.606558][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.613796][ T30] audit: type=1400 audit(1757146757.766:2750): avc: denied { mount } for pid=11939 comm="syz.3.951" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 526.626125][ T7244] vhci_hcd: disconnect device [ 526.636438][ T30] audit: type=1400 audit(1757146757.876:2751): avc: denied { mounton } for pid=11939 comm="syz.3.951" path="/183/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 526.663941][ T30] audit: type=1400 audit(1757146758.036:2752): avc: denied { mount } for pid=11939 comm="syz.3.951" name="/" dev="pstore" ino=2901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 529.015350][T11966] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 529.086254][T11966] SELinux: failed to load policy [ 529.572316][T11981] netlink: 5 bytes leftover after parsing attributes in process `syz.0.959'. [ 529.596399][T11981] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 529.620996][T11981] 0ªX¹¦D: entered allmulticast mode [ 529.635718][T11981] veth0_macvtap: entered allmulticast mode [ 529.665171][T11981] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 530.178204][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 530.528026][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 530.535331][ T5923] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 530.569395][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.578656][ T48] vhci_hcd: vhci_device speed not set [ 530.626695][ T5923] usb 3-1: config 0 descriptor?? [ 530.647283][ T5923] hso 3-1:0.0: Can't find BULK IN endpoint [ 530.821258][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 531.286930][ T30] audit: type=1326 audit(1757146762.729:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.346742][ T840] usb 3-1: USB disconnect, device number 8 [ 531.362811][ T30] audit: type=1326 audit(1757146762.729:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.392048][ T30] audit: type=1326 audit(1757146762.729:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.421368][ T30] audit: type=1326 audit(1757146762.729:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.470839][ T30] audit: type=1326 audit(1757146762.729:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.558519][ T30] audit: type=1326 audit(1757146762.729:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.582842][ T30] audit: type=1326 audit(1757146762.729:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.608630][ T30] audit: type=1326 audit(1757146762.739:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.639156][ T30] audit: type=1326 audit(1757146762.739:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 531.665486][ T30] audit: type=1326 audit(1757146762.739:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11985 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f510f78d550 code=0x7ffc0000 [ 532.511406][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'. [ 534.364278][T12025] bridge2: entered promiscuous mode [ 534.943068][T12035] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 535.368597][T12035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.427059][T12037] bond5: (slave geneve2): making interface the new active one [ 535.531287][T12037] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 535.879042][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 535.879056][ T30] audit: type=1400 audit(1757146767.809:2819): avc: denied { setattr } for pid=12042 comm="syz.4.973" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 536.350288][ T30] audit: type=1400 audit(1757146767.899:2820): avc: denied { lock } for pid=12040 comm="syz.3.972" path="socket:[25329]" dev="sockfs" ino=25329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 536.642442][ T30] audit: type=1400 audit(1757146768.569:2821): avc: denied { ioctl } for pid=12028 comm="syz.0.971" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 538.888543][T12070] trusted_key: encrypted_key: key user:syz not found [ 538.893587][T12070] misc userio: Invalid payload size [ 538.907245][T12070] misc userio: No port type given on /dev/userio [ 539.719993][ T30] audit: type=1400 audit(1757146771.649:2822): avc: denied { getopt } for pid=12074 comm="syz.0.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 542.245054][ T30] audit: type=1400 audit(1757146774.159:2823): avc: denied { ioctl } for pid=12104 comm="syz.0.987" path="socket:[25434]" dev="sockfs" ino=25434 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 542.457180][T12109] 9pnet_fd: Insufficient options for proto=fd [ 543.980073][ T30] audit: type=1400 audit(1757146775.899:2824): avc: denied { connect } for pid=12125 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 545.330572][ T30] audit: type=1400 audit(1757146775.919:2825): avc: denied { read append } for pid=12129 comm="syz.2.991" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 545.527883][ T30] audit: type=1400 audit(1757146775.919:2826): avc: denied { open } for pid=12129 comm="syz.2.991" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 546.117753][ T30] audit: type=1400 audit(1757146776.139:2827): avc: denied { ioctl } for pid=12129 comm="syz.2.991" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 546.920914][T12151] syz.3.994 uses old SIOCAX25GETINFO [ 546.944771][ T30] audit: type=1400 audit(1757146778.849:2828): avc: denied { ioctl } for pid=12150 comm="syz.3.994" path="socket:[24415]" dev="sockfs" ino=24415 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 547.241838][ T48] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 547.767846][T12170] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 547.776617][T12170] netlink: 'syz.0.998': attribute type 4 has an invalid length. [ 547.785422][T12170] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.998'. [ 548.323607][ T48] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 548.375358][T12173] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 548.393208][ T30] audit: type=1400 audit(1757146780.289:2829): avc: denied { bind } for pid=12163 comm="syz.3.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 548.475469][ T48] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 548.485794][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.515151][ T48] usb 3-1: Product: syz [ 549.608475][T12185] netlink: 'syz.3.999': attribute type 4 has an invalid length. [ 549.618023][ T48] usb 3-1: Manufacturer: syz [ 549.702369][ T48] usb 3-1: SerialNumber: syz [ 549.732438][T12186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=12186 comm=syz.3.999 [ 550.085831][ T48] usb 3-1: can't set config #2, error -71 [ 550.113048][ T48] usb 3-1: USB disconnect, device number 9 [ 550.158904][ T30] audit: type=1400 audit(1757146782.079:2830): avc: denied { write } for pid=12188 comm="syz.2.1002" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 550.273302][T12191] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1002'. [ 550.411521][T12191] netlink: 'syz.2.1002': attribute type 21 has an invalid length. [ 550.449397][T12191] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1002'. [ 550.544488][T12191] netlink: 'syz.2.1002': attribute type 4 has an invalid length. [ 550.554517][T12191] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1002'. [ 550.586356][T12194] batadv0: entered promiscuous mode [ 550.594036][T12194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.696480][ T30] audit: type=1400 audit(1757146785.619:2831): avc: denied { name_bind } for pid=12220 comm="syz.0.1008" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 553.729822][ T30] audit: type=1400 audit(1757146785.619:2832): avc: denied { node_bind } for pid=12220 comm="syz.0.1008" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 554.064169][ T30] audit: type=1400 audit(1757146785.939:2833): avc: denied { append } for pid=12228 comm="syz.1.1011" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 554.666508][T12244] overlayfs: missing 'lowerdir' [ 554.939362][ T840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 555.263501][ T840] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 555.275661][ T840] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.311921][ T840] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.428718][ T840] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.438496][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.467300][ T840] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.477332][ T840] usb 3-1: invalid MIDI out EP 0 [ 555.765785][T12229] delete_channel: no stack [ 555.894000][T12252] netlink: 'syz.4.1013': attribute type 5 has an invalid length. [ 556.455729][ T840] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 556.511245][ T840] usb 3-1: USB disconnect, device number 10 [ 556.711196][T12263] bond0: (slave bond0): Error: Device is in use and cannot be enslaved [ 558.724557][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'. [ 558.820295][ T30] audit: type=1400 audit(1757146790.649:2834): avc: denied { connect } for pid=12271 comm="syz.1.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 559.198692][T12288] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 559.206476][T12288] netlink: 'syz.0.1021': attribute type 4 has an invalid length. [ 559.214298][T12288] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1021'. [ 559.624937][ T30] audit: type=1326 audit(1757146791.549:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12277 comm="syz.3.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510f78ebe9 code=0x0 [ 559.968467][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 559.984258][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.356312][ T30] audit: type=1400 audit(1757146792.149:2836): avc: denied { kexec_image_load } for pid=12290 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 562.148045][ T30] audit: type=1400 audit(1757146794.049:2837): avc: denied { mount } for pid=12299 comm="syz.4.1025" name="/" dev="ramfs" ino=26754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 562.298452][ T30] audit: type=1400 audit(1757146794.059:2838): avc: denied { mounton } for pid=12299 comm="syz.4.1025" path="/file0" dev="ramfs" ino=26755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 562.725562][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.739694][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.247508][T12321] netlink: 'syz.1.1029': attribute type 29 has an invalid length. [ 564.276699][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 565.652535][ T30] audit: type=1400 audit(1757146797.239:2839): avc: denied { setopt } for pid=12319 comm="syz.0.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 566.894535][ T30] audit: type=1400 audit(1757146798.459:2840): avc: denied { write } for pid=12342 comm="syz.4.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 567.578588][ T30] audit: type=1326 audit(1757146799.479:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb00d8ebe9 code=0x7ffc0000 [ 567.840255][ T30] audit: type=1326 audit(1757146799.479:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb00d8ebe9 code=0x7ffc0000 [ 568.109957][T12349] block device autoloading is deprecated and will be removed. [ 568.151925][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 568.192222][T12360] lo: entered promiscuous mode [ 568.221924][T12360] tunl0: entered promiscuous mode [ 568.226956][T12360] tunl0: entered allmulticast mode [ 568.299409][T12360] gre0: entered promiscuous mode [ 568.304409][T12360] gre0: entered allmulticast mode [ 568.335378][T12360] gretap0: entered promiscuous mode [ 568.426252][T12360] gretap0: entered allmulticast mode [ 568.552095][T12360] erspan0: entered promiscuous mode [ 568.562153][ T30] audit: type=1400 audit(1757146800.479:2843): avc: denied { map } for pid=12352 comm="syz.2.1035" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 568.562224][T12360] erspan0: entered allmulticast mode [ 568.585540][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.698065][T12360] ip_vti0: entered promiscuous mode [ 568.706418][T12360] ip_vti0: entered allmulticast mode [ 568.708154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.720381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.729941][T12360] ip6_vti0: entered promiscuous mode [ 568.735346][T12360] ip6_vti0: entered allmulticast mode [ 568.812215][T12360] sit0: entered promiscuous mode [ 568.817229][T12360] sit0: entered allmulticast mode [ 568.838955][T12360] ip6tnl0: entered promiscuous mode [ 568.844317][T12360] ip6tnl0: entered allmulticast mode [ 568.852866][T12360] ip6gre0: entered promiscuous mode [ 568.858629][T12360] ip6gre0: entered allmulticast mode [ 568.869845][T12360] ip6gretap0: entered promiscuous mode [ 568.878935][T12360] ip6gretap0: entered allmulticast mode [ 568.912217][T12360] bridge0: entered promiscuous mode [ 568.967246][T12360] bridge0: entered allmulticast mode [ 569.040503][T12360] vcan0: entered promiscuous mode [ 569.748137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.758722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.930429][T12360] vcan0: entered allmulticast mode [ 569.936260][T12360] bond0: entered promiscuous mode [ 569.941331][T12360] bond_slave_0: entered promiscuous mode [ 569.947791][T12360] bond_slave_1: entered promiscuous mode [ 569.953608][T12360] bond0: entered allmulticast mode [ 569.965837][T12360] bond_slave_0: entered allmulticast mode [ 569.971849][T12360] bond_slave_1: entered allmulticast mode [ 569.978735][T12360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.985743][T12360] dummy0: entered promiscuous mode [ 569.990867][T12360] dummy0: entered allmulticast mode [ 569.997997][T12360] nlmon0: entered promiscuous mode [ 570.003120][T12360] nlmon0: entered allmulticast mode [ 570.060104][T12360] caif0: entered promiscuous mode [ 570.067224][T12360] caif0: entered allmulticast mode [ 570.095204][ T30] audit: type=1400 audit(1757146802.019:2844): avc: denied { mounton } for pid=12368 comm="syz.1.1036" path="/200/file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 570.122563][T12360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.516006][T12384] overlayfs: missing 'workdir' [ 570.725398][ T30] audit: type=1400 audit(1757146802.649:2845): avc: denied { ioctl } for pid=12386 comm="syz.2.1042" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 570.788054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.796714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.069402][T12394] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.099397][ T30] audit: type=1400 audit(1757146802.999:2846): avc: denied { write } for pid=12392 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 571.828042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.836669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.160077][T12410] netlink: 'syz.2.1044': attribute type 29 has an invalid length. [ 572.168897][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 572.868036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.908052][ C1] net_ratelimit: 1 callbacks suppressed [ 573.908066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.922420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.846287][ T30] audit: type=1400 audit(1757146806.769:2847): avc: denied { write } for pid=12424 comm="syz.1.1048" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.923941][ T30] audit: type=1400 audit(1757146806.849:2848): avc: denied { ioctl } for pid=12424 comm="syz.1.1048" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 574.949980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.958360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.892270][T12437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.951202][ T30] audit: type=1400 audit(1757146807.874:2849): avc: denied { setopt } for pid=12429 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 575.988088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.996725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.212879][ T30] audit: type=1400 audit(1757146808.114:2850): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 576.233931][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.028103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.037111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.045246][ T30] audit: type=1400 audit(1757146808.944:2851): avc: denied { create } for pid=12446 comm="syz.1.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 578.068143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.077419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.108057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.117058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.934100][T12471] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1054'. [ 579.944052][T12471] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 580.038779][T12471] 0ªX¹¦D: entered allmulticast mode [ 580.148042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.156724][T12471] veth0_macvtap: entered allmulticast mode [ 580.158702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.210165][T12471] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 581.188050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.196863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.502571][T12486] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1058'. [ 581.594831][T12486] netlink: 'syz.0.1058': attribute type 21 has an invalid length. [ 581.637586][T12486] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1058'. [ 581.714093][T12486] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 581.762327][T12486] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1058'. [ 581.939272][T12486] batadv0: entered promiscuous mode [ 581.991182][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.228066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.236983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.268053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.826544][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 583.839034][T12509] lo: entered promiscuous mode [ 583.845965][T12509] lo: entered allmulticast mode [ 583.864609][T12509] tunl0: entered promiscuous mode [ 584.094673][T12509] tunl0: entered allmulticast mode [ 584.140189][T12509] gre0: entered promiscuous mode [ 584.145557][T12509] gre0: entered allmulticast mode [ 584.151392][T12509] gretap0: entered promiscuous mode [ 584.156609][T12509] gretap0: entered allmulticast mode [ 584.162590][T12509] erspan0: entered promiscuous mode [ 584.174087][T12509] erspan0: entered allmulticast mode [ 584.308044][ C1] net_ratelimit: 1 callbacks suppressed [ 584.308067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.321953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.338485][T12509] ip_vti0: entered promiscuous mode [ 584.343806][T12509] ip_vti0: entered allmulticast mode [ 584.403351][T12509] ip6_vti0: entered promiscuous mode [ 584.408722][T12509] ip6_vti0: entered allmulticast mode [ 584.415200][T12509] sit0: entered promiscuous mode [ 584.426827][T12509] sit0: entered allmulticast mode [ 584.435837][T12525] No buffer was provided with the request [ 584.449228][T12509] ip6tnl0: entered promiscuous mode [ 584.454513][T12509] ip6tnl0: entered allmulticast mode [ 584.460624][T12509] ip6gre0: entered promiscuous mode [ 584.468700][T12509] ip6gre0: entered allmulticast mode [ 584.629677][T12509] syz_tun: entered promiscuous mode [ 584.706550][T12509] ip6gretap0: entered promiscuous mode [ 584.728046][T12509] ip6gretap0: entered allmulticast mode [ 584.745093][T12509] vcan0: entered promiscuous mode [ 584.946628][T12509] vcan0: entered allmulticast mode [ 585.003233][T12509] bond0: entered promiscuous mode [ 585.265677][T12509] bond_slave_0: entered promiscuous mode [ 585.285905][T12509] bond_slave_1: entered promiscuous mode [ 585.348149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.357299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.376638][T12509] bond0: entered allmulticast mode [ 585.468368][ T5896] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 585.475872][T12509] bond_slave_0: entered allmulticast mode [ 585.482201][T12509] bond_slave_1: entered allmulticast mode [ 585.529662][T12509] team0: entered promiscuous mode [ 585.575249][T12509] team_slave_0: entered promiscuous mode [ 585.605590][T12509] team_slave_1: entered promiscuous mode [ 585.642159][T12509] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 585.691907][ T5896] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 585.711147][T12509] team0: entered allmulticast mode [ 585.752470][ T5896] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 585.813066][T12509] team_slave_0: entered allmulticast mode [ 585.834830][T12509] team_slave_1: entered allmulticast mode [ 585.868236][T12509] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 585.955838][T12509] dummy0: entered promiscuous mode [ 585.972983][T12509] dummy0: entered allmulticast mode [ 585.981976][T12509] nlmon0: entered promiscuous mode [ 585.987156][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.987172][T12509] nlmon0: entered allmulticast mode [ 586.013090][T12509] caif0: entered promiscuous mode [ 586.054710][T12509] caif0: entered allmulticast mode [ 586.090060][ T5896] usb 5-1: config 0 has no interface number 0 [ 586.100855][T12509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.131182][ T30] audit: type=1400 audit(1757146818.044:2852): avc: denied { bind } for pid=12538 comm="syz.2.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.157701][T12529] netlink: 'syz.4.1070': attribute type 29 has an invalid length. [ 586.168111][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 586.190285][ T5896] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 586.221158][ T5896] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 586.253005][ T5896] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 586.263530][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.302774][ T5896] usb 5-1: config 0 descriptor?? [ 586.388114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.397107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.422182][ T5896] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 587.428041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.436884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.747690][ T13] usb 5-1: Failed to submit usb control message: -110 [ 587.784408][ T13] usb 5-1: unable to send the bmi data to the device: -110 [ 587.794121][ T13] usb 5-1: unable to get target info from device [ 587.803508][ T13] usb 5-1: could not get target info (-110) [ 587.813767][ T13] usb 5-1: could not probe fw (-110) [ 587.959335][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1076'. [ 588.039158][T10723] usb 5-1: USB disconnect, device number 7 [ 588.174537][ T30] audit: type=1400 audit(1757146820.054:2853): avc: denied { accept } for pid=12557 comm="syz.0.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 588.235846][T12563] @: renamed from syz_tun (while UP) [ 588.468033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.156050][T12579] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 589.508030][ C1] net_ratelimit: 1 callbacks suppressed [ 589.508073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.522713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.131836][T12589] ip6erspan0: entered promiscuous mode [ 590.217588][T12567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.548076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.556939][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.588027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.597026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.575485][T12609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.583981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.628057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.637061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.166937][ T30] audit: type=1400 audit(1757146825.014:2854): avc: denied { read } for pid=12600 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 594.200984][T12619] netlink: 'syz.2.1088': attribute type 29 has an invalid length. [ 594.644993][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 594.708295][ C1] net_ratelimit: 2 callbacks suppressed [ 594.708313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.722843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.925125][T12629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1089'. [ 594.968463][ T30] audit: type=1400 audit(1757146826.884:2855): avc: denied { execute } for pid=12622 comm="syz.4.1090" name="file2" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 594.983200][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 595.104243][ T30] audit: type=1400 audit(1757146826.894:2856): avc: denied { execute_no_trans } for pid=12622 comm="syz.4.1090" path="/227/file2" dev="tmpfs" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 595.308763][ T840] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 595.748012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.757051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.831430][ T840] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 595.894724][ T840] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 595.918963][ T840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.964196][ T840] usb 3-1: config 0 has no interface number 0 [ 596.009142][ T840] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 596.074396][ T840] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 596.100768][ T840] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 596.130426][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.160724][ T840] usb 3-1: config 0 descriptor?? [ 596.333867][ T840] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 596.788074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.796920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.732293][ T7252] usb 3-1: Failed to submit usb control message: -110 [ 597.748967][ T7252] usb 3-1: unable to send the bmi data to the device: -110 [ 597.760521][ T7252] usb 3-1: unable to get target info from device [ 597.778957][ T7252] usb 3-1: could not get target info (-110) [ 597.828023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.836662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.910591][ T7252] usb 3-1: could not probe fw (-110) [ 598.378381][T10723] usb 3-1: USB disconnect, device number 11 [ 598.868030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.876445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.908028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.916844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.948660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.958098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.987505][T12683] input: syz1 as /devices/virtual/input/input13 [ 601.316315][T12688] netlink: 'syz.3.1102': attribute type 4 has an invalid length. [ 601.324187][T12688] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1102'. [ 601.988040][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.997275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.452927][T12694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1103'. [ 602.552777][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1106'. [ 602.618989][T12697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.903674][ T30] audit: type=1400 audit(1757146834.794:2857): avc: denied { lock } for pid=12690 comm="syz.3.1104" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 603.018908][T12697] bond0: (slave batadv0): Releasing backup interface [ 603.028291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.036971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.275962][T12708] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 603.808823][T12710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=12710 comm=syz.3.1108 [ 604.068197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.140046][T12718] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 604.147875][T12718] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1109'. [ 605.108031][ C1] net_ratelimit: 1 callbacks suppressed [ 605.108048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.122635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.675918][T12713] lo: left promiscuous mode [ 605.687479][T12713] tunl0: left promiscuous mode [ 605.692652][T12713] tunl0: left allmulticast mode [ 605.699162][T12713] gre0: left promiscuous mode [ 605.703856][T12713] gre0: left allmulticast mode [ 605.724073][T12713] gretap0: left promiscuous mode [ 605.730767][T12713] gretap0: left allmulticast mode [ 605.745156][T12713] erspan0: left promiscuous mode [ 605.750475][T12713] erspan0: left allmulticast mode [ 605.756602][T12713] ip_vti0: left promiscuous mode [ 605.761909][T12713] ip_vti0: left allmulticast mode [ 605.767719][T12713] ip6_vti0: left promiscuous mode [ 605.772853][T12713] ip6_vti0: left allmulticast mode [ 605.779406][T12713] sit0: left promiscuous mode [ 605.784073][T12713] sit0: left allmulticast mode [ 605.792824][T12713] ip6tnl0: left promiscuous mode [ 605.797801][T12713] ip6tnl0: left allmulticast mode [ 605.804451][T12713] ip6gre0: left promiscuous mode [ 605.809735][T12713] ip6gre0: left allmulticast mode [ 605.818478][T12713] ip6gretap0: left promiscuous mode [ 605.823681][T12713] ip6gretap0: left allmulticast mode [ 605.833200][T12713] bridge0: left promiscuous mode [ 605.840278][T12713] bridge0: left allmulticast mode [ 605.846599][T12713] vcan0: left promiscuous mode [ 605.851811][T12713] vcan0: left allmulticast mode [ 605.857470][T12713] bond0: left promiscuous mode [ 605.862674][T12713] bond_slave_0: left promiscuous mode [ 605.868499][T12713] bond_slave_1: left promiscuous mode [ 605.873941][T12713] bond0: left allmulticast mode [ 605.879122][T12713] bond_slave_0: left allmulticast mode [ 605.884550][T12713] bond_slave_1: left allmulticast mode [ 605.891571][T12713] dummy0: left promiscuous mode [ 605.896403][T12713] dummy0: left allmulticast mode [ 605.903746][T12713] nlmon0: left promiscuous mode [ 605.908965][T12713] nlmon0: left allmulticast mode [ 605.914549][T12713] caif0: left promiscuous mode [ 605.919720][T12713] caif0: left allmulticast mode [ 605.929614][T12713] bridge2: left promiscuous mode [ 605.935967][T12713] batadv0: left promiscuous mode [ 606.144402][ T30] audit: type=1400 audit(1757146838.054:2858): avc: denied { mount } for pid=12725 comm="syz.3.1110" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 608.467140][ T30] audit: type=1400 audit(1757146840.364:2859): avc: denied { watch } for pid=12759 comm="syz.4.1117" path="/232/net_prio.prioidx" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 609.791064][ T30] audit: type=1400 audit(1757146840.364:2860): avc: denied { watch_sb watch_reads } for pid=12759 comm="syz.4.1117" path="/232/net_prio.prioidx" dev="tmpfs" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 609.819490][ T30] audit: type=1400 audit(1757146840.524:2861): avc: denied { write } for pid=12759 comm="syz.4.1117" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 610.022015][ T30] audit: type=1400 audit(1757146840.614:2862): avc: denied { shutdown } for pid=12761 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 610.093424][T12771] comedi comedi3: 8255: I/O port conflict (0x40404f25,4) [ 610.108375][T12771] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 610.160539][T12771] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 610.218053][T12771] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 610.523921][T12771] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 610.547177][T12771] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 610.697407][T12771] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 610.736455][T12771] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 610.768054][T12771] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 610.940934][T12771] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 610.947369][T12771] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 611.072718][T12771] comedi comedi3: 8255: I/O port conflict (0x800006,4) [ 611.290405][T12771] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 611.307633][ T30] audit: type=1400 audit(1757146843.224:2863): avc: denied { read write } for pid=12778 comm="syz.2.1122" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 611.334469][T12771] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 611.352981][T12771] comedi comedi3: 8255: I/O port conflict (0x80402,4) [ 611.444121][ T30] audit: type=1400 audit(1757146843.254:2864): avc: denied { open } for pid=12778 comm="syz.2.1122" path="/221/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 611.479018][T12771] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 611.584431][T12771] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 611.598614][T12771] comedi comedi3: 8255: I/O port conflict (0x3d,4) [ 611.605485][T12771] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 611.615224][T12771] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 611.641237][T12771] comedi comedi3: 8255: I/O port conflict (0x8000007,4) [ 611.808968][T12771] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 613.129982][T12799] netlink: 'syz.3.1126': attribute type 16 has an invalid length. [ 613.223334][T12799] netlink: 'syz.3.1126': attribute type 17 has an invalid length. [ 614.623001][ T30] audit: type=1400 audit(1757146846.234:2865): avc: denied { firmware_load } for pid=12812 comm="syz.3.1129" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 615.298802][T12827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.269596][ T30] audit: type=1326 audit(1757146848.184:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 616.293063][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.326805][T12823] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 616.346843][ T30] audit: type=1326 audit(1757146848.234:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 616.370377][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.376753][ T30] audit: type=1326 audit(1757146848.234:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 616.400393][ T30] audit: type=1326 audit(1757146848.234:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 616.423835][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.438012][T12823] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 616.482248][T12834] ptrace attach of "./syz-executor exec"[5857] was attempted by "./syz-executor exec"[12834] [ 616.637006][ T30] audit: type=1326 audit(1757146848.244:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 616.909984][ T30] audit: type=1326 audit(1757146848.244:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 617.500390][ T30] audit: type=1326 audit(1757146848.244:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 617.523871][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.839585][ T30] audit: type=1326 audit(1757146848.244:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12822 comm="syz.3.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f510f78ebe9 code=0x7ffc0000 [ 618.313561][ T30] audit: type=1400 audit(1757146848.494:2874): avc: denied { watch watch_reads } for pid=12822 comm="syz.3.1133" path="/224" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 619.022139][T12860] /dev/nullb0: Can't open blockdev [ 619.698451][T12858] befs: (nbd3): No write support. Marking filesystem read-only [ 619.706750][T12858] block nbd3: Attempted send on invalid socket [ 619.713446][T12858] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 619.723038][T12858] befs: (nbd3): unable to read superblock [ 619.738629][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 619.738647][ T30] audit: type=1400 audit(1757146851.614:2886): avc: denied { mounton } for pid=12853 comm="syz.3.1139" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 620.281721][T12878] netlink: 'syz.0.1142': attribute type 21 has an invalid length. [ 620.289744][T12878] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 620.297486][T12878] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1142'. [ 620.692348][T12885] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 620.712939][T12885] overlayfs: failed to resolve './file1': -2 [ 621.165182][ T5903] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 621.418332][ T30] audit: type=1400 audit(1757146853.314:2887): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 622.189136][ T5903] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 622.210322][ T5903] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 622.284516][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 622.304477][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.366404][T12874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 622.393080][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.395303][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.471013][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.152226][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.158610][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.978805][T12908] mkiss: ax0: crc mode is auto. [ 626.050100][ T30] audit: type=1400 audit(1757146857.864:2888): avc: denied { map } for pid=12905 comm="syz.0.1149" path="socket:[28884]" dev="sockfs" ino=28884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 626.162607][ T30] audit: type=1400 audit(1757146857.924:2889): avc: denied { listen } for pid=12905 comm="syz.0.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 626.989113][ T5903] usb 2-1: USB disconnect, device number 10 [ 627.909186][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 628.269582][T12917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.276902][T12917] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 628.293725][T12917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 628.412600][T12917] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 628.529456][T12917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 628.535505][T12917] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 628.572491][T12917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 628.582336][T12917] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 628.595735][T12917] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.602914][T12917] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 630.717118][T12953] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 630.966772][ T30] audit: type=1326 audit(1757146862.632:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510f78ebe9 code=0x7fc00000 [ 631.092419][ T30] audit: type=1326 audit(1757146862.742:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f510f78ebe9 code=0x7fc00000 [ 631.115809][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.649244][T12964] netlink: 'syz.3.1159': attribute type 4 has an invalid length. [ 633.582795][ T840] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 634.118654][ T840] usb 4-1: Using ep0 maxpacket: 32 [ 634.147774][ T840] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 634.219437][ T840] usb 4-1: config 0 has no interface number 0 [ 634.246171][ T840] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 634.290774][ T840] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 634.410061][ T30] audit: type=1400 audit(1757146866.322:2892): avc: denied { create } for pid=12982 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 634.429893][ C1] vkms_vblank_simulate: vblank timer overrun [ 634.449253][T12995] (unnamed net_device) (uninitialized): (slave batadv0): Device is not bonding slave [ 634.461333][T12995] (unnamed net_device) (uninitialized): option active_slave: invalid value (batadv0) [ 634.479919][ T840] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 634.492842][ T840] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 634.507534][ T840] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 634.645732][ T30] audit: type=1400 audit(1757146866.492:2893): avc: denied { sys_admin } for pid=12982 comm="syz.0.1164" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 634.675526][ T840] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.708996][ T840] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 634.853616][ T840] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 634.869566][ T840] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 634.881947][ T840] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 634.901547][ T840] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 634.912462][ T840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.937136][ T840] usb 4-1: Product: syz [ 634.944061][ T840] usb 4-1: Manufacturer: syz [ 634.958876][ T840] usb 4-1: SerialNumber: syz [ 635.185644][ T840] usb 4-1: config 0 descriptor?? [ 635.207449][T12980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 635.216535][T12980] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 635.228719][ T840] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 635.237684][ T840] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 635.253005][ T840] scsi host1: microtekX6 [ 636.377943][T13014] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 636.385746][T13014] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 636.393916][T13014] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1168'. [ 636.712642][T10723] usb 4-1: USB disconnect, device number 14 [ 637.375044][T13029] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 637.943521][ T30] audit: type=1400 audit(1757146869.852:2894): avc: denied { ioctl } for pid=13035 comm="syz.2.1172" path="socket:[29163]" dev="sockfs" ino=29163 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 638.340851][T13029] 8021q: adding VLAN 0 to HW filter on device bond6 [ 639.033458][T13042] netlink: 'syz.2.1172': attribute type 12 has an invalid length. [ 641.001874][T13066] overlayfs: missing 'lowerdir' [ 642.567405][T13087] evm: overlay not supported [ 643.160535][ T30] audit: type=1400 audit(1757146874.942:2895): avc: denied { accept } for pid=13089 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.220451][ T30] audit: type=1400 audit(1757146874.962:2896): avc: denied { mount } for pid=13089 comm="syz.2.1181" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 647.088363][ T30] audit: type=1400 audit(1757146878.962:2897): avc: denied { setopt } for pid=13132 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 649.208268][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 649.451391][ T48] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 649.522088][ T48] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 649.559468][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.577558][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.685366][T13158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 649.714946][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.995902][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.005412][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.045810][ T30] audit: type=1326 audit(1757146881.944:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.069313][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.122214][ T30] audit: type=1326 audit(1757146881.944:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.146963][ T30] audit: type=1326 audit(1757146881.944:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.170447][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.177265][ T30] audit: type=1326 audit(1757146881.944:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.200732][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.230321][ T5896] usb 3-1: USB disconnect, device number 12 [ 650.438485][ T30] audit: type=1326 audit(1757146881.944:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.817375][ T30] audit: type=1326 audit(1757146881.944:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.848679][ T30] audit: type=1326 audit(1757146881.944:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.850190][T13165] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 650.872179][ C1] vkms_vblank_simulate: vblank timer overrun [ 650.880692][ T30] audit: type=1326 audit(1757146881.944:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 650.934775][ T7252] Bluetooth: hci5: Frame reassembly failed (-84) [ 650.978727][ T30] audit: type=1326 audit(1757146881.944:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 651.002229][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.009588][ T30] audit: type=1326 audit(1757146881.944:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13152 comm="syz.2.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 651.468709][T13172] netlink: 'syz.4.1197': attribute type 1 has an invalid length. [ 651.476545][T13172] netlink: 'syz.4.1197': attribute type 4 has an invalid length. [ 651.484787][T13172] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1197'. [ 651.683344][T13176] netlink: 'syz.0.1206': attribute type 4 has an invalid length. [ 651.706877][T13176] netlink: 'syz.0.1206': attribute type 4 has an invalid length. [ 651.740881][T13176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13176 comm=syz.0.1206 [ 652.873077][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 655.063054][T13197] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 655.075391][T13197] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 655.084278][T13197] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1200'. [ 655.326037][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 655.334608][ T30] audit: type=1800 audit(1757146887.234:2910): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1202" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 655.738156][ T30] audit: type=1400 audit(1757146887.344:2911): avc: denied { bind } for pid=13205 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 656.207067][T13217] netlink: 'syz.2.1207': attribute type 8 has an invalid length. [ 657.625352][ T30] audit: type=1400 audit(1757146889.454:2912): avc: denied { write } for pid=13222 comm="syz.2.1210" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 657.648506][ C1] vkms_vblank_simulate: vblank timer overrun [ 659.838684][ T30] audit: type=1800 audit(1757146891.424:2913): pid=13251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1213" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 661.120135][T13261] bond2: (slave veth0_to_bond): Releasing backup interface [ 661.316725][T13261] bond0: (slave bond_slave_0): Releasing backup interface [ 661.461527][T13261] bond_slave_0: left promiscuous mode [ 661.467742][T13261] bond_slave_0: left allmulticast mode [ 661.483524][T13261] bond0: (slave bond_slave_1): Releasing backup interface [ 661.942785][T13261] bond_slave_1: left promiscuous mode [ 661.981593][T13261] bond_slave_1: left allmulticast mode [ 662.364696][T13261] team_slave_0: left promiscuous mode [ 662.382065][T13261] team_slave_0: left allmulticast mode [ 662.514997][T13261] team0: Port device team_slave_0 removed [ 662.533894][T13261] team_slave_1: left promiscuous mode [ 662.540371][T13261] team_slave_1: left allmulticast mode [ 662.559394][T13261] team0: Port device team_slave_1 removed [ 662.671121][T13261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.774992][T13261] bond3: (slave batadv_slave_1): Releasing active interface [ 662.806093][T13261] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 662.814610][T13261] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 662.862751][T13277] delete_channel: no stack [ 662.902043][T13261] team0: Port device netdevsim0 removed [ 663.074558][T13261] bond1: (slave gretap1): Releasing active interface [ 664.097977][T10724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 664.646322][T10724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.657339][T10724] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 664.670605][T10724] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.679991][T10724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.701883][T13277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 664.751742][T13297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1224'. [ 664.794910][ T30] audit: type=1400 audit(1757146896.714:2914): avc: denied { ioctl } for pid=13291 comm="syz.2.1224" path="socket:[29668]" dev="sockfs" ino=29668 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 666.189225][T10724] usb 2-1: can't set config #27, error -71 [ 666.208146][T10724] usb 2-1: USB disconnect, device number 11 [ 666.353266][ T30] audit: type=1400 audit(1757146898.254:2915): avc: denied { sqpoll } for pid=13303 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 666.400871][ T30] audit: type=1400 audit(1757146898.254:2916): avc: denied { cmd } for pid=13303 comm="syz.0.1235" path="socket:[29692]" dev="sockfs" ino=29692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 667.011892][T13322] netlink: 'syz.1.1225': attribute type 4 has an invalid length. [ 667.218805][T13324] netlink: 'syz.1.1225': attribute type 4 has an invalid length. [ 667.500333][T13325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13325 comm=syz.1.1225 [ 669.231718][T13344] futex_wake_op: syz.4.1229 tries to shift op by 32; fix this program [ 670.455222][T13356] overlayfs: missing 'workdir' [ 670.732025][T13358] sp0: Synchronizing with TNC [ 671.046009][T13355] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 671.060527][ T30] audit: type=1400 audit(1757146902.984:2917): avc: denied { relabelto } for pid=13349 comm="syz.4.1234" name="file1" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 671.344440][ T30] audit: type=1400 audit(1757146902.984:2918): avc: denied { associate } for pid=13349 comm="syz.4.1234" name="file1" dev="tmpfs" ino=1346 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 671.551827][ T30] audit: type=1400 audit(1757146903.474:2919): avc: denied { rmdir } for pid=5851 comm="syz-executor" name="file1" dev="tmpfs" ino=1346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 672.474199][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.482136][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.489386][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.498806][T13369] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 672.510833][T13369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 672.546762][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.554859][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.563710][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.570851][T13369] wlan0 speed is unknown, defaulting to 1000 [ 672.577546][T13369] wlan0 speed is unknown, defaulting to 1000 [ 674.322705][T13387] usb usb8: usbfs: process 13387 (syz.3.1241) did not claim interface 0 before use [ 674.552159][T13390] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 674.706249][T13395] bridge0: port 3(dummy0) entered blocking state [ 674.712762][T13395] bridge0: port 3(dummy0) entered forwarding state [ 674.719431][T13395] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.726470][T13395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.733859][T13395] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.740941][T13395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.083481][T13395] bridge0: left allmulticast mode [ 675.122882][T13395] bond_slave_0: entered promiscuous mode [ 675.130072][T13395] bond_slave_1: entered promiscuous mode [ 675.171811][T13395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.253812][T13397] vim2m vim2m.0: vidioc_s_fmt queue busy [ 675.280710][T13395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.983420][T13407] wlan0 speed is unknown, defaulting to 1000 [ 676.187177][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 678.546353][ T30] audit: type=1400 audit(1757146910.454:2920): avc: denied { ioctl } for pid=13424 comm="syz.0.1249" path="socket:[30379]" dev="sockfs" ino=30379 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 678.571622][ C1] vkms_vblank_simulate: vblank timer overrun [ 679.186612][T13435] ipvlan1: entered promiscuous mode [ 679.302639][ T30] audit: type=1400 audit(1757146910.784:2921): avc: denied { bind } for pid=13430 comm="syz.4.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 679.701694][T13437] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1250'. [ 680.708614][T13437] gretap0: entered promiscuous mode [ 681.270606][T13448] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1250'. [ 681.309114][T13448] 0ªî{X¹¦: renamed from gretap0 [ 681.588648][ T30] audit: type=1400 audit(1757146913.444:2922): avc: denied { write } for pid=13450 comm="syz.4.1255" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 681.740176][T13448] 0ªî{X¹¦: left promiscuous mode [ 681.823889][T13448] 0ªî{X¹¦: entered allmulticast mode [ 681.860895][T13448] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 682.656967][T13459] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 682.682041][T13459] netlink: 'syz.4.1256': attribute type 4 has an invalid length. [ 682.857246][T13459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=13459 comm=syz.4.1256 [ 684.204775][ T30] audit: type=1400 audit(1757146916.124:2923): avc: denied { bind } for pid=13468 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 684.906862][T13471] tc_dump_action: action bad kind [ 685.881745][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.892926][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.917535][ T30] audit: type=1326 audit(1757146917.764:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb00d8ebe9 code=0x7fc00000 [ 686.018104][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 686.280801][ T30] audit: type=1326 audit(1757146918.064:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.4.1263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb00d8ebe9 code=0x7fc00000 [ 686.304945][T13502] netlink: 'syz.1.1262': attribute type 12 has an invalid length. [ 686.428507][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 686.460055][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.521986][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.600549][T13507] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1264'. [ 686.611717][T13507] 0ªX¹¦D: renamed from macvtap0 [ 686.707856][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 686.719448][T13507] 0ªX¹¦D: entered allmulticast mode [ 686.724867][T13507] veth0_macvtap: entered allmulticast mode [ 686.737287][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.141650][ T5923] usb 3-1: Product: syz [ 687.145845][ T5923] usb 3-1: Manufacturer: syz [ 687.162604][ T5923] usb 3-1: SerialNumber: syz [ 687.181228][ T5923] usb 3-1: config 0 descriptor?? [ 687.201326][ T5923] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 687.207510][ T5923] gspca_stv06xx: st6422 sensor detected [ 687.234576][T13507] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 687.791260][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 687.805106][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 687.815949][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 688.242545][T13519] infiniband syz2: set active [ 688.247250][T13519] infiniband syz2: added vxcan1 [ 688.254191][ T30] audit: type=1326 audit(1757146919.764:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 688.260711][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 688.306618][T13519] RDS/IB: syz2: added [ 688.311005][T13519] smc: adding ib device syz2 with port count 1 [ 688.311579][ T30] audit: type=1326 audit(1757146919.764:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 688.317204][T13519] smc: ib device syz2 port 1 has pnetid [ 688.318157][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 688.342051][ T30] audit: type=1326 audit(1757146919.764:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 688.377809][ T30] audit: type=1326 audit(1757146919.764:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 688.483410][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 688.597869][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 688.711669][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 688.824483][T13519] vxcan1 speed is unknown, defaulting to 1000 [ 689.008434][ T30] audit: type=1326 audit(1757146919.764:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 689.119876][ T5903] vxcan1 speed is unknown, defaulting to 1000 [ 689.338662][ T30] audit: type=1326 audit(1757146919.764:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 689.384646][ T5923] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 689.438523][ T30] audit: type=1326 audit(1757146919.764:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 689.489684][ T5923] usb 3-1: USB disconnect, device number 13 [ 689.498533][ T30] audit: type=1326 audit(1757146919.764:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 689.696344][ T30] audit: type=1326 audit(1757146919.764:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 689.769615][T13525] SELinux: failed to load policy [ 690.038314][ T30] audit: type=1326 audit(1757146919.774:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 690.499127][ T30] audit: type=1326 audit(1757146919.774:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805d78ebe9 code=0x7ffc0000 [ 690.524899][ T30] audit: type=1400 audit(1757146921.464:2937): avc: denied { ioctl } for pid=13524 comm="syz.1.1269" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 690.772168][T13542] CIFS mount error: No usable UNC path provided in device string! [ 690.772168][T13542] [ 690.784347][T13542] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 691.508071][ T30] audit: type=1400 audit(1757146922.564:2938): avc: denied { read } for pid=13538 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.550264][ T30] audit: type=1400 audit(1757146922.564:2939): avc: denied { write } for pid=13538 comm="syz.4.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 691.907196][T13555] tmpfs: Bad value for 'nr_blocks' [ 691.917573][T13555] IPVS: Error connecting to the multicast addr [ 694.711904][ T30] audit: type=1400 audit(1757146926.634:2940): avc: denied { ioctl } for pid=13581 comm="syz.4.1278" path="socket:[31196]" dev="sockfs" ino=31196 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 695.097611][T13587] tmpfs: Bad value for 'huge' [ 695.108533][ T30] audit: type=1326 audit(1757146926.994:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32bc92adb9 code=0x7ffc0000 [ 695.131883][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.408538][ T30] audit: type=1326 audit(1757146926.994:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 695.432051][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.445826][ T30] audit: type=1326 audit(1757146926.994:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 695.477792][ T30] audit: type=1326 audit(1757146926.994:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32bc92adb9 code=0x7ffc0000 [ 695.501249][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.510367][ T30] audit: type=1326 audit(1757146926.994:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32bc92adb9 code=0x7ffc0000 [ 695.533758][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.786717][ T30] audit: type=1326 audit(1757146926.994:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32bc92adb9 code=0x7ffc0000 [ 696.078445][ T30] audit: type=1326 audit(1757146926.994:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 696.655081][ T30] audit: type=1326 audit(1757146926.994:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bc98ebe9 code=0x7ffc0000 [ 696.848065][ T30] audit: type=1326 audit(1757146926.994:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32bc92adb9 code=0x7ffc0000 [ 697.717439][T13632] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1283'. [ 697.739792][T13632] 0ªX¹¦D: renamed from macvtap0 [ 697.840295][T13632] 0ªX¹¦D: entered allmulticast mode [ 697.845833][T13632] veth0_macvtap: entered allmulticast mode [ 697.965904][T13632] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 699.438790][T13647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.402234][ T30] kauditd_printk_skb: 439 callbacks suppressed [ 700.402252][ T30] audit: type=1400 audit(1757146932.324:3389): avc: denied { read } for pid=13648 comm="syz.4.1298" path="socket:[30710]" dev="sockfs" ino=30710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 703.975336][T13693] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 704.139906][T13697] IPv6: NLM_F_CREATE should be specified when creating new route [ 705.219249][ T30] audit: type=1326 audit(1757146936.924:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 705.401964][ T30] audit: type=1326 audit(1757146936.924:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 705.571829][ T30] audit: type=1326 audit(1757146936.924:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 705.598273][ T30] audit: type=1326 audit(1757146936.934:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 705.627119][ T30] audit: type=1326 audit(1757146936.934:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.133530][ T30] audit: type=1326 audit(1757146936.934:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.177629][ T30] audit: type=1326 audit(1757146936.934:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.201279][ T30] audit: type=1326 audit(1757146936.934:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.228018][ T30] audit: type=1326 audit(1757146936.934:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.258467][ T30] audit: type=1326 audit(1757146936.934:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.282410][ T30] audit: type=1326 audit(1757146936.934:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 706.334677][ T30] audit: type=1326 audit(1757146936.934:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.2.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7fc00000 [ 707.329982][T13721] overlayfs: failed to resolve './file1': -2 [ 708.274370][T13728] netlink: 'syz.2.1301': attribute type 10 has an invalid length. [ 708.295390][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 708.730284][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1305'. [ 710.313289][ T48] vxcan1 speed is unknown, defaulting to 1000 [ 711.141673][T13771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1312'. [ 711.427859][T13777] : renamed from bridge_slave_0 (while UP) [ 714.035499][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 714.035515][ T30] audit: type=1400 audit(1757146945.954:3460): avc: denied { map } for pid=13783 comm="syz.1.1316" path="socket:[31968]" dev="sockfs" ino=31968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 714.035562][ T30] audit: type=1400 audit(1757146945.954:3461): avc: denied { read } for pid=13783 comm="syz.1.1316" path="socket:[31968]" dev="sockfs" ino=31968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 716.506019][T13829] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 716.758622][ T30] audit: type=1326 audit(1757146948.674:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 716.841183][ T30] audit: type=1326 audit(1757146948.714:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 717.324260][ T30] audit: type=1326 audit(1757146948.714:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 717.400671][ T30] audit: type=1326 audit(1757146948.714:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 718.129586][ T30] audit: type=1326 audit(1757146948.714:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 718.196156][ T30] audit: type=1326 audit(1757146948.714:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 718.309614][ T30] audit: type=1326 audit(1757146948.714:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 718.489376][ T30] audit: type=1326 audit(1757146948.714:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13816 comm="syz.2.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f458198ebe9 code=0x7ffc0000 [ 719.716794][T13845] overlayfs: missing 'workdir' [ 719.741228][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 719.741244][ T30] audit: type=1400 audit(1757146951.664:3485): avc: denied { accept } for pid=13848 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 720.562870][T13862] wlan0 speed is unknown, defaulting to 1000 [ 720.569980][T13862] vxcan1 speed is unknown, defaulting to 1000 [ 720.959244][ T30] audit: type=1400 audit(1757146952.884:3486): avc: denied { checkpoint_restore } for pid=13865 comm="syz.4.1332" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 721.613978][T13875] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 724.516960][T13892] syz.1.1337 (13892): drop_caches: 2 [ 725.063052][T13917] tipc: New replicast peer: 255.255.255.255 [ 725.070309][T13917] tipc: Enabled bearer , priority 10 [ 726.072362][T13934] netlink: 'syz.0.1345': attribute type 4 has an invalid length. [ 726.357334][T13937] input: syz0 as /devices/virtual/input/input14 [ 727.861618][T13914] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 727.883942][T13948] tipc: Enabling of bearer rejected, already enabled [ 728.130712][T13954] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 728.139556][T13954] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 728.154205][T13954] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 728.163848][ T30] audit: type=1400 audit(1757146960.074:3487): avc: denied { firmware_load } for pid=13951 comm="syz.0.1349" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 728.184298][ C1] vkms_vblank_simulate: vblank timer overrun [ 728.829617][T13960] netlink: 'syz.1.1348': attribute type 4 has an invalid length. [ 730.466397][ T30] audit: type=1400 audit(1757146962.384:3488): avc: denied { write } for pid=13979 comm="syz.4.1355" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 730.614926][ T30] audit: type=1400 audit(1757146962.524:3489): avc: denied { bind } for pid=13970 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 730.934870][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 731.580118][T13988] bond3: entered promiscuous mode [ 731.586307][ T30] audit: type=1800 audit(1757146963.114:3490): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1357" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 731.597430][T13988] bond3: entered allmulticast mode [ 731.646143][T13988] 8021q: adding VLAN 0 to HW filter on device bond3 [ 733.853815][T14037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 735.419625][T14050] mkiss: ax0: crc mode is auto. [ 736.727645][T14067] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 736.995839][ T30] audit: type=1400 audit(1757146968.914:3491): avc: denied { listen } for pid=14068 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 737.114059][T14071] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 737.122084][ T30] audit: type=1400 audit(1757146968.914:3492): avc: denied { accept } for pid=14068 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 737.348093][ T30] audit: type=1400 audit(1757146969.224:3493): avc: denied { write } for pid=14072 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 737.675273][T14071] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 737.698419][ T30] audit: type=1400 audit(1757146969.224:3494): avc: denied { read } for pid=14072 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 737.751538][T14071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.876827][T14071] bond0: (slave wlan1): Opening slave failed [ 738.185846][T14084] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 738.194258][T14084] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 738.202679][T14084] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1370'. [ 740.313342][T14103] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'. [ 740.735339][T14116] program syz.4.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 743.181287][T14130] tty tty2: ldisc open failed (-12), clearing slot 1 [ 744.166849][T14143] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 744.238726][ T30] audit: type=1400 audit(1757146976.134:3495): avc: denied { mount } for pid=14133 comm="syz.1.1383" name="/" dev="hugetlbfs" ino=33161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 744.709066][ T30] audit: type=1400 audit(1757146976.584:3496): avc: denied { connect } for pid=14145 comm="syz.4.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 745.510362][T14164] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 747.030410][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.036944][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.873754][T14186] loop6: detected capacity change from 0 to 2560 [ 747.887761][T14186] buffer_io_error: 11 callbacks suppressed [ 747.893659][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.903081][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.912311][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.921676][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.931368][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.941002][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.950306][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.959710][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.967951][T14186] ldm_validate_partition_table(): Disk read failed. [ 747.975222][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.984717][T14186] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.995784][T14186] Dev loop6: unable to read RDB block 0 [ 748.006165][T14186] loop6: unable to read partition table [ 748.014165][T14186] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 749.195207][T14198] pim6reg: entered allmulticast mode [ 749.204060][T14198] pim6reg: left allmulticast mode [ 749.322255][T14201] 9pnet_fd: Insufficient options for proto=fd [ 749.349902][ T5923] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 749.369746][ T5923] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 749.377254][ T5923] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 749.401707][ T5923] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 749.434012][ T5923] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 749.778382][ T5923] hid-generic 0006:0004:0009.0003: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 749.839849][T14205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 749.852553][T14205] team0: Port device batadv1 added [ 750.695724][T14207] fido_id[14207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 753.230640][T14234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14234 comm=syz.4.1402 [ 753.623907][T14240] mkiss: ax0: crc mode is auto. [ 756.609370][T14280] comedi comedi1: c6xdigio: I/O port conflict (0x401,3) [ 756.609439][T14280] ================================================================== [ 756.609449][T14280] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 756.609474][T14280] Read of size 8 at addr ffff88807c145430 by task syz.4.1411/14280 [ 756.609488][T14280] [ 756.609497][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.4.1411 Not tainted syzkaller #0 PREEMPT(full) [ 756.609518][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.609528][T14280] Call Trace: [ 756.609534][T14280] [ 756.609541][T14280] dump_stack_lvl+0x116/0x1f0 [ 756.609562][T14280] print_report+0xcd/0x630 [ 756.609580][T14280] ? __virt_addr_valid+0x81/0x610 [ 756.609600][T14280] ? __phys_addr+0xe8/0x180 [ 756.609622][T14280] ? sysfs_remove_file_ns+0x63/0x70 [ 756.609639][T14280] kasan_report+0xe0/0x110 [ 756.609657][T14280] ? sysfs_remove_file_ns+0x63/0x70 [ 756.609677][T14280] sysfs_remove_file_ns+0x63/0x70 [ 756.609695][T14280] driver_remove_file+0x4a/0x60 [ 756.609718][T14280] bus_remove_driver+0x224/0x2c0 [ 756.609736][T14280] driver_unregister+0x76/0xb0 [ 756.609758][T14280] comedi_device_detach_locked+0x12f/0xa50 [ 756.609782][T14280] comedi_device_detach+0x67/0xb0 [ 756.609801][T14280] comedi_device_attach+0x43d/0x900 [ 756.609824][T14280] do_devconfig_ioctl+0x1b1/0x710 [ 756.609849][T14280] ? __mutex_lock+0x1c5/0x1060 [ 756.609869][T14280] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 756.609898][T14280] ? find_held_lock+0x2b/0x80 [ 756.609919][T14280] comedi_unlocked_ioctl+0x165d/0x2f00 [ 756.609938][T14280] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 756.609957][T14280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.609976][T14280] ? do_vfs_ioctl+0x128/0x14f0 [ 756.609999][T14280] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 756.610022][T14280] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 756.610049][T14280] ? hook_file_ioctl_common+0x145/0x410 [ 756.610069][T14280] ? selinux_file_ioctl+0x180/0x270 [ 756.610090][T14280] ? selinux_file_ioctl+0xb4/0x270 [ 756.610112][T14280] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 756.610129][T14280] __x64_sys_ioctl+0x18b/0x210 [ 756.610153][T14280] do_syscall_64+0xcd/0x4c0 [ 756.610173][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.610189][T14280] RIP: 0033:0x7fbb00d8ebe9 [ 756.610202][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.610218][T14280] RSP: 002b:00007fbb01b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.610234][T14280] RAX: ffffffffffffffda RBX: 00007fbb00fc6090 RCX: 00007fbb00d8ebe9 [ 756.610244][T14280] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 756.610254][T14280] RBP: 00007fbb00e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 756.610264][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.610274][T14280] R13: 00007fbb00fc6128 R14: 00007fbb00fc6090 R15: 00007fff30020028 [ 756.610289][T14280] [ 756.610295][T14280] [ 756.610298][T14280] Allocated by task 5835: [ 756.610307][T14280] kasan_save_stack+0x33/0x60 [ 756.610321][T14280] kasan_save_track+0x14/0x30 [ 756.610335][T14280] __kasan_kmalloc+0xaa/0xb0 [ 756.610348][T14280] __kmalloc_noprof+0x223/0x510 [ 756.610363][T14280] security_inode_init_security+0x13f/0x390 [ 756.610380][T14280] shmem_mknod+0x22e/0x450 [ 756.610404][T14280] lookup_open.isra.0+0x11d0/0x1580 [ 756.610427][T14280] path_openat+0x893/0x2cb0 [ 756.610442][T14280] do_filp_open+0x20b/0x470 [ 756.610456][T14280] do_sys_openat2+0x11b/0x1d0 [ 756.610477][T14280] __x64_sys_openat+0x174/0x210 [ 756.610498][T14280] do_syscall_64+0xcd/0x4c0 [ 756.610518][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.610534][T14280] [ 756.610538][T14280] Freed by task 5835: [ 756.610546][T14280] kasan_save_stack+0x33/0x60 [ 756.610560][T14280] kasan_save_track+0x14/0x30 [ 756.610575][T14280] kasan_save_free_info+0x3b/0x60 [ 756.610597][T14280] __kasan_slab_free+0x60/0x70 [ 756.610613][T14280] kfree+0x2b4/0x4d0 [ 756.610633][T14280] security_inode_init_security+0x2eb/0x390 [ 756.610649][T14280] shmem_mknod+0x22e/0x450 [ 756.610667][T14280] lookup_open.isra.0+0x11d0/0x1580 [ 756.610689][T14280] path_openat+0x893/0x2cb0 [ 756.610704][T14280] do_filp_open+0x20b/0x470 [ 756.610719][T14280] do_sys_openat2+0x11b/0x1d0 [ 756.610738][T14280] __x64_sys_openat+0x174/0x210 [ 756.610757][T14280] do_syscall_64+0xcd/0x4c0 [ 756.610775][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.610789][T14280] [ 756.610793][T14280] The buggy address belongs to the object at ffff88807c145400 [ 756.610793][T14280] which belongs to the cache kmalloc-256 of size 256 [ 756.610805][T14280] The buggy address is located 48 bytes inside of [ 756.610805][T14280] freed 256-byte region [ffff88807c145400, ffff88807c145500) [ 756.610820][T14280] [ 756.610824][T14280] The buggy address belongs to the physical page: [ 756.610831][T14280] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c144 [ 756.610845][T14280] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 756.610857][T14280] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 756.610872][T14280] page_type: f5(slab) [ 756.610886][T14280] raw: 00fff00000000040 ffff88801b841b40 ffffea000074a400 dead000000000002 [ 756.610900][T14280] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 756.610914][T14280] head: 00fff00000000040 ffff88801b841b40 ffffea000074a400 dead000000000002 [ 756.610928][T14280] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 756.610942][T14280] head: 00fff00000000001 ffffea0001f05101 00000000ffffffff 00000000ffffffff [ 756.610956][T14280] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 756.610964][T14280] page dumped because: kasan: bad access detected [ 756.610971][T14280] page_owner tracks the page as allocated [ 756.610977][T14280] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5844, tgid 5844 (syz-executor), ts 71449541142, free_ts 71420545663 [ 756.611003][T14280] post_alloc_hook+0x1c0/0x230 [ 756.611026][T14280] get_page_from_freelist+0x132b/0x38e0 [ 756.611039][T14280] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 756.611054][T14280] alloc_pages_mpol+0x1fb/0x550 [ 756.611070][T14280] new_slab+0x247/0x330 [ 756.611090][T14280] ___slab_alloc+0xcf2/0x1750 [ 756.611110][T14280] __slab_alloc.constprop.0+0x56/0xb0 [ 756.611131][T14280] __kmalloc_noprof+0x2f2/0x510 [ 756.611145][T14280] fib_create_info+0x53f/0x46b0 [ 756.611160][T14280] fib_table_insert+0x177/0x1c40 [ 756.611177][T14280] fib_magic+0x4d4/0x5c0 [ 756.611196][T14280] fib_add_ifaddr+0x4d2/0x580 [ 756.611217][T14280] fib_netdev_event+0x38a/0x710 [ 756.611238][T14280] notifier_call_chain+0xb9/0x410 [ 756.611260][T14280] call_netdevice_notifiers_info+0xbe/0x140 [ 756.611282][T14280] __dev_notify_flags+0x12c/0x2e0 [ 756.611299][T14280] page last free pid 913 tgid 913 stack trace: [ 756.611307][T14280] __free_frozen_pages+0x7d5/0x10f0 [ 756.611327][T14280] qlist_free_all+0x4d/0x120 [ 756.611340][T14280] kasan_quarantine_reduce+0x195/0x1e0 [ 756.611354][T14280] __kasan_slab_alloc+0x69/0x90 [ 756.611369][T14280] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 756.611390][T14280] nsim_fib_event_work+0x8bb/0x2e80 [ 756.611412][T14280] process_one_work+0x9cc/0x1b70 [ 756.611428][T14280] worker_thread+0x6c8/0xf10 [ 756.611444][T14280] kthread+0x3c2/0x780 [ 756.611458][T14280] ret_from_fork+0x5d4/0x6f0 [ 756.611474][T14280] ret_from_fork_asm+0x1a/0x30 [ 756.611494][T14280] [ 756.611498][T14280] Memory state around the buggy address: [ 756.611506][T14280] ffff88807c145300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 756.611518][T14280] ffff88807c145380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 756.611531][T14280] >ffff88807c145400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.611541][T14280] ^ [ 756.611550][T14280] ffff88807c145480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 756.611562][T14280] ffff88807c145500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 756.611570][T14280] ================================================================== [ 756.611579][T14280] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 756.611590][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.4.1411 Not tainted syzkaller #0 PREEMPT(full) [ 756.611608][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 756.611618][T14280] Call Trace: [ 756.611623][T14280] [ 756.611630][T14280] dump_stack_lvl+0x3d/0x1f0 [ 756.611650][T14280] vpanic+0x6e8/0x7a0 [ 756.611674][T14280] ? __pfx_vpanic+0x10/0x10 [ 756.611698][T14280] ? __pfx_vprintk_emit+0x10/0x10 [ 756.611722][T14280] ? sysfs_remove_file_ns+0x63/0x70 [ 756.611741][T14280] panic+0xca/0xd0 [ 756.611762][T14280] ? __pfx_panic+0x10/0x10 [ 756.611789][T14280] check_panic_on_warn+0xab/0xb0 [ 756.611804][T14280] end_report+0x107/0x170 [ 756.611821][T14280] kasan_report+0xee/0x110 [ 756.611839][T14280] ? sysfs_remove_file_ns+0x63/0x70 [ 756.611859][T14280] sysfs_remove_file_ns+0x63/0x70 [ 756.611877][T14280] driver_remove_file+0x4a/0x60 [ 756.611898][T14280] bus_remove_driver+0x224/0x2c0 [ 756.611916][T14280] driver_unregister+0x76/0xb0 [ 756.611937][T14280] comedi_device_detach_locked+0x12f/0xa50 [ 756.611960][T14280] comedi_device_detach+0x67/0xb0 [ 756.611978][T14280] comedi_device_attach+0x43d/0x900 [ 756.612001][T14280] do_devconfig_ioctl+0x1b1/0x710 [ 756.612026][T14280] ? __mutex_lock+0x1c5/0x1060 [ 756.612047][T14280] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 756.612076][T14280] ? find_held_lock+0x2b/0x80 [ 756.612096][T14280] comedi_unlocked_ioctl+0x165d/0x2f00 [ 756.612116][T14280] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 756.612135][T14280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.612155][T14280] ? do_vfs_ioctl+0x128/0x14f0 [ 756.612178][T14280] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 756.612201][T14280] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 756.612229][T14280] ? hook_file_ioctl_common+0x145/0x410 [ 756.612249][T14280] ? selinux_file_ioctl+0x180/0x270 [ 756.612270][T14280] ? selinux_file_ioctl+0xb4/0x270 [ 756.612293][T14280] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 756.612311][T14280] __x64_sys_ioctl+0x18b/0x210 [ 756.612334][T14280] do_syscall_64+0xcd/0x4c0 [ 756.612355][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.612371][T14280] RIP: 0033:0x7fbb00d8ebe9 [ 756.612403][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.612419][T14280] RSP: 002b:00007fbb01b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.612437][T14280] RAX: ffffffffffffffda RBX: 00007fbb00fc6090 RCX: 00007fbb00d8ebe9 [ 756.612449][T14280] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000007 [ 756.612460][T14280] RBP: 00007fbb00e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 756.612470][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.612481][T14280] R13: 00007fbb00fc6128 R14: 00007fbb00fc6090 R15: 00007fff30020028 [ 756.612498][T14280] [ 756.612708][T14280] Kernel Offset: disabled